Warning: Permanently added '10.128.1.169' (ECDSA) to the list of known hosts. 2023/05/23 06:11:02 fuzzer started 2023/05/23 06:11:03 dialing manager at 10.128.0.169:30004 syzkaller login: [ 91.164761][ T5003] cgroup: Unknown subsys name 'net' [ 91.314001][ T5003] cgroup: Unknown subsys name 'rlimit' 2023/05/23 06:11:18 syscalls: 203 2023/05/23 06:11:18 code coverage: enabled 2023/05/23 06:11:18 comparison tracing: enabled 2023/05/23 06:11:18 extra coverage: enabled 2023/05/23 06:11:18 delay kcov mmap: enabled 2023/05/23 06:11:18 setuid sandbox: enabled 2023/05/23 06:11:18 namespace sandbox: enabled 2023/05/23 06:11:18 Android sandbox: /sys/fs/selinux/policy does not exist 2023/05/23 06:11:18 fault injection: enabled 2023/05/23 06:11:18 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2023/05/23 06:11:18 net packet injection: enabled 2023/05/23 06:11:18 net device setup: enabled 2023/05/23 06:11:18 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/05/23 06:11:18 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/05/23 06:11:18 NIC VF setup: PCI device 0000:00:11.0 is not available 2023/05/23 06:11:18 USB emulation: enabled 2023/05/23 06:11:18 hci packet injection: enabled 2023/05/23 06:11:18 wifi device emulation: enabled 2023/05/23 06:11:18 802.15.4 emulation: enabled 2023/05/23 06:11:18 fetching corpus: 0, signal 0/0 (executing program) [ 91.816140][ T7] cfg80211: failed to load regulatory.db 2023/05/23 06:11:19 starting 6 fuzzer processes 06:11:19 executing program 1: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040085}, 0x48010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_virt_wifi\x00', 0x0}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000180)=@can, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/200, 0xc8}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/6, 0x6}, {&(0x7f0000001340)=""/37, 0x25}, {&(0x7f0000001380)=""/160, 0xa0}, {&(0x7f0000001440)=""/87, 0x57}, {&(0x7f00000014c0)=""/114, 0x72}, {&(0x7f0000001540)=""/139, 0x8b}, {&(0x7f0000001600)=""/97, 0x61}, {&(0x7f0000001680)}], 0xa, &(0x7f0000001780)=""/185, 0xb9}, 0x20) r1 = socket$isdn(0x22, 0x3, 0x21) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000001880), 0x4) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x14, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x50) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001b40), r3) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x20, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}}, 0x22004000) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x38, r5, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '+&'}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004800}, 0x4) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000001d80), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x24, r6, 0x630, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x801) socketpair(0x10, 0x3, 0x800, &(0x7f0000001ec0)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = syz_open_dev$mouse(&(0x7f0000001f00), 0xf11f, 0xc000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000002000)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x78, r5, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8, 0x1, r8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x44000) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r9 = syz_open_dev$vcsa(&(0x7f0000002080), 0x40, 0x100) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x74, r5, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x16, 0xa, '/dev/input/mouse#\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x881}, 0x2000c0c1) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000002200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000002240)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x34, r6, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x4000840) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000002380), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000023c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f00000024c0)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x44, r12, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x4c883) r14 = syz_open_dev$vcsa(&(0x7f0000002500), 0x5, 0x482300) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r14, &(0x7f00000026c0)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x68, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x80) 06:11:19 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x4, 0x8c01) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x8081, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000003c0)={r3, 0x0, r5, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x128d, 0x1, 0xd6, 0x2}, {0x7, 0x3f, 0x2, 0x8518}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000480)={0x0, 0x101, 0x5}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x800) clock_gettime(0x1, &(0x7f00000005c0)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_FREEZE(r7, 0x400c620e, &(0x7f0000000640)={r4, 0x1, 0x1}) r8 = syz_open_dev$vcsa(&(0x7f0000000680), 0x5, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r8, 0xc00c620f, &(0x7f00000006c0)={r4}) socketpair(0x9, 0x4, 0x6, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_bcm(r9, &(0x7f0000000980)={&(0x7f0000000740)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/253, 0xfd}], 0x1, &(0x7f0000000900)=""/122, 0x7a}, 0x10000) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a40)='./binderfs2/custom0\x00', 0x802, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_open_dev$mouse(&(0x7f0000001c40), 0x0, 0x151202) io_submit(0x0, 0x4, &(0x7f0000001cc0)=[&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x7, 0x1, r7, &(0x7f00000009c0)="7dc7aa6b75a5325404ec97bd91b45ef93d124e6498b1b02bcf2981801c72311e7986a456013d4ef3f535fc05a4c9d1282869e9c39ff017", 0x37, 0x8, 0x0, 0x0, r8}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x6, 0x0, r10, &(0x7f0000000a80)="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", 0x1000, 0x80, 0x0, 0x1, r1}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x2, r9, &(0x7f0000001ac0)="7b5a0bc93d5a609908a9a04cf25e67077141247a5cef93b8e3f39548127b110de5ea1027de0440abca4dd2cdceec1c37aeb2958e1544ca25b2d67a7e4a0cf5b280750af082d917e0ebbc", 0x4a, 0x100000001, 0x0, 0x2, r8}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x2, 0x3f, r11, &(0x7f0000001b80)="70d70eecc11dfea13cf945a94cf6e9d602f68a203ff80c4aa9a2f7a510357a7535d7a4bc60334d073c4d97b327f7d69d004facb24084920aeed8444abec802ec9133af3d37e2cb18539e5afb3d1d2598671a765a2aa5e708cc8c277713ed90649e8999a7d75d2356c0f14bad037435cdc87dce04fa65816fe7776db1476c319dfc5de07ba8ccfb6c0527b2c9f80fb75c5de5b5", 0x93, 0x0, 0x0, 0xd39843b8aba4d44f, r12}]) socketpair(0xb, 0xa, 0x97, &(0x7f0000001d00)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000001d80)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002080)={r1, 0xe0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001dc0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000001e00)=[0x0], &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001e80)=[{}], 0x8, 0x10, &(0x7f0000001ec0), &(0x7f0000001f00), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001f40)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002380)={r8, 0xe0, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000020c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000002100)=[0x0], &(0x7f0000002140)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000002180)=[{}], 0x8, 0x10, &(0x7f00000021c0), &(0x7f0000002200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002240)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002400)={'wg0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r13, &(0x7f0000002a00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000029c0)={&(0x7f0000002440)={0x550, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r14}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x3, 0x80, 0x4}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffbff}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}]}, 0x550}, 0x1, 0x0, 0x0, 0x4}, 0x60000) 06:11:19 executing program 5: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x422801) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000080)={0x0, 0x0, "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", "f6b7e2d94c4b990d58c99f0fbfdcbb148a4a1592f252c34e078802f5a8aad384c7ec33124322d8676eb7bedec7b6731f51b2e99492e4f32e4d7cfffc128c6517e51a6e91e43707c6adca12b490e376359519b754473c68db54033ae5288076fe5668dafa3d091a89fcb0e2f430f1f01dbe6769f0588f0ceab5071fd83c5a4926d03439e0c843b899eec794510bbc9110813dff7b2afcbf0a92ef672464779c902adedc159558ff55b444ee947f54ab511cf227f1c56b65d6c2ea1da3cde2ef6490658333f382f8d98774c13b3d0c90fcd49bdfce3ce6d6535d7a4532834e4e12e6886ca05768e6737944919a5b87783b4ee039e27a1df528eb9a0ccc2bacced7bab611c4f77c466304add3c238996c49bd6ea4d0fe360c2935ab18140cd5c7523eb9a35a08f09db67a1e04c03a7b3372ec42f26863669c7f44c26b7d662f2afe14117ec96e4ee6cccaf9655827e595309ffa1a8a7a64f029bb744abda4b9de241dbcb0c495b0c6cf179407ace799ac2731a67c0a1cff47186c91edb961b3c778aec40fe2903efe2c00386b1b426105adf7a450626677f392b37d22d217bff5dddeed4b7c42969edc31b14eacf261f1f05aed364f521a2ba622aa35f39c15f2414302d53a15c9a458c0dc206e51838ed94e683f564e849989ecc40bb28926901bb5202f7a5d0f5711719f20aab34ece46eeac5dbd66789fcef857122626f051513f6950b48a55c456bb02bda7750dd7f08208fc6221259b4f1d4e4fdea84a50bc16de3a3e9978476ad956f6c43556d0a5d13a746f4c32dbb1f71bc775f2cdade95b90dce96eb063c671a6df597235563a924f948f120e7979bd3e51acf4f4538ce782d367d6137248f35a84099a5fcd686e334fa31759fecd571a89b057ba1d741465b8c02df566b6cf2a6fb570d4d2182a9759a2c6836d4ba800357ea7a878ebc7653535996e3da15cc631b2b68df48bf7964292b8ab72f2e06b96772c6960475934e874586ca42757049e66e48d32b0a8adf32ec921b35960dfb45cc89ba95f0e87480899061d88518115176f1b361258b59c5a761c1ae901d9c3842150def925cbc2f31666ce5412e6ec917bd1416e43665a1520f02b8640d8a68a8964726856063cf0e419ff23c4df8a8deb39472558f5ad762470cca4e41e897a138469b62e3ddbcbd733a655f589b523fd6a08fcc99573570764d94f607e720b05410d10f1a3148c0c59717d2691008a46603e11fb8c53d19de23ca7f40c6f91df62b10c22118d5793b40f78ec5cdbc42c8b2d0ab606cd1c26c975aa783ba8d6e59ad3e62aa861c8f0ad4f37440e595d633dd918e5e2f0af9a8997f915a784d66b94b11248a75ad8437e7a8a86e7187e10d99191edd53e0573a08410b944be0019ab05e075b88f836cc84db492ccfaf7bece49a1035eeaaf7f8d98d00573542cd664f815ffa431def014f94b9a4f85b6e6124039e65c1a140d410cf0fe47da88a66d12857019a070dfc448eb636147f80d183dc0d0965c8b747ea2ece7d09113b37b54fd4688700a867c813e4405c83cc8e1ca57638bfb424477019ead08b0dc134ebb48651a49fdacccba94521d25e718dd329019ee0535b1a7a98fcc756fa9d5971d54ef35caec4ae54d16fdebd0a4e7af0882479681da8a6f660793b3d2cd92d974899b93f03bcc8a8fe75158941a0b3bd56536bf3873d66a260d7596ba4d51b6cac19ab949c6c20cd18b549ab11e3539fd2045974b7131414cd2a410986f392e4da5f6a6966cfada57543b28f92ed5ecc42f78ce5a5607da14f5b4c74aa2a037b911073894831dbd2ef59737250abacbeff0ab4237ea8a6307d9b631c6b22047599a6dced07380b16864f59daebe15d91ebb3263476a91931da9cb18be1093b7774b48199ef5919106f46dfde7002eea8eacb2e2e2e727a06583170789e98ca7daf022257f11a912cb148599992bad55bcffaec0306aedd752fb6df8a8af4b8a45889656deea4fb1ca6d6e56035ae21cbc764a9dacef5d168a31348665e329506636c02261580d30c45c9049d7cf389bd53e1e0feaf7a0a5daf065c4639a5c194bc7084b4b44cd48e84c9e762100ae90c7c54ded8ae7a9ffb3c597c32b9081e7451f31d3eedf2641b9382f80d5c4fb663904acc4c2bd357085cf8fe3ffdec9a8d3eed8d9964a04571159030d24ade0794f9ef4f7e72e0db5b6449d1b0d919f6cdd3797061a7a6904ed8ec1ceafd78bb1d9476fabd4441305c221a8b39dc76a1bb99373c2e7b433df47b075c60f7cdedd587aaa32c81e832a620c67c12abe6427ff8e50e3c1d3fc20eb00d29dbe70fbcde0c14c3d398c52b603c95b5f224099c0db2d184f300f2e36c3b65cb4f0b5c7894b161ef3e15268f29db23dff6ab6d6361903febba7326cdf55ce37fcc22ec5f3a8c9c2bc65a6d00ecf71644025eb1ef4e33b59680d97c35b3a2c0d8bab7c778eaa65b50d81fdec76d8b4c20e20f697cbe4b7fa18dad5cdf615b0b06768124089698cb5b2ad794e8d484dec014d689e6fefd4979cff8f47c557d62824fe0b199e0d09ad104d6db52a6487f0be5b7664aa3aea573ebeaa3bde400bde4e3a43ca9c8c23cee3784cbbb5d7929f593ee805d857d0ee0618cf1e6b59fd4aa1e272b42e4a3162cd19ee8e47d5fc77bf69b0b397ef60b23eb6e5dcb120f9448dcce4895417abd087cd4b3603f9a232994fdeb755674e901db0ba3ebb1af8670a1e3819b77b0d9060bac2a24cdf8fce1bc4846d3ed5932fbde973e46fe60baf250098a164e3cce6e1a2cfd3d2626cd6c0e54fd5a0e4caef41cd0eb89b22540bfd6cd340daf392fb89d2fb6f1656a724b53af707bc1641bc93f7d0aeb7e4460ac568021354412f55a60838ec57284937164b9163a7bf2aaf170bbbaa13e9d996c3d1860474ae0ee48294a03421b5bc9a8cbe5a2465651655f8551ab69d7702fe11bf09062c6f88d8e22668aaeea4d7ce0adfbb2a10bbbef7bdc29e8e74ed0612751d394f3fdd0394b0c34d3fa33be9e14980ab1a871d220bf8181d46a0a0d90a9c6d4a290336e3589a6dc39a93f5bd15521f6c50678cafb1eb0137502492ba71e170da90909dd7fa6461c4bf01dcc2ab04d18853d34beed07814eda1eafc5556de97a361c6b97fc5f8db6c9e477c4ecdd9e364c0a1f234afa7b59eefbfd235099430e11db662300828ce1fc4bb657eb32d3e06931b080ce12c99013233cdb35c156b018152d335349de660c24c6a2146747c3f392d5740eafdd9741741265f46f94411840b7181e614bddbc979854d1abcaeef7ae8af0876f11a58fb6f4dc348460935e8cecb1b24d6f642918e523a101e0856d4ebe46aa0b3b8f35fbf9f553f361c1f44949c7171a437112bd7c2da0860ddbba93e1374a0943f0b13967a630ddf54994a2890ca335866cd48aa2890976513d1f464ee8d211645a8a1da9ed40c4f95ea08dd8b5a932a37bcec28b63114afca76b3e7608bdd12337f2f19ff27648e7786b79d05adbcea66a33477e77314bf8e4b3a51266cbe7bddb81dbe40c1db99be6db9d84dc2bb7df3eca2e96104ce5973e8368404f24db9e20ddadeb4cc88d26557be0f29986c9bee3c4d11c29cce2199d84056e602f21d11cad0a8571946460d1ea31cf93d218cccac467aadfc202c491ab169d660c2b4227677eccd904b878fefca6e7aaa9249ec896e52167279823e10f2ff1087af1ca6a4f975d55cff79211bab161b3911a8eba44b8809d66b8ac780c604bf4b887d5fe12515b0599dd9e6e22f584cf8f73534742dc95314efcb3a79ffb03fe6c388721d6abfad26a2566e1afd64edc670487fef9646b26cdeeb0abffac49c821856c8c631da2ec8a631e91ab590ebf43ca15f73236a02e070e43a920dd5c010a6d408ac43d550f1108109b84f71347e062b3f784b137c5513fa050fd44588feaebdb4441034a4d3e63e330378d35cfe57ae7ea20eb7a060d15a5bb82a09fefa10818890264967187a66c4fb9ef9d5abface89af124cf624f32aabcebf9551a9e5d62bbb6c18afb790510d66d01399de8890d3e732dc6b81bd898d230bd27a5cd62b4a1ebc3c057387e584bf63c5344424957c69f164971bd17cb85b4903560536ea1c03e571e750d0af9b4c8b3785a5604559295aaa62cb154cc860cadf60c3e9118d30e37a8d9b5bf8012248cacb63bcbaca04acbdf9be45aaad4306e1ce8d79283bdeaf369bf1a3fb0a4f5497350d264f67f49df4b4362884ed9258c9058c887bac73099dce10c0c47e84bb9ea0f3680da250576b65e7572453fe1d3dff56954cd4e053e9e788a5a9e50eec5fa01b29e57aa16cc665b883b1b5e7ebd95f3a108b2eadbc0dde05ee48e0125630b6bbe47725bd070ebd7bd809b2ff4cc4659427d886a76d520dd2beb19764a70c580c27d9c2cda5cd1d7d10043944ebd506e6986b9daec5e6a9f45322e14b33346be7f8c56897307fd8d49420bdc41549c8276235604c11487ddd62df9a5c77424078920297637d936d087c19c94db56197485982bbd016273aae53a53b92ce458af20cd69bfc82faed061e9a09f42158517a7f625fc479811af93767c6585a211bdf3665cd8666b80c067b6a7bd15313e3be8b86318d094e4d520f0e661deba5c1fcc1bdf0d93c5db2bedbfa3e7d35fa84637cdb2a0d100492073ec63e51620a036f9e143b6b270556c674af69dfd289e1b971f1acac7b9b8e0cea6ccb6a77d6ce9bdb70fe5118bfee4fe928dbeee817405d8fec24689257ffcefde2c2017081436cc06650d2bbeaa821cdc4c16caa2f0b07cadc1ed30149a104bc4407b21848d45e95160eac6666467a4faedb0c55312f7b6980558fe09797523b591c5cbdebf5c2f6ebe47299086c71080dae5af2c8ec264ebebe037c2c4bfe5a8a809a614e4020d82d69edad81a9f838e0c8466549a1601e56f55738886e75eba2596cba569c7610fccb5028109dec75f0c20f5bb12751ca5368b2f74e09dcb617b70608d9b94303e4b08b376c19629ed86e31fc4b69ab0e4fedd354caf80db7dd1c8648005d401e46dfd6ca09c2d8b2ec0a453331987d98daf2eaa1c2f6f9c17fffbd7708970809d9e649a030d2b790d8ff24347d63571788e408efe6cfae1467ad968c880ba86a323d7bd4f83f56f251e0e03e6fd8d8b89447a4bca3734ecab2d2aecb4a4b34ec447d8a99670124b5712bf38c7782e5eac4c4cbb9456b34c330c1323c0bed13f38e3e5c9d9e13705ced596921237f1c9a7d9352c5a7db2b239f7255664bd51300118b63d19aa95b0293cf6c706835d98c76dc2fd45676fc1b192cfc7bd0319a2686ed25d7115c0296a9666fb5827efeac7049dd98a6eeffcb104d3a529c29ba5361b6e546655786f680646c68a02112c5bfb5c6b3721a6c07da6b3d76873e75"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001080)={{r3, 0xbc, 0x8001, 0x80000001, 0xfff, 0x100000000, 0x5c7, 0x7, 0xfffffffe, 0x969, 0x101, 0x0, 0x1, 0x5, 0x6}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) clock_gettime(0x5, &(0x7f0000001140)) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001180)={r3, 0x7}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002180)={0x0, ""/256, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000002380), r5) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000023c0)={0x9, 0xefe7, 0xd19}) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x23f) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000002400)={0x2}) r6 = syz_open_dev$vcsa(&(0x7f0000002440), 0x51, 0x20400) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000002480)) r7 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x3ff, 0x101000) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002540), r6) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0xc0000504}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x40, r8, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x4008800) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000002700)={0x80000000, &(0x7f0000002640), &(0x7f0000002680)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000002740)={r9}) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x9) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000002e00)={0x0, 0x4, 0x0, &(0x7f0000002840)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f00000029c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000002c80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000002dc0)=[{}]}) ioctl$UI_GET_VERSION(r7, 0x8004552d, &(0x7f0000002e80)) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000002ec0)={0x0, r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002f40)={0xffffffffffffffff, r10, 0x0, 0xa, &(0x7f0000002f00)='wireguard\x00'}, 0x30) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002f80)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r11, 0xd000943e, &(0x7f0000002fc0)={r2, r4, "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", "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"}) r12 = timerfd_create(0x5, 0x80c00) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004640)={0x118, 0x0, &(0x7f0000004480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000040c0)={@ptr={0x70742a85, 0x0, &(0x7f0000003fc0)=""/31, 0x1f, 0x2, 0x24}, @fd={0x66642a85, 0x0, r12}, @ptr={0x70742a85, 0x0, &(0x7f0000004000)=""/175, 0xaf, 0x2, 0x22}}, &(0x7f0000004140)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000004180)={@fda={0x66646185, 0x6, 0x1, 0x8}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000004200)={0x0, 0x20, 0x38}}, 0x40}, @increfs_done={0x40106308, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000043c0)={@ptr={0x70742a85, 0x1, &(0x7f0000004240)=""/160, 0xa0, 0x1, 0xa}, @fda={0x66646185, 0x2, 0x0, 0x37}, @ptr={0x70742a85, 0x0, &(0x7f0000004300)=""/141, 0x8d, 0x2, 0xf}}, &(0x7f0000004440)={0x0, 0x28, 0x48}}}, @decrefs={0x40046307, 0x1}, @register_looper, @increfs={0x40046304, 0x3}, @free_buffer, @increfs={0x40046304, 0x401}], 0x4c, 0x0, &(0x7f00000045c0)="57764f8779a0939d205abc3c46cf3f61b5b0702912235aa77f4120c4bae819afacdd592df802b690c4d98a49a9f97bffa6d5d7b3f16406a1158319a535fb421707c1af4a9076777ba7c73a03"}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000004700)={0x4, &(0x7f0000004680)=[{}, {@none}, {@none}, {@none}]}) 06:11:19 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) r9 = syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x7) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x2) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:19 executing program 3: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x30d000, 0x0) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000010c0)={&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@bloom_filter={0x1e, 0x5, 0x7, 0x7, 0x1016, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0xd, 0xe7, 0x4, 0x5, 0x482, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x8, 0x5, 0x7ff, 0x80000001, 0x4c0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@bloom_filter={0x1e, 0x4, 0x1f, 0x1e, 0x2, 0xffffffffffffffff, 0x36, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001340)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}], &(0x7f0000000080)='GPL\x00', 0x7, 0x73, &(0x7f00000000c0)=""/115, 0x41100, 0x12, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xb, 0x7, 0x7}, 0x10, 0x13dc9, r0, 0x0, &(0x7f0000001300)=[0x1, 0x1, r1, 0x1, r2, r3, r4]}, 0x80) io_setup(0x3861, &(0x7f00000013c0)=0x0) r7 = syz_open_dev$vcsa(&(0x7f00000014c0), 0x5, 0x400000) io_submit(r6, 0x2, &(0x7f0000001540)=[&(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x6, r5, &(0x7f0000001400)="ed3f42afa070a90aa3a6a7c5e835f99e0e0977c93d899914a9351ecb7b07dca8efdbef3c201a024eb9", 0x29, 0x7, 0x0, 0x3}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x7, 0x3ff, r5, &(0x7f0000001480)="fb8b0c2040363d3ceea9c9c95d48b5cb7ce847f2b0403ce1a350e676726567c9a90a2460ddbd5883087af962", 0x2c, 0x3, 0x0, 0x2, r7}]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001980)={r0, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000016c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001700)=[0x0], &(0x7f0000001740)=[0x0], 0x0, 0x8, &(0x7f0000001780)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000017c0), &(0x7f0000001800), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001840)}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0x0, 0x100, 0x6, 0x4, 0x600, 0xffffffffffffffff, 0x10001, '\x00', 0x0, r7, 0x3, 0x2, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a80)=@bpf_lsm={0x1d, 0xa, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@generic={0x3, 0x0, 0xa, 0x1, 0x7}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @alu={0x7, 0x1, 0x3, 0x1, 0x1, 0xfffffffffffffffc, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x2, 0x0, 0xfffffffffffffff8, 0x1}]}, &(0x7f0000001600)='GPL\x00', 0xfcb, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x1b, r7, 0x8, &(0x7f0000001640)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001680)={0x1, 0x7, 0x4, 0x1}, 0x10, r9, 0x0, 0x0, &(0x7f0000001a40)=[r7, r10, r1]}, 0x80) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001c00)={'dvmrp1\x00', 0x0}) r12 = syz_open_dev$mouse(&(0x7f0000001c40), 0x9, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x12, 0xc, &(0x7f0000001b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8810, 0x0, 0x0, 0x0, 0xa0000000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6fe0b622, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x1, 0x2, 0x3, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x77e9, 0x0, 0x0, 0x0, 0x200}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}]}, &(0x7f0000001b80)='GPL\x00', 0x100000, 0x15, &(0x7f0000001bc0)=""/21, 0x40f00, 0x4, '\x00', r11, 0x8, r12, 0x8, &(0x7f0000001c80)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000001cc0)={0x5, 0x5, 0x1, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001d00)=[r10, r2]}, 0x80) r13 = syz_open_dev$mouse(&(0x7f0000001dc0), 0x9, 0x400200) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f0000001e40)={'wg2\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002140)={r0, 0xe0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000001ec0)=[0x0, 0x0], &(0x7f0000001f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001f40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001f80), &(0x7f0000001fc0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002000)}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'macsec0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000021c0)={'pimreg1\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000002200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r13, &(0x7f0000002a80)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002240)={0x7c8, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x16c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9a3}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7d}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x70b, 0x40, 0x6, 0xc70c}, {0x5, 0x8, 0x9, 0x80000000}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r11}, {0x144, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xc0, 0x4, 0xac, 0x6}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x4}}, {{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xddf1faee}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x27}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x7c8}, 0x1, 0x0, 0x0, 0x24044000}, 0x10) connect$can_bcm(r7, &(0x7f0000002ac0)={0x1d, r16}, 0x10) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000002b00)) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r12, 0x800443d3, &(0x7f0000002b40)={@any, 0x80000001, 0x8, 0x4}) io_setup(0x7, &(0x7f0000002b80)=0x0) r20 = bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x1, 0xe, &(0x7f0000002bc0)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd}, @exit, @call={0x85, 0x0, 0x0, 0x2b}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xeca}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @generic={0xb1, 0x2, 0x2, 0x7f, 0xfffff800}, @jmp={0x5, 0x0, 0x6, 0x1, 0xb, 0x10}], &(0x7f0000002c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', r15, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000002c80)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000002cc0)={0x3, 0xd, 0x5a6, 0x4}, 0x10, r9, r5, 0x0, &(0x7f0000002d00)=[r10, r1]}, 0x80) io_cancel(r19, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x6, 0x9, r20, &(0x7f0000002dc0)="2d06b10eb3b14b32e1791a7795c09be306ec3eb9649d9519b80ac159e0f7eb4f60ae8b4c06002ecbba9b6cc1c0d484e65e8a428018e01d6df6ff0e", 0x3b, 0x7fffffffffffffff, 0x0, 0x2, r7}, &(0x7f0000002e40)) ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, &(0x7f0000002e80)) [ 92.830872][ T5002] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5002 'syz-fuzzer' 06:11:19 executing program 4: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e551d06c43a1dfc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x20004080) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x2, 0x94a40) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r4}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000044}, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x14340040}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r1, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5e64}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000090}, 0x8040004) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000400)) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000600)={{0x80000000, 0x0, 0x6, [0x20, 0x529d]}, {0x80000000, 0x0, 0x5, [0xff, 0x8]}, 0x0, [0x81, 0xfff]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000640)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x77886c4e665e653d}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc8013) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000a00)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20010000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r7, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x24}}, 0x40000) socketpair(0x11, 0x3, 0x6, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r9, &(0x7f0000001180)={&(0x7f0000000b40), 0xc, &(0x7f0000001140)={&(0x7f0000000b80)={0x59c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x4dc, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x2}}]}, {0xe0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0xa0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}]}, {0x334, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0x2d8, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x8b}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe7f4}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xdf}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x40, @loopback, 0x7}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x59c}, 0x1, 0x0, 0x0, 0x4}, 0x20040851) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r4, 0x800443d2, &(0x7f0000001240)={0x5, &(0x7f00000011c0)=[{@fixed}, {}, {}, {@none}, {@none}]}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44094) syz_open_dev$mouse(&(0x7f0000001380), 0x5, 0x2) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x2c, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004041) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x28, r7, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x14, 0x14, '-*,.!(,(*[\':.$[\''}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x11) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x48000) r10 = syz_open_dev$mouse(&(0x7f00000016c0), 0xffffffffffffffff, 0x400200) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001740), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001780)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r10, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, r11, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x4049}, 0x8041) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x24008080) [ 93.474723][ T5019] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.483355][ T5019] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.492042][ T5019] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.500535][ T5019] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.508605][ T5019] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.526570][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.540170][ T5023] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.551327][ T5026] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.559534][ T5026] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.569182][ T5026] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.577285][ T5026] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.584974][ T5026] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.598716][ T4410] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.601003][ T5026] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.611219][ T4410] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.622464][ T4410] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.631085][ T4410] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.639370][ T4410] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.640336][ T5026] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 93.647136][ T4410] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.665106][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 93.666424][ T5032] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.672652][ T48] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 93.681557][ T5032] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 93.694882][ T5032] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 93.701847][ T5026] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.709842][ T5032] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 93.717375][ T4410] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 93.725401][ T4410] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 93.733368][ T4410] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 93.741272][ T4410] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 93.741468][ T5026] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.755847][ T5032] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 93.756142][ T5026] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 93.772078][ T5026] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.779817][ T5026] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.293330][ T5018] chnl_net:caif_netlink_parms(): no params data found [ 94.312544][ T5031] chnl_net:caif_netlink_parms(): no params data found [ 94.338824][ T5022] chnl_net:caif_netlink_parms(): no params data found [ 94.459570][ T5025] chnl_net:caif_netlink_parms(): no params data found [ 94.505632][ T5021] chnl_net:caif_netlink_parms(): no params data found [ 94.621761][ T5034] chnl_net:caif_netlink_parms(): no params data found [ 94.649177][ T5018] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.657298][ T5018] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.664788][ T5018] bridge_slave_0: entered allmulticast mode [ 94.671634][ T5018] bridge_slave_0: entered promiscuous mode [ 94.727723][ T5018] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.735500][ T5018] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.742682][ T5018] bridge_slave_1: entered allmulticast mode [ 94.754556][ T5018] bridge_slave_1: entered promiscuous mode [ 94.777294][ T5031] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.784463][ T5031] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.791596][ T5031] bridge_slave_0: entered allmulticast mode [ 94.799249][ T5031] bridge_slave_0: entered promiscuous mode [ 94.806819][ T5022] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.815123][ T5022] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.822310][ T5022] bridge_slave_0: entered allmulticast mode [ 94.829694][ T5022] bridge_slave_0: entered promiscuous mode [ 94.881846][ T5031] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.889039][ T5031] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.896350][ T5031] bridge_slave_1: entered allmulticast mode [ 94.903527][ T5031] bridge_slave_1: entered promiscuous mode [ 94.910321][ T5022] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.917554][ T5022] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.924799][ T5022] bridge_slave_1: entered allmulticast mode [ 94.931950][ T5022] bridge_slave_1: entered promiscuous mode [ 94.949160][ T5025] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.956331][ T5025] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.963486][ T5025] bridge_slave_0: entered allmulticast mode [ 94.970429][ T5025] bridge_slave_0: entered promiscuous mode [ 94.995109][ T5018] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.036022][ T5025] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.043153][ T5025] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.050645][ T5025] bridge_slave_1: entered allmulticast mode [ 95.057946][ T5025] bridge_slave_1: entered promiscuous mode [ 95.081907][ T5018] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.091253][ T5021] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.098820][ T5021] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.106332][ T5021] bridge_slave_0: entered allmulticast mode [ 95.113094][ T5021] bridge_slave_0: entered promiscuous mode [ 95.137026][ T5022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.168173][ T5021] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.176875][ T5021] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.187204][ T5021] bridge_slave_1: entered allmulticast mode [ 95.194670][ T5021] bridge_slave_1: entered promiscuous mode [ 95.204185][ T5031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.217886][ T5031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.228998][ T5022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.253748][ T5025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.332851][ T5025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.346855][ T5018] team0: Port device team_slave_0 added [ 95.356183][ T5021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.401367][ T5034] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.410032][ T5034] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.418110][ T5034] bridge_slave_0: entered allmulticast mode [ 95.425539][ T5034] bridge_slave_0: entered promiscuous mode [ 95.443786][ T5018] team0: Port device team_slave_1 added [ 95.451548][ T5021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.465091][ T5031] team0: Port device team_slave_0 added [ 95.475023][ T5022] team0: Port device team_slave_0 added [ 95.481861][ T5034] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.497949][ T5034] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.511972][ T5034] bridge_slave_1: entered allmulticast mode [ 95.519599][ T5034] bridge_slave_1: entered promiscuous mode [ 95.592022][ T5031] team0: Port device team_slave_1 added [ 95.610006][ T5022] team0: Port device team_slave_1 added [ 95.626672][ T5025] team0: Port device team_slave_0 added [ 95.654518][ T5026] Bluetooth: hci1: command 0x0409 tx timeout [ 95.661756][ T5032] Bluetooth: hci0: command 0x0409 tx timeout [ 95.689748][ T5025] team0: Port device team_slave_1 added [ 95.697145][ T5018] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.704468][ T5018] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.731104][ T5018] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.744047][ T5032] Bluetooth: hci3: command 0x0409 tx timeout [ 95.747790][ T5021] team0: Port device team_slave_0 added [ 95.758582][ T5031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.765877][ T5031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.792075][ T5031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.813902][ T5023] Bluetooth: hci4: command 0x0409 tx timeout [ 95.813933][ T5032] Bluetooth: hci2: command 0x0409 tx timeout [ 95.814200][ T5032] Bluetooth: hci5: command 0x0409 tx timeout [ 95.835886][ T5034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.854166][ T5018] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.861433][ T5018] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.887863][ T5018] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.902336][ T5021] team0: Port device team_slave_1 added [ 95.908893][ T5031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.916077][ T5031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.942060][ T5031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.954043][ T5022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.961025][ T5022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.987109][ T5022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.000712][ T5034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.038278][ T5022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.045783][ T5022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.071897][ T5022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.094095][ T5025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.101081][ T5025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.127317][ T5025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.141621][ T5025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.148670][ T5025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.174739][ T5025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.199627][ T5021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.206852][ T5021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.233153][ T5021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.273490][ T5021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.280640][ T5021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.307132][ T5021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.346502][ T5034] team0: Port device team_slave_0 added [ 96.397170][ T5018] hsr_slave_0: entered promiscuous mode [ 96.403574][ T5018] hsr_slave_1: entered promiscuous mode [ 96.411542][ T5034] team0: Port device team_slave_1 added [ 96.422397][ T5031] hsr_slave_0: entered promiscuous mode [ 96.428948][ T5031] hsr_slave_1: entered promiscuous mode [ 96.436831][ T5031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.444925][ T5031] Cannot create hsr debugfs directory [ 96.465377][ T5022] hsr_slave_0: entered promiscuous mode [ 96.471756][ T5022] hsr_slave_1: entered promiscuous mode [ 96.478285][ T5022] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.486323][ T5022] Cannot create hsr debugfs directory [ 96.507858][ T5025] hsr_slave_0: entered promiscuous mode [ 96.514489][ T5025] hsr_slave_1: entered promiscuous mode [ 96.520647][ T5025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.530181][ T5025] Cannot create hsr debugfs directory [ 96.608484][ T5034] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.615682][ T5034] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.641970][ T5034] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.678043][ T5021] hsr_slave_0: entered promiscuous mode [ 96.684804][ T5021] hsr_slave_1: entered promiscuous mode [ 96.690922][ T5021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.702860][ T5021] Cannot create hsr debugfs directory [ 96.732243][ T5034] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.739498][ T5034] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.765722][ T5034] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.941115][ T5034] hsr_slave_0: entered promiscuous mode [ 96.947824][ T5034] hsr_slave_1: entered promiscuous mode [ 96.954433][ T5034] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.962027][ T5034] Cannot create hsr debugfs directory [ 97.276318][ T5031] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.292531][ T5031] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.317206][ T5031] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.331487][ T5031] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.385183][ T5021] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.396294][ T5021] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.406572][ T5021] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.417164][ T5021] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.525279][ T5018] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.538412][ T5018] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.548200][ T5018] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.560346][ T5018] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.678142][ T5025] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 97.688997][ T5025] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 97.700590][ T5025] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 97.710673][ T5025] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 97.725038][ T5031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.733941][ T5032] Bluetooth: hci0: command 0x041b tx timeout [ 97.734038][ T5026] Bluetooth: hci1: command 0x041b tx timeout [ 97.814542][ T5026] Bluetooth: hci3: command 0x041b tx timeout [ 97.823886][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.835651][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.877510][ T5031] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.894384][ T5026] Bluetooth: hci5: command 0x041b tx timeout [ 97.900458][ T5026] Bluetooth: hci4: command 0x041b tx timeout [ 97.904601][ T5023] Bluetooth: hci2: command 0x041b tx timeout [ 97.914600][ T5022] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.929192][ T5022] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.942463][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.951681][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.961419][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.968929][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.978319][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.988033][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.997204][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.004368][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.012229][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.021447][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.030400][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.039524][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.050057][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.058590][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.100554][ T5022] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 98.111834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.126308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.144265][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.152973][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.179684][ T5021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.191791][ T5022] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 98.218540][ T5031] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.241441][ T5031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.289275][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.298714][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.307652][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.316281][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.328384][ T5034] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 98.388629][ T5034] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 98.400621][ T5034] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 98.416344][ T5021] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.427845][ T5018] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.454546][ T5034] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 98.474076][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.486906][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.495792][ T5075] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.502872][ T5075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.511535][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.520635][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.529719][ T5075] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.536985][ T5075] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.563081][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.571230][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.642868][ T5018] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.668768][ T5025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.679938][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.694758][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.705313][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.714436][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.724579][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.733173][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.741404][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.782547][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.790829][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.799912][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.809054][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.818553][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.827353][ T5076] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.834531][ T5076] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.842379][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.851544][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.869422][ T5021] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.898926][ T5031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.907252][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.920478][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.929918][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.938753][ T5076] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.945926][ T5076] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.953726][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.961259][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.016701][ T5025] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.031965][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.041719][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.059387][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.071727][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.089252][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.102093][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.145937][ T5034] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.167523][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.176275][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.186354][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.195276][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.204086][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.212409][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.221224][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.230088][ T5075] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.237286][ T5075] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.245682][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.253809][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.269073][ T5018] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.293533][ T5018] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.307143][ T5034] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.329183][ T5022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.376478][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.386041][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.396674][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.405653][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.414899][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.466511][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.476752][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.485704][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.492814][ T5077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.501132][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.510044][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.519286][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.528597][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.537598][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.544782][ T5077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.552565][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.561516][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.570413][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.577567][ T5077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.585829][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.595103][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.603456][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.642711][ T5025] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.670808][ T5025] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.683725][ T5031] veth0_vlan: entered promiscuous mode [ 99.690874][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.704304][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.712360][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.728668][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.745106][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.754168][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.762864][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.771697][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.781062][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.790917][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.799612][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.808232][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.814007][ T5032] Bluetooth: hci0: command 0x040f tx timeout [ 99.815914][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.821526][ T5032] Bluetooth: hci1: command 0x040f tx timeout [ 99.832198][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.843889][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.857308][ T5022] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.873121][ T5021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.889139][ T5031] veth1_vlan: entered promiscuous mode [ 99.901901][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.909436][ T5032] Bluetooth: hci3: command 0x040f tx timeout [ 99.935341][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.943306][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.973890][ T5023] Bluetooth: hci4: command 0x040f tx timeout [ 99.979983][ T5023] Bluetooth: hci2: command 0x040f tx timeout [ 99.987842][ T5032] Bluetooth: hci5: command 0x040f tx timeout [ 100.016589][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.041470][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.053148][ T5077] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.060341][ T5077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.078590][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.090587][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.107525][ T5077] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.114737][ T5077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.122738][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.133065][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.142720][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.151893][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.161034][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.170388][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.228945][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.238980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.250290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.258963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.268310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.278249][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.287191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.296528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.306052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.315445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.324532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.333095][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.342336][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.351252][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.366650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.375339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.386778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.395667][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.404343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.418480][ T5018] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.464352][ T5022] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.473043][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.483024][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.492747][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.501451][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.510689][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.518940][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.530618][ T5031] veth0_macvtap: entered promiscuous mode [ 100.555960][ T5021] veth0_vlan: entered promiscuous mode [ 100.580504][ T5031] veth1_macvtap: entered promiscuous mode [ 100.609607][ T5021] veth1_vlan: entered promiscuous mode [ 100.633485][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.670275][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.701740][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.720082][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.735927][ T5025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.765195][ T5031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.816723][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.844819][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.884314][ T5031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.925381][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.954533][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.974648][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.991537][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.003169][ T5018] veth0_vlan: entered promiscuous mode [ 101.020054][ T5021] veth0_macvtap: entered promiscuous mode [ 101.038666][ T5031] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.048435][ T5031] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.057911][ T5031] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.066994][ T5031] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.087336][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.114940][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.123045][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.143787][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.158051][ T5021] veth1_macvtap: entered promiscuous mode [ 101.183350][ T5034] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.196409][ T5018] veth1_vlan: entered promiscuous mode [ 101.203785][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.222224][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.250349][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.269910][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.278049][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.391106][ T5018] veth0_macvtap: entered promiscuous mode [ 101.447133][ T5021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.471839][ T5021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.493009][ T5021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.511713][ T5022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.536672][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.552520][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.562573][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.571903][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.581579][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.590681][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.598527][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.623251][ T5018] veth1_macvtap: entered promiscuous mode [ 101.635121][ T5021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.646130][ T5021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.659751][ T5021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.674528][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.683369][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.700611][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.772563][ T5021] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.791123][ T5021] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.801958][ T5021] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.811356][ T5021] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.831850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.842863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.852620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.861884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.873267][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.885780][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.895887][ T5023] Bluetooth: hci1: command 0x0419 tx timeout [ 101.895932][ T5023] Bluetooth: hci0: command 0x0419 tx timeout [ 101.908568][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.919234][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.931013][ T5018] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.941850][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.959446][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.983699][ T5032] Bluetooth: hci3: command 0x0419 tx timeout [ 101.989932][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.998799][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.008629][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.017000][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.025884][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.050369][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.060961][ T5032] Bluetooth: hci2: command 0x0419 tx timeout [ 102.061008][ T5032] Bluetooth: hci5: command 0x0419 tx timeout [ 102.064715][ T5023] Bluetooth: hci4: command 0x0419 tx timeout [ 102.071894][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.089847][ T5018] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.100764][ T5018] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.113291][ T5018] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.143269][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.152640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.161893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.172318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.181924][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.190704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.201549][ T5018] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.211059][ T5018] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.220996][ T5018] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.229882][ T5018] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.251880][ T5025] veth0_vlan: entered promiscuous mode [ 102.272856][ T5025] veth1_vlan: entered promiscuous mode [ 102.284088][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.292488][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.302905][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.313019][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.321624][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.333106][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.341265][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.349355][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.357649][ T5004] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.366004][ T5022] veth0_vlan: entered promiscuous mode [ 102.388101][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.398120][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.408791][ T5034] veth0_vlan: entered promiscuous mode [ 102.432502][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.446867][ T5029] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 102.471368][ T5022] veth1_vlan: entered promiscuous mode [ 102.518236][ T5034] veth1_vlan: entered promiscuous mode [ 102.553999][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.562177][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.598032][ T2856] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.623346][ T2856] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.648611][ T5025] veth0_macvtap: entered promiscuous mode [ 102.713965][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.722518][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.746142][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 06:11:29 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) (async) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) (async) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) (async) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) (async) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) (async) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) (async) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) (async) shmctl$SHM_LOCK(0x0, 0xb) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) (async) ioctl$UI_DEV_DESTROY(r5, 0x5502) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) (async) r9 = syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x7) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x2) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) [ 102.768518][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.796884][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.818036][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.859288][ T5034] veth0_macvtap: entered promiscuous mode [ 102.867478][ T5025] veth1_macvtap: entered promiscuous mode [ 102.883175][ T5022] veth0_macvtap: entered promiscuous mode [ 102.903949][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.911993][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.929062][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.943402][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 06:11:29 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) (async) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) (async) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) (async) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) (async) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() (async) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) (async) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) (async) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) r9 = syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x7) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x7) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x2) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) [ 102.954828][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.987334][ T5079] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.004510][ T5034] veth1_macvtap: entered promiscuous mode [ 103.014068][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.022174][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.037719][ T5078] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.061033][ T5022] veth1_macvtap: entered promiscuous mode 06:11:29 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) r9 = syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x7) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x2) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) [ 103.092261][ T5025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.121990][ T5025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.137728][ T5025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.151685][ T5025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.167944][ T5025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 06:11:29 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) r9 = syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x7) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x2) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) [ 103.190661][ T5025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.207226][ T5025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.237867][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.249936][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.265611][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.265620][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.266461][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.293513][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.320122][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.337837][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.348854][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.359729][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.369968][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 06:11:30 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) r9 = syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x7) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x2) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) [ 103.380708][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.391059][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.401688][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.416648][ T5034] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.426397][ T5025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.438922][ T5025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.452163][ T5025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.463475][ T5025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.473999][ T5025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.484906][ T5025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.498417][ T5025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.520073][ T5022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.520679][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 06:11:30 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) r9 = syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x7) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) [ 103.531510][ T5022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.550097][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.570241][ T5022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.581477][ T5022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.591998][ T5022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.604859][ T5022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.614849][ T5022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.625551][ T5022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.637498][ T5022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.650714][ T5022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.692555][ T5022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.709811][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.738568][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.747989][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.757722][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.766932][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.776096][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.785282][ T5074] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.796421][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.808463][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.820047][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.830858][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.840730][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.851204][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.861147][ T5034] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.872520][ T5034] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.884035][ T5034] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.895921][ T5022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.917924][ T5022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.928184][ T5022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.938694][ T5022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.948688][ T5022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.959293][ T5022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.969241][ T5022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.980534][ T5022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.990511][ T5022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.001003][ T5022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.012712][ T5022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.022468][ T5025] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.033829][ T5025] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.060565][ T5025] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.070767][ T5025] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.082497][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.092548][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.102047][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.110994][ T5077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.127696][ T5034] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.150455][ T5034] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.161860][ T5034] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.179929][ T5034] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.224284][ T5022] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.233145][ T5022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.242628][ T5022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.252593][ T5022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 06:11:31 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:31 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x4, 0x8c01) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000180)) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x8081, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000003c0)={r3, 0x0, r5, 0x1}) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x128d, 0x1, 0xd6, 0x2}, {0x7, 0x3f, 0x2, 0x8518}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000480)={0x0, 0x101, 0x5}) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) clock_gettime(0x1, &(0x7f00000005c0)) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_FREEZE(r7, 0x400c620e, &(0x7f0000000640)={r4, 0x1, 0x1}) (async) r8 = syz_open_dev$vcsa(&(0x7f0000000680), 0x5, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r8, 0xc00c620f, &(0x7f00000006c0)={r4}) socketpair(0x9, 0x4, 0x6, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_bcm(r9, &(0x7f0000000980)={&(0x7f0000000740)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/253, 0xfd}], 0x1, &(0x7f0000000900)=""/122, 0x7a}, 0x10000) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a40)='./binderfs2/custom0\x00', 0x802, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_open_dev$mouse(&(0x7f0000001c40), 0x0, 0x151202) io_submit(0x0, 0x4, &(0x7f0000001cc0)=[&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x7, 0x1, r7, &(0x7f00000009c0)="7dc7aa6b75a5325404ec97bd91b45ef93d124e6498b1b02bcf2981801c72311e7986a456013d4ef3f535fc05a4c9d1282869e9c39ff017", 0x37, 0x8, 0x0, 0x0, r8}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x6, 0x0, r10, &(0x7f0000000a80)="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", 0x1000, 0x80, 0x0, 0x1, r1}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x2, r9, &(0x7f0000001ac0)="7b5a0bc93d5a609908a9a04cf25e67077141247a5cef93b8e3f39548127b110de5ea1027de0440abca4dd2cdceec1c37aeb2958e1544ca25b2d67a7e4a0cf5b280750af082d917e0ebbc", 0x4a, 0x100000001, 0x0, 0x2, r8}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x2, 0x3f, r11, &(0x7f0000001b80)="70d70eecc11dfea13cf945a94cf6e9d602f68a203ff80c4aa9a2f7a510357a7535d7a4bc60334d073c4d97b327f7d69d004facb24084920aeed8444abec802ec9133af3d37e2cb18539e5afb3d1d2598671a765a2aa5e708cc8c277713ed90649e8999a7d75d2356c0f14bad037435cdc87dce04fa65816fe7776db1476c319dfc5de07ba8ccfb6c0527b2c9f80fb75c5de5b5", 0x93, 0x0, 0x0, 0xd39843b8aba4d44f, r12}]) (async) socketpair(0xb, 0xa, 0x97, &(0x7f0000001d00)={0xffffffffffffffff}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000001d80)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002080)={r1, 0xe0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001dc0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000001e00)=[0x0], &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001e80)=[{}], 0x8, 0x10, &(0x7f0000001ec0), &(0x7f0000001f00), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001f40)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002380)={r8, 0xe0, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000020c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000002100)=[0x0], &(0x7f0000002140)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000002180)=[{}], 0x8, 0x10, &(0x7f00000021c0), &(0x7f0000002200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002240)}}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002400)={'wg0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r13, &(0x7f0000002a00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000029c0)={&(0x7f0000002440)={0x550, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r14}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x3, 0x80, 0x4}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffbff}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}]}, 0x550}, 0x1, 0x0, 0x0, 0x4}, 0x60000) [ 104.544275][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.552390][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.626248][ T5131] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.689477][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.705913][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.727432][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.766149][ T1067] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.772657][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.782699][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.795288][ T1067] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.818164][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.828815][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.859297][ T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.876960][ T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.904501][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.912631][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.969171][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.994790][ T903] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 06:11:31 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:31 executing program 1: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040085}, 0x48010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_virt_wifi\x00', 0x0}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000180)=@can, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/200, 0xc8}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/6, 0x6}, {&(0x7f0000001340)=""/37, 0x25}, {&(0x7f0000001380)=""/160, 0xa0}, {&(0x7f0000001440)=""/87, 0x57}, {&(0x7f00000014c0)=""/114, 0x72}, {&(0x7f0000001540)=""/139, 0x8b}, {&(0x7f0000001600)=""/97, 0x61}, {&(0x7f0000001680)}], 0xa, &(0x7f0000001780)=""/185, 0xb9}, 0x20) r1 = socket$isdn(0x22, 0x3, 0x21) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000001880), 0x4) (async) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x14, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x50) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001b40), r3) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x20, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}}, 0x22004000) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x38, r5, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '+&'}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004800}, 0x4) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000001d80), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x24, r6, 0x630, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x801) (async) socketpair(0x10, 0x3, 0x800, &(0x7f0000001ec0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r8 = syz_open_dev$mouse(&(0x7f0000001f00), 0xf11f, 0xc000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000002000)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x78, r5, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8, 0x1, r8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x44000) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$SHM_UNLOCK(0x0, 0xc) (async) r9 = syz_open_dev$vcsa(&(0x7f0000002080), 0x40, 0x100) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x74, r5, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x16, 0xa, '/dev/input/mouse#\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x881}, 0x2000c0c1) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000002200)=0x0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000002240)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x34, r6, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x4000840) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000002380), r4) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000023c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f00000024c0)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x44, r12, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x4c883) (async) r14 = syz_open_dev$vcsa(&(0x7f0000002500), 0x5, 0x482300) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r14, &(0x7f00000026c0)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x68, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x80) [ 105.182982][ T5178] binder: 5176:5178 ioctl d000943e 20002fc0 returned -22 06:11:32 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000140), 0x4, 0x8c01) ioctl$USBDEVFS_REAPURB(r1, 0x4008550c, &(0x7f0000000180)) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r1) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r2, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x8081, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f00000003c0)={r3, 0x0, r5, 0x1}) (async) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x128d, 0x1, 0xd6, 0x2}, {0x7, 0x3f, 0x2, 0x8518}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r6, 0xc0182101, &(0x7f0000000480)={0x0, 0x101, 0x5}) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x38, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async, rerun: 64) clock_gettime(0x1, &(0x7f00000005c0)) (rerun: 64) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000600)='./binderfs/custom0\x00', 0x2, 0x0) ioctl$BINDER_FREEZE(r7, 0x400c620e, &(0x7f0000000640)={r4, 0x1, 0x1}) (async) r8 = syz_open_dev$vcsa(&(0x7f0000000680), 0x5, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r8, 0xc00c620f, &(0x7f00000006c0)={r4}) (async) socketpair(0x9, 0x4, 0x6, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$can_bcm(r9, &(0x7f0000000980)={&(0x7f0000000740)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/253, 0xfd}], 0x1, &(0x7f0000000900)=""/122, 0x7a}, 0x10000) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000a40)='./binderfs2/custom0\x00', 0x802, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r12 = syz_open_dev$mouse(&(0x7f0000001c40), 0x0, 0x151202) (rerun: 64) io_submit(0x0, 0x4, &(0x7f0000001cc0)=[&(0x7f0000000a00)={0x0, 0x0, 0x0, 0x7, 0x1, r7, &(0x7f00000009c0)="7dc7aa6b75a5325404ec97bd91b45ef93d124e6498b1b02bcf2981801c72311e7986a456013d4ef3f535fc05a4c9d1282869e9c39ff017", 0x37, 0x8, 0x0, 0x0, r8}, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x6, 0x0, r10, &(0x7f0000000a80)="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", 0x1000, 0x80, 0x0, 0x1, r1}, &(0x7f0000001b40)={0x0, 0x0, 0x0, 0x0, 0x2, r9, &(0x7f0000001ac0)="7b5a0bc93d5a609908a9a04cf25e67077141247a5cef93b8e3f39548127b110de5ea1027de0440abca4dd2cdceec1c37aeb2958e1544ca25b2d67a7e4a0cf5b280750af082d917e0ebbc", 0x4a, 0x100000001, 0x0, 0x2, r8}, &(0x7f0000001c80)={0x0, 0x0, 0x0, 0x2, 0x3f, r11, &(0x7f0000001b80)="70d70eecc11dfea13cf945a94cf6e9d602f68a203ff80c4aa9a2f7a510357a7535d7a4bc60334d073c4d97b327f7d69d004facb24084920aeed8444abec802ec9133af3d37e2cb18539e5afb3d1d2598671a765a2aa5e708cc8c277713ed90649e8999a7d75d2356c0f14bad037435cdc87dce04fa65816fe7776db1476c319dfc5de07ba8ccfb6c0527b2c9f80fb75c5de5b5", 0x93, 0x0, 0x0, 0xd39843b8aba4d44f, r12}]) (async, rerun: 64) socketpair(0xb, 0xa, 0x97, &(0x7f0000001d00)={0xffffffffffffffff}) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000001d80)={'team0\x00', 0x0}) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002080)={r1, 0xe0, &(0x7f0000001f80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000001dc0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f0000001e00)=[0x0], &(0x7f0000001e40)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001e80)=[{}], 0x8, 0x10, &(0x7f0000001ec0), &(0x7f0000001f00), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001f40)}}, 0x10) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002380)={r8, 0xe0, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000020c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000002100)=[0x0], &(0x7f0000002140)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000002180)=[{}], 0x8, 0x10, &(0x7f00000021c0), &(0x7f0000002200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002240)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f00000023c0)={'team0\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002400)={'wg0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r13, &(0x7f0000002a00)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000029c0)={&(0x7f0000002440)={0x550, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [{{0x8, 0x1, r14}, {0x80, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x0, 0x3, 0x80, 0x4}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1000}}, {0x8, 0x6, r15}}}]}}, {{0x8, 0x1, r16}, {0xf8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r17}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffbff}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0xc4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8000}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x20}}, {0x8}}}]}}]}, 0x550}, 0x1, 0x0, 0x0, 0x4}, 0x60000) 06:11:32 executing program 4: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e551d06c43a1dfc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x20004080) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x2, 0x94a40) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r4}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000044}, 0x80000) (async) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x14340040}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r1, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5e64}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000090}, 0x8040004) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000400)) (async) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000600)={{0x80000000, 0x0, 0x6, [0x20, 0x529d]}, {0x80000000, 0x0, 0x5, [0xff, 0x8]}, 0x0, [0x81, 0xfff]}) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000640)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x77886c4e665e653d}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc8013) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r0) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000a00)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20010000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r7, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x24}}, 0x40000) socketpair(0x11, 0x3, 0x6, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r9, &(0x7f0000001180)={&(0x7f0000000b40), 0xc, &(0x7f0000001140)={&(0x7f0000000b80)={0x59c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x4dc, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x2}}]}, {0xe0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0xa0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}]}, {0x334, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0x2d8, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x8b}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe7f4}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xdf}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x40, @loopback, 0x7}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x59c}, 0x1, 0x0, 0x0, 0x4}, 0x20040851) (async) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r4, 0x800443d2, &(0x7f0000001240)={0x5, &(0x7f00000011c0)=[{@fixed}, {}, {}, {@none}, {@none}]}) (async) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44094) syz_open_dev$mouse(&(0x7f0000001380), 0x5, 0x2) (async) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x2c, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004041) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x28, r7, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x14, 0x14, '-*,.!(,(*[\':.$[\''}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x11) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x48000) (async) r10 = syz_open_dev$mouse(&(0x7f00000016c0), 0xffffffffffffffff, 0x400200) (async) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001740), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001780)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r10, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, r11, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x4049}, 0x8041) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x24008080) 06:11:32 executing program 5: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x422801) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000080)={0x0, 0x0, "ef29faade827970c406889673b3f047201702cb1324f143022c13efde3953cd66d82d5879106a8799fe66f20158364fb6a25aa63d0d31b2885afb0d91a8f5a3ec5b3384bce6b0e7cc76ba11d261e5e44cefd7953c9c258723c85d2a6ccf5f10408959d95f2e5e313230438f2ea1a3650aeb5aceae9d8dad21a901791123c96f04de9838ab84c949b8ed3713a1d41a56480cb7ff7dbc5d550c62137e784dece948c94c9d9041a707aa7daa6609216229aa8e12b22aa4e45515c2e1e08ba4aa20ae511b750cd20cb9ac97a105eaf214aab2149fbdd7ffcbaccf12aea1341a1a871319331b5e9a499f7064dfd29f2621dedf5cf2610933b8311499f2b92f1735846", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001080)={{r3, 0xbc, 0x8001, 0x80000001, 0xfff, 0x100000000, 0x5c7, 0x7, 0xfffffffe, 0x969, 0x101, 0x0, 0x1, 0x5, 0x6}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) clock_gettime(0x5, &(0x7f0000001140)) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001180)={r3, 0x7}) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002180)={0x0, ""/256, 0x0}) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000002380), r5) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000023c0)={0x9, 0xefe7, 0xd19}) (async) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x23f) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000002400)={0x2}) (async) r6 = syz_open_dev$vcsa(&(0x7f0000002440), 0x51, 0x20400) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000002480)) (async) r7 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x3ff, 0x101000) (async) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002540), r6) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0xc0000504}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x40, r8, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x4008800) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000002700)={0x80000000, &(0x7f0000002640), &(0x7f0000002680)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000002740)={r9}) (async) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x9) (async) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000002e00)={0x0, 0x4, 0x0, &(0x7f0000002840)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f00000029c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000002c80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000002dc0)=[{}]}) ioctl$UI_GET_VERSION(r7, 0x8004552d, &(0x7f0000002e80)) (async) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000002ec0)={0x0, r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002f40)={0xffffffffffffffff, r10, 0x0, 0xa, &(0x7f0000002f00)='wireguard\x00'}, 0x30) (async, rerun: 32) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002f80)='./binderfs/binder0\x00', 0x2, 0x0) (rerun: 32) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r11, 0xd000943e, &(0x7f0000002fc0)={r2, r4, "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", "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"}) (async) r12 = timerfd_create(0x5, 0x80c00) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004640)={0x118, 0x0, &(0x7f0000004480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000040c0)={@ptr={0x70742a85, 0x0, &(0x7f0000003fc0)=""/31, 0x1f, 0x2, 0x24}, @fd={0x66642a85, 0x0, r12}, @ptr={0x70742a85, 0x0, &(0x7f0000004000)=""/175, 0xaf, 0x2, 0x22}}, &(0x7f0000004140)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000004180)={@fda={0x66646185, 0x6, 0x1, 0x8}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000004200)={0x0, 0x20, 0x38}}, 0x40}, @increfs_done={0x40106308, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000043c0)={@ptr={0x70742a85, 0x1, &(0x7f0000004240)=""/160, 0xa0, 0x1, 0xa}, @fda={0x66646185, 0x2, 0x0, 0x37}, @ptr={0x70742a85, 0x0, &(0x7f0000004300)=""/141, 0x8d, 0x2, 0xf}}, &(0x7f0000004440)={0x0, 0x28, 0x48}}}, @decrefs={0x40046307, 0x1}, @register_looper, @increfs={0x40046304, 0x3}, @free_buffer, @increfs={0x40046304, 0x401}], 0x4c, 0x0, &(0x7f00000045c0)="57764f8779a0939d205abc3c46cf3f61b5b0702912235aa77f4120c4bae819afacdd592df802b690c4d98a49a9f97bffa6d5d7b3f16406a1158319a535fb421707c1af4a9076777ba7c73a03"}) (async) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000004700)={0x4, &(0x7f0000004680)=[{}, {@none}, {@none}, {@none}]}) 06:11:32 executing program 3: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x30d000, 0x0) (async, rerun: 64) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000010c0)={&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x10) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@bloom_filter={0x1e, 0x5, 0x7, 0x7, 0x1016, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0xd, 0xe7, 0x4, 0x5, 0x482, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) (async, rerun: 64) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x8, 0x5, 0x7ff, 0x80000001, 0x4c0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) (async, rerun: 64) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@bloom_filter={0x1e, 0x4, 0x1f, 0x1e, 0x2, 0xffffffffffffffff, 0x36, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001340)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}], &(0x7f0000000080)='GPL\x00', 0x7, 0x73, &(0x7f00000000c0)=""/115, 0x41100, 0x12, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xb, 0x7, 0x7}, 0x10, 0x13dc9, r0, 0x0, &(0x7f0000001300)=[0x1, 0x1, r1, 0x1, r2, r3, r4]}, 0x80) (async, rerun: 32) io_setup(0x3861, &(0x7f00000013c0)=0x0) (async, rerun: 32) r7 = syz_open_dev$vcsa(&(0x7f00000014c0), 0x5, 0x400000) io_submit(r6, 0x2, &(0x7f0000001540)=[&(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x6, r5, &(0x7f0000001400)="ed3f42afa070a90aa3a6a7c5e835f99e0e0977c93d899914a9351ecb7b07dca8efdbef3c201a024eb9", 0x29, 0x7, 0x0, 0x3}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x7, 0x3ff, r5, &(0x7f0000001480)="fb8b0c2040363d3ceea9c9c95d48b5cb7ce847f2b0403ce1a350e676726567c9a90a2460ddbd5883087af962", 0x2c, 0x3, 0x0, 0x2, r7}]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001980)={r0, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000016c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001700)=[0x0], &(0x7f0000001740)=[0x0], 0x0, 0x8, &(0x7f0000001780)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000017c0), &(0x7f0000001800), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001840)}}, 0x10) (async, rerun: 32) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0x0, 0x100, 0x6, 0x4, 0x600, 0xffffffffffffffff, 0x10001, '\x00', 0x0, r7, 0x3, 0x2, 0x5}, 0x48) (rerun: 32) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a80)=@bpf_lsm={0x1d, 0xa, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@generic={0x3, 0x0, 0xa, 0x1, 0x7}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @alu={0x7, 0x1, 0x3, 0x1, 0x1, 0xfffffffffffffffc, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x2, 0x0, 0xfffffffffffffff8, 0x1}]}, &(0x7f0000001600)='GPL\x00', 0xfcb, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x1b, r7, 0x8, &(0x7f0000001640)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001680)={0x1, 0x7, 0x4, 0x1}, 0x10, r9, 0x0, 0x0, &(0x7f0000001a40)=[r7, r10, r1]}, 0x80) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001c00)={'dvmrp1\x00', 0x0}) (async, rerun: 32) r12 = syz_open_dev$mouse(&(0x7f0000001c40), 0x9, 0x200) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x12, 0xc, &(0x7f0000001b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8810, 0x0, 0x0, 0x0, 0xa0000000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6fe0b622, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x1, 0x2, 0x3, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x77e9, 0x0, 0x0, 0x0, 0x200}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}]}, &(0x7f0000001b80)='GPL\x00', 0x100000, 0x15, &(0x7f0000001bc0)=""/21, 0x40f00, 0x4, '\x00', r11, 0x8, r12, 0x8, &(0x7f0000001c80)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000001cc0)={0x5, 0x5, 0x1, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001d00)=[r10, r2]}, 0x80) (async, rerun: 32) r13 = syz_open_dev$mouse(&(0x7f0000001dc0), 0x9, 0x400200) (async, rerun: 32) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f0000001e40)={'wg2\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002140)={r0, 0xe0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000001ec0)=[0x0, 0x0], &(0x7f0000001f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001f40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001f80), &(0x7f0000001fc0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002000)}}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'macsec0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000021c0)={'pimreg1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000002200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r13, &(0x7f0000002a80)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002240)={0x7c8, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x16c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9a3}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7d}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x70b, 0x40, 0x6, 0xc70c}, {0x5, 0x8, 0x9, 0x80000000}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r11}, {0x144, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xc0, 0x4, 0xac, 0x6}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x4}}, {{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xddf1faee}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x27}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x7c8}, 0x1, 0x0, 0x0, 0x24044000}, 0x10) connect$can_bcm(r7, &(0x7f0000002ac0)={0x1d, r16}, 0x10) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000002b00)) (async, rerun: 32) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r12, 0x800443d3, &(0x7f0000002b40)={@any, 0x80000001, 0x8, 0x4}) (rerun: 32) io_setup(0x7, &(0x7f0000002b80)=0x0) (async) r20 = bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x1, 0xe, &(0x7f0000002bc0)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd}, @exit, @call={0x85, 0x0, 0x0, 0x2b}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xeca}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @generic={0xb1, 0x2, 0x2, 0x7f, 0xfffff800}, @jmp={0x5, 0x0, 0x6, 0x1, 0xb, 0x10}], &(0x7f0000002c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', r15, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000002c80)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000002cc0)={0x3, 0xd, 0x5a6, 0x4}, 0x10, r9, r5, 0x0, &(0x7f0000002d00)=[r10, r1]}, 0x80) io_cancel(r19, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x6, 0x9, r20, &(0x7f0000002dc0)="2d06b10eb3b14b32e1791a7795c09be306ec3eb9649d9519b80ac159e0f7eb4f60ae8b4c06002ecbba9b6cc1c0d484e65e8a428018e01d6df6ff0e", 0x3b, 0x7fffffffffffffff, 0x0, 0x2, r7}, &(0x7f0000002e40)) (async) ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, &(0x7f0000002e80)) 06:11:32 executing program 1: sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040085}, 0x48010) (async) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x20}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040085}, 0x48010) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_virt_wifi\x00'}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'veth1_virt_wifi\x00', 0x0}) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000180)=@can, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/200, 0xc8}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/6, 0x6}, {&(0x7f0000001340)=""/37, 0x25}, {&(0x7f0000001380)=""/160, 0xa0}, {&(0x7f0000001440)=""/87, 0x57}, {&(0x7f00000014c0)=""/114, 0x72}, {&(0x7f0000001540)=""/139, 0x8b}, {&(0x7f0000001600)=""/97, 0x61}, {&(0x7f0000001680)}], 0xa, &(0x7f0000001780)=""/185, 0xb9}, 0x20) (async) recvmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000000180)=@can, 0x80, &(0x7f00000016c0)=[{&(0x7f0000000200)=""/200, 0xc8}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/6, 0x6}, {&(0x7f0000001340)=""/37, 0x25}, {&(0x7f0000001380)=""/160, 0xa0}, {&(0x7f0000001440)=""/87, 0x57}, {&(0x7f00000014c0)=""/114, 0x72}, {&(0x7f0000001540)=""/139, 0x8b}, {&(0x7f0000001600)=""/97, 0x61}, {&(0x7f0000001680)}], 0xa, &(0x7f0000001780)=""/185, 0xb9}, 0x20) r1 = socket$isdn(0x22, 0x3, 0x21) setsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000001880), 0x4) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001980)={&(0x7f0000001940)={0x14, r2, 0x4, 0x70bd29, 0x25dfdbff, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r3, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040040}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000001b40), r3) sendmsg$NBD_CMD_RECONFIGURE(r4, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x20, r5, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}]}, 0x20}}, 0x22004000) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001d00)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c80)={0x38, r5, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_BACKEND_IDENTIFIER={0x6, 0xa, '+&'}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x38}, 0x1, 0x0, 0x0, 0x22004800}, 0x4) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000001d80), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_UP(r3, &(0x7f0000001e40)={&(0x7f0000001d40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001e00)={&(0x7f0000001dc0)={0x24, r6, 0x630, 0x70bd2d, 0x25dfdbfd, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44080}, 0x801) socketpair(0x10, 0x3, 0x800, &(0x7f0000001ec0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_dev$mouse(&(0x7f0000001f00), 0xf11f, 0xc000) (async) r8 = syz_open_dev$mouse(&(0x7f0000001f00), 0xf11f, 0xc000) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000002000)={&(0x7f0000001e80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x78, r5, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x9}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8}, {0x8, 0x1, r7}, {0x8}, {0x8}, {0x8, 0x1, r8}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x40010}, 0x44000) shmctl$SHM_LOCK(0x0, 0xb) (async) shmctl$SHM_LOCK(0x0, 0xb) shmctl$SHM_UNLOCK(0x0, 0xc) r9 = syz_open_dev$vcsa(&(0x7f0000002080), 0x40, 0x100) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000002180)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)={0x74, r5, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x16, 0xa, '/dev/input/mouse#\x00'}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r8}, {0x8, 0x1, r8}, {0x8, 0x1, r9}, {0x8, 0x1, r8}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x881}, 0x2000c0c1) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000002200)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f0000002200)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000002240)) (async) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000002240)=0x0) sendmsg$NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000022c0)={&(0x7f0000002280)={0x34, r6, 0x2, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_TARGET_INDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x44001}, 0x4000840) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000002380), r4) ioctl$IOCTL_GET_NCIDEV_IDX(r8, 0x0, &(0x7f00000023c0)=0x0) sendmsg$NFC_CMD_DEACTIVATE_TARGET(r4, &(0x7f00000024c0)={&(0x7f0000002340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002480)={&(0x7f0000002400)={0x44, r12, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r11}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000080}, 0x4c883) r14 = syz_open_dev$vcsa(&(0x7f0000002500), 0x5, 0x482300) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r14, &(0x7f00000026c0)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x68, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x80) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r14, &(0x7f00000026c0)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000002680)={&(0x7f0000002600)={0x68, 0x0, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x80) 06:11:32 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:32 executing program 4: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1e551d06c43a1dfc}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x41}, 0x20004080) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_open_dev$vcsa(&(0x7f00000001c0), 0x2, 0x94a40) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x60, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r2}, {0x8, 0x1, r4}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000044}, 0x80000) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x14340040}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r1, 0x10, 0x70bd27, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BACKEND_IDENTIFIER={0x5, 0xa, '\x00'}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5e64}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000090}, 0x8040004) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000400)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000400)) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000600)={{0x80000000, 0x0, 0x6, [0x20, 0x529d]}, {0x80000000, 0x0, 0x5, [0xff, 0x8]}, 0x0, [0x81, 0xfff]}) (async) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000600)={{0x80000000, 0x0, 0x6, [0x20, 0x529d]}, {0x80000000, 0x0, 0x5, [0xff, 0x8]}, 0x0, [0x81, 0xfff]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000640)) (async) ioctl$MEDIA_IOC_ENUM_ENTITIES(r4, 0xc1007c01, &(0x7f0000000640)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x77886c4e665e653d}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r1, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r4}, {0x8, 0x1, r5}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) sendmsg$NFC_CMD_START_POLL(r0, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@NFC_ATTR_PROTOCOLS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0xc8013) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f00000009c0), r0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000a00)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20010000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r7, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x24}}, 0x40000) (async) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x20010000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x24, r7, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r8}]}, 0x24}}, 0x40000) socketpair(0x11, 0x3, 0x6, &(0x7f0000000b00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r9, &(0x7f0000001180)={&(0x7f0000000b40), 0xc, &(0x7f0000001140)={&(0x7f0000000b80)={0x59c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x4dc, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x2}}]}, {0xe0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0xa0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}]}, {0x334, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0x2d8, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x8b}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe7f4}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xdf}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x40, @loopback, 0x7}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x59c}, 0x1, 0x0, 0x0, 0x4}, 0x20040851) (async) sendmsg$WG_CMD_GET_DEVICE(r9, &(0x7f0000001180)={&(0x7f0000000b40), 0xc, &(0x7f0000001140)={&(0x7f0000000b80)={0x59c, 0x0, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_PEERS={0x4dc, 0x8, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @rand_addr=0x64010100}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x2}}]}, {0xe0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0xa0, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}]}, {0x334, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0x2d8, 0x9, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x8b}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xe7f4}]}, {0x4c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @empty}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xdf}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x40, @loopback, 0x7}}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0x59c}, 0x1, 0x0, 0x0, 0x4}, 0x20040851) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r4, 0x800443d2, &(0x7f0000001240)={0x5, &(0x7f00000011c0)=[{@fixed}, {}, {}, {@none}, {@none}]}) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44094) (async) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000001340)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001300)={&(0x7f00000012c0)={0x2c, 0x0, 0x8, 0x70bd29, 0x25dfdbfe, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x7}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x44094) syz_open_dev$mouse(&(0x7f0000001380), 0x5, 0x2) sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000001480)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x2c, r7, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}, @NFC_ATTR_COMM_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4004041) sendmsg$NFC_CMD_FW_DOWNLOAD(r6, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x28, r7, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NFC_ATTR_FIRMWARE_NAME={0x14, 0x14, '-*,.!(,(*[\':.$[\''}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x11) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x48000) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f0000001680)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001640)={&(0x7f0000001600)={0x38, 0x0, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x48000) r10 = syz_open_dev$mouse(&(0x7f00000016c0), 0xffffffffffffffff, 0x400200) r11 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001740), r5) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000001780)={'wg1\x00', 0x0}) sendmsg$WG_CMD_GET_DEVICE(r10, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, r11, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x4049}, 0x8041) (async) sendmsg$WG_CMD_GET_DEVICE(r10, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001800)={&(0x7f00000017c0)={0x24, r11, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r12}]}, 0x24}, 0x1, 0x0, 0x0, 0x4049}, 0x8041) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x24008080) (async) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, r7, 0x200, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x24008080) 06:11:32 executing program 5: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000), 0x10) r1 = syz_open_dev$mouse(&(0x7f0000000040), 0x7, 0x422801) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000080)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001080)={{r3, 0xbc, 0x8001, 0x80000001, 0xfff, 0x100000000, 0x5c7, 0x7, 0xfffffffe, 0x969, 0x101, 0x0, 0x1, 0x5, 0x6}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000001080)={{r3, 0xbc, 0x8001, 0x80000001, 0xfff, 0x100000000, 0x5c7, 0x7, 0xfffffffe, 0x969, 0x101, 0x0, 0x1, 0x5, 0x6}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) clock_gettime(0x5, &(0x7f0000001140)) (async) clock_gettime(0x5, &(0x7f0000001140)) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000001180)={r3, 0x7}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002180)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002180)={0x0, ""/256, 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000002380), r5) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000023c0)={0x9, 0xefe7, 0xd19}) (async) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f00000023c0)={0x9, 0xefe7, 0xd19}) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x23f) (async) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x23f) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r1, 0xc018620c, &(0x7f0000002400)={0x2}) r6 = syz_open_dev$vcsa(&(0x7f0000002440), 0x51, 0x20400) ioctl$BINDER_GET_NODE_DEBUG_INFO(r6, 0xc018620b, &(0x7f0000002480)) r7 = syz_open_dev$vcsa(&(0x7f00000024c0), 0x3ff, 0x101000) syz_genetlink_get_family_id$wireguard(&(0x7f0000002540), r6) (async) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000002540), r6) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000002600)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0xc0000504}, 0xc, &(0x7f00000025c0)={&(0x7f0000002580)={0x40, r8, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x4008800) ioctl$MEDIA_IOC_ENUM_LINKS(r6, 0xc0287c02, &(0x7f0000002700)={0x80000000, &(0x7f0000002640), &(0x7f0000002680)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_ENTITIES(r1, 0xc1007c01, &(0x7f0000002740)={r9}) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x9) (async) ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x9) ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000002e00)={0x0, 0x4, 0x0, &(0x7f0000002840)=[{}, {}, {}, {}], 0x6, 0x0, &(0x7f00000029c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000002c80)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, &(0x7f0000002dc0)=[{}]}) ioctl$UI_GET_VERSION(r7, 0x8004552d, &(0x7f0000002e80)) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000002ec0)={0x0, r1}, 0x10) (async) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000002ec0)={0x0, r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000002f40)={0xffffffffffffffff, r10, 0x0, 0xa, &(0x7f0000002f00)='wireguard\x00'}, 0x30) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002f80)='./binderfs/binder0\x00', 0x2, 0x0) (async) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002f80)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r11, 0xd000943e, &(0x7f0000002fc0)={r2, r4, "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", "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"}) timerfd_create(0x5, 0x80c00) (async) r12 = timerfd_create(0x5, 0x80c00) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000004640)={0x118, 0x0, &(0x7f0000004480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000040c0)={@ptr={0x70742a85, 0x0, &(0x7f0000003fc0)=""/31, 0x1f, 0x2, 0x24}, @fd={0x66642a85, 0x0, r12}, @ptr={0x70742a85, 0x0, &(0x7f0000004000)=""/175, 0xaf, 0x2, 0x22}}, &(0x7f0000004140)={0x0, 0x28, 0x40}}}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x50, 0x18, &(0x7f0000004180)={@fda={0x66646185, 0x6, 0x1, 0x8}, @flat=@binder={0x73622a85, 0x100a, 0x1}, @fd={0x66642a85, 0x0, r11}}, &(0x7f0000004200)={0x0, 0x20, 0x38}}, 0x40}, @increfs_done={0x40106308, 0x3}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f00000043c0)={@ptr={0x70742a85, 0x1, &(0x7f0000004240)=""/160, 0xa0, 0x1, 0xa}, @fda={0x66646185, 0x2, 0x0, 0x37}, @ptr={0x70742a85, 0x0, &(0x7f0000004300)=""/141, 0x8d, 0x2, 0xf}}, &(0x7f0000004440)={0x0, 0x28, 0x48}}}, @decrefs={0x40046307, 0x1}, @register_looper, @increfs={0x40046304, 0x3}, @free_buffer, @increfs={0x40046304, 0x401}], 0x4c, 0x0, &(0x7f00000045c0)="57764f8779a0939d205abc3c46cf3f61b5b0702912235aa77f4120c4bae819afacdd592df802b690c4d98a49a9f97bffa6d5d7b3f16406a1158319a535fb421707c1af4a9076777ba7c73a03"}) ioctl$sock_bt_cmtp_CMTPGETCONNLIST(r1, 0x800443d2, &(0x7f0000004700)={0x4, &(0x7f0000004680)=[{}, {@none}, {@none}, {@none}]}) 06:11:32 executing program 3: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x30d000, 0x0) (async) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000010c0)={&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001100)=@bloom_filter={0x1e, 0x5, 0x7, 0x7, 0x1016, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x0, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001180)=@base={0xd, 0xe7, 0x4, 0x5, 0x482, 0x1, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001200)=@base={0x8, 0x5, 0x7ff, 0x80000001, 0x4c0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@bloom_filter={0x1e, 0x4, 0x1f, 0x1e, 0x2, 0xffffffffffffffff, 0x36, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001340)=@bpf_tracing={0x1a, 0x3, &(0x7f0000000040)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @map_idx={0x18, 0x1, 0x5, 0x0, 0xd}], &(0x7f0000000080)='GPL\x00', 0x7, 0x73, &(0x7f00000000c0)=""/115, 0x41100, 0x12, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xb, 0x7, 0x7}, 0x10, 0x13dc9, r0, 0x0, &(0x7f0000001300)=[0x1, 0x1, r1, 0x1, r2, r3, r4]}, 0x80) (async) io_setup(0x3861, &(0x7f00000013c0)=0x0) (async) r7 = syz_open_dev$vcsa(&(0x7f00000014c0), 0x5, 0x400000) io_submit(r6, 0x2, &(0x7f0000001540)=[&(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x6, r5, &(0x7f0000001400)="ed3f42afa070a90aa3a6a7c5e835f99e0e0977c93d899914a9351ecb7b07dca8efdbef3c201a024eb9", 0x29, 0x7, 0x0, 0x3}, &(0x7f0000001500)={0x0, 0x0, 0x0, 0x7, 0x3ff, r5, &(0x7f0000001480)="fb8b0c2040363d3ceea9c9c95d48b5cb7ce847f2b0403ce1a350e676726567c9a90a2460ddbd5883087af962", 0x2c, 0x3, 0x0, 0x2, r7}]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001980)={r0, 0xe0, &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000016c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000001700)=[0x0], &(0x7f0000001740)=[0x0], 0x0, 0x8, &(0x7f0000001780)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000017c0), &(0x7f0000001800), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001840)}}, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0x0, 0x100, 0x6, 0x4, 0x600, 0xffffffffffffffff, 0x10001, '\x00', 0x0, r7, 0x3, 0x2, 0x5}, 0x48) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001a80)=@bpf_lsm={0x1d, 0xa, &(0x7f0000001580)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@generic={0x3, 0x0, 0xa, 0x1, 0x7}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @alu={0x7, 0x1, 0x3, 0x1, 0x1, 0xfffffffffffffffc, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x1, 0x0, 0x2, 0x0, 0xfffffffffffffff8, 0x1}]}, &(0x7f0000001600)='GPL\x00', 0xfcb, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, 0x1b, r7, 0x8, &(0x7f0000001640)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000001680)={0x1, 0x7, 0x4, 0x1}, 0x10, r9, 0x0, 0x0, &(0x7f0000001a40)=[r7, r10, r1]}, 0x80) (async) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000001c00)={'dvmrp1\x00', 0x0}) (async) r12 = syz_open_dev$mouse(&(0x7f0000001c40), 0x9, 0x200) bpf$PROG_LOAD(0x5, &(0x7f0000001d40)={0x12, 0xc, &(0x7f0000001b00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8810, 0x0, 0x0, 0x0, 0xa0000000}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6fe0b622, 0x0, 0x0, 0x0, 0x4}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x4}, @ldst={0x0, 0x3, 0x1, 0x2, 0x3, 0xffffffffffffffe0, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x77e9, 0x0, 0x0, 0x0, 0x200}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xe}]}, &(0x7f0000001b80)='GPL\x00', 0x100000, 0x15, &(0x7f0000001bc0)=""/21, 0x40f00, 0x4, '\x00', r11, 0x8, r12, 0x8, &(0x7f0000001c80)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000001cc0)={0x5, 0x5, 0x1, 0x4}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001d00)=[r10, r2]}, 0x80) (async) r13 = syz_open_dev$mouse(&(0x7f0000001dc0), 0x9, 0x400200) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r12, 0x8933, &(0x7f0000001e40)={'wg2\x00', 0x0}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000002140)={r0, 0xe0, &(0x7f0000002040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000001e80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, &(0x7f0000001ec0)=[0x0, 0x0], &(0x7f0000001f00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001f40)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001f80), &(0x7f0000001fc0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002000)}}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000002180)={'macsec0\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000021c0)={'pimreg1\x00', 0x0}) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000002200)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_NOOP(r13, &(0x7f0000002a80)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002a40)={&(0x7f0000002240)={0x7c8, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8, 0x1, r8}, {0x16c, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffd}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3f}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r11}, {0x80, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x9a3}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}]}}, {{0x8, 0x1, r15}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7d}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x100}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r17}}}]}}, {{0x8, 0x1, r18}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x70b, 0x40, 0x6, 0xc70c}, {0x5, 0x8, 0x9, 0x80000000}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3ff}}}]}}, {{0x8, 0x1, r11}, {0x144, 0x2, 0x0, 0x1, [{0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0xc0, 0x4, 0xac, 0x6}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x400}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r8}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x4}}, {{0x8, 0x1, r8}, {0xbc, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r11}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xddf1faee}}, {0x8}}}]}}, {{0x8, 0x1, r11}, {0xb4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x27}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}]}, 0x7c8}, 0x1, 0x0, 0x0, 0x24044000}, 0x10) (async) connect$can_bcm(r7, &(0x7f0000002ac0)={0x1d, r16}, 0x10) (async) ioctl$DRM_IOCTL_GEM_OPEN(r7, 0xc010640b, &(0x7f0000002b00)) ioctl$sock_bt_cmtp_CMTPGETCONNINFO(r12, 0x800443d3, &(0x7f0000002b40)={@any, 0x80000001, 0x8, 0x4}) (async) io_setup(0x7, &(0x7f0000002b80)=0x0) r20 = bpf$PROG_LOAD(0x5, &(0x7f0000002d40)={0x1, 0xe, &(0x7f0000002bc0)=@raw=[@map_idx_val={0x18, 0x1, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffd}, @exit, @call={0x85, 0x0, 0x0, 0x2b}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xeca}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffff01, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x8}, @map_idx_val={0x18, 0x7, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x2}, @generic={0xb1, 0x2, 0x2, 0x7f, 0xfffff800}, @jmp={0x5, 0x0, 0x6, 0x1, 0xb, 0x10}], &(0x7f0000002c40)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x8, '\x00', r15, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000002c80)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000002cc0)={0x3, 0xd, 0x5a6, 0x4}, 0x10, r9, r5, 0x0, &(0x7f0000002d00)=[r10, r1]}, 0x80) io_cancel(r19, &(0x7f0000002e00)={0x0, 0x0, 0x0, 0x6, 0x9, r20, &(0x7f0000002dc0)="2d06b10eb3b14b32e1791a7795c09be306ec3eb9649d9519b80ac159e0f7eb4f60ae8b4c06002ecbba9b6cc1c0d484e65e8a428018e01d6df6ff0e", 0x3b, 0x7fffffffffffffff, 0x0, 0x2, r7}, &(0x7f0000002e40)) (async) ioctl$USBDEVFS_REAPURB(r7, 0x4008550c, &(0x7f0000002e80)) 06:11:32 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:32 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:32 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) [ 105.754906][ T5231] binder: 5221:5231 ioctl d000943e 20002fc0 returned -22 06:11:32 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:32 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:32 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:32 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:32 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:33 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:33 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:33 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:33 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:33 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:33 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:33 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:33 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:33 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:33 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:33 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:33 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:33 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:33 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:33 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:33 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:33 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:34 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:34 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) 06:11:34 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) 06:11:34 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) 06:11:34 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) 06:11:34 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:34 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:34 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) 06:11:34 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) 06:11:34 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) 06:11:34 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:34 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:34 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) 06:11:34 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) 06:11:34 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:34 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:34 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:34 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) 06:11:35 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:35 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:35 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) 06:11:35 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:35 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:35 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:35 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:35 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) 06:11:35 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:35 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:35 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:35 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) 06:11:35 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:35 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:35 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) 06:11:35 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) timerfd_create(0x5, 0x0) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:36 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:36 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:36 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:36 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:36 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:36 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) timerfd_create(0x5, 0x0) 06:11:36 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:36 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) 06:11:36 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:36 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:36 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:36 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) 06:11:36 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) 06:11:36 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:36 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) 06:11:36 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) 06:11:36 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:37 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:37 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) 06:11:37 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) 06:11:37 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:37 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:37 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:37 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) 06:11:37 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:37 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:37 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:37 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:37 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:38 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:38 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) timerfd_create(0x5, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 06:11:38 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:38 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) 06:11:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:38 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) timerfd_create(0x5, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 06:11:38 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) 06:11:38 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:38 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:38 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:38 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) 06:11:38 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) timerfd_create(0x5, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 06:11:38 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:38 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:38 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:38 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:38 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) timerfd_create(0x5, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 06:11:39 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:39 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, 0xffffffffffffffff, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:39 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:39 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:39 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) timerfd_create(0x5, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 06:11:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:39 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) timerfd_create(0x5, 0x0) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:39 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:39 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) timerfd_create(0x5, 0x0) shmctl$SHM_LOCK(0x0, 0xb) 06:11:39 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, 0xffffffffffffffff, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) sendmsg$can_bcm(r3, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:39 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:39 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) timerfd_create(0x5, 0x0) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) sendmsg$can_bcm(r3, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:39 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:39 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, 0xffffffffffffffff, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:39 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:39 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) sendmsg$can_bcm(r3, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:40 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, 0xffffffffffffffff, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:40 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) timerfd_create(0x5, 0x0) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) sendmsg$can_bcm(r3, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:40 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:40 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) sendmsg$can_bcm(r2, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:40 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:40 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:40 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, 0xffffffffffffffff, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) sendmsg$can_bcm(r2, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:40 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) sendmsg$can_bcm(r2, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:40 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, 0xffffffffffffffff, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:40 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:40 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, 0xffffffffffffffff, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:40 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) sendmsg$can_bcm(r1, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:40 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:40 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:40 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:40 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, 0xffffffffffffffff, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:40 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) sendmsg$can_bcm(r1, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:40 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:40 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:40 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) sendmsg$can_bcm(r0, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:41 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:41 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:41 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, 0xffffffffffffffff, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:41 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:41 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) timerfd_create(0x5, 0x0) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:41 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) sendmsg$can_bcm(r0, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:41 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:41 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:41 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:41 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:41 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:41 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) sendmsg$can_bcm(r0, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:41 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:41 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) timerfd_create(0x5, 0x0) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:41 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:41 executing program 0: r0 = syz_open_dev$mouse(0x0, 0x401, 0x40) sendmsg$can_bcm(r0, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:41 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:41 executing program 0: r0 = syz_open_dev$mouse(0x0, 0x401, 0x40) sendmsg$can_bcm(r0, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:41 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) timerfd_create(0x5, 0x0) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:41 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:41 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:41 executing program 5: r0 = syz_open_dev$mouse(0x0, 0x401, 0x40) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:41 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:41 executing program 0: r0 = syz_open_dev$mouse(0x0, 0x401, 0x40) sendmsg$can_bcm(r0, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:42 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:42 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:42 executing program 5: r0 = syz_open_dev$mouse(0x0, 0x401, 0x40) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:42 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x40) sendmsg$can_bcm(r0, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:42 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, 0xffffffffffffffff, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:42 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:42 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:42 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x0) sendmsg$can_bcm(r0, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:42 executing program 5: r0 = syz_open_dev$mouse(0x0, 0x401, 0x40) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:42 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:42 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:42 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, 0xffffffffffffffff, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:42 executing program 0: syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:42 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x40) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:42 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:42 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:42 executing program 0: syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:42 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:42 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:42 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:42 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, 0xffffffffffffffff, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:42 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:42 executing program 0: syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:42 executing program 5: syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:43 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:43 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = getpid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:43 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:43 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x0) sendmsg$can_bcm(r0, 0x0, 0x800) 06:11:43 executing program 5: syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:43 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:43 executing program 5: syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x0) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) 06:11:43 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) 06:11:43 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = getpid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:43 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:43 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:43 executing program 5: r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x0) ioctl$BINDER_FREEZE(r0, 0x400c620e, 0x0) 06:11:43 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:43 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = getpid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:43 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) 06:11:43 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = getpid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:43 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) 06:11:43 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:43 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:43 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:43 executing program 0: r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x0) sendmsg$can_bcm(r0, 0x0, 0x0) 06:11:43 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:43 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = getpid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:44 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:44 executing program 0: syz_open_dev$mouse(&(0x7f0000000340), 0x0, 0x0) 06:11:44 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = getpid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:44 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) getpid() r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:44 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) 06:11:44 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:44 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:44 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:44 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:44 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) 06:11:44 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:44 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) getpid() r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:44 executing program 0: syz_open_dev$mouse(0x0, 0x0, 0x0) 06:11:44 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:44 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) 06:11:44 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:44 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r4 = getpid() ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000380)={r4, 0x1, 0x59}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:44 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:44 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) getpid() r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:45 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:45 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:45 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:45 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:45 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:45 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r4 = getpid() ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000380)={r4, 0x1, 0x59}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:45 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:45 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:45 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:45 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r4 = getpid() ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000380)={r4, 0x1, 0x59}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:45 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r4 = getpid() ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000380)={r4, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:45 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r4 = getpid() ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000380)={r4, 0x1, 0x59}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:45 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:45 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:45 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:45 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r4 = getpid() ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000380)={r4, 0x1, 0x59}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:45 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) 06:11:45 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r4 = getpid() ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000380)={r4, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:45 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r4 = getpid() ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000380)={r4, 0x1, 0x59}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:45 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:45 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r4 = getpid() ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000380)={r4, 0x1, 0x59}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:45 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:46 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) 06:11:46 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r3 = getpid() ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000380)={r3, 0x1, 0x59}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:46 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r3 = getpid() ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000380)={r3, 0x1, 0x59}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:46 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) 06:11:46 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:46 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r4 = getpid() ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000380)={r4, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:46 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r3 = getpid() ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000380)={r3, 0x1, 0x59}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:46 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r3, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:46 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) 06:11:46 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:46 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) 06:11:46 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r3 = getpid() ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000380)={r3, 0x1, 0x59}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:46 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:46 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) 06:11:46 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r3 = getpid() ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000380)={r3, 0x1, 0x59}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:46 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:46 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r3, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:46 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r3, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:46 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r3 = getpid() ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000380)={r3, 0x1, 0x59}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:46 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:46 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={0x0, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:46 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:46 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:46 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r3 = getpid() ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000380)={r3, 0x1, 0x59}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:47 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r3, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:47 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:47 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r3 = getpid() ioctl$BINDER_FREEZE(r2, 0x400c620e, &(0x7f0000000380)={r3, 0x1, 0x59}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:47 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = getpid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:47 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:47 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r3, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:47 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:47 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:47 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:47 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r3, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:47 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = getpid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:47 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:47 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:47 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:47 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001480)) 06:11:47 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r3, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:47 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:47 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = getpid() ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(0xffffffffffffffff, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:48 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:48 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:48 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001480)) 06:11:48 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:48 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r3, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:48 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:48 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:48 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001480)) 06:11:48 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:48 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:48 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r2, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:49 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:49 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:49 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:49 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:49 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r1 = getpid() ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000380)={r1, 0x1, 0x59}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r3 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r3, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:49 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:49 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:49 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r2, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:49 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:49 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r1 = getpid() ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000380)={r1, 0x1, 0x59}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r3 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r3, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:49 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r4 = getpid() ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000380)={r4, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r3, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:49 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:49 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r1 = getpid() ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000380)={r1, 0x1, 0x59}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r3 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r3, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:49 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r2, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:50 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) timerfd_create(0x5, 0x0) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:50 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x1) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r1 = getpid() ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000380)={r1, 0x1, 0x59}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r3 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r3, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:50 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:50 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:50 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)={0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r2, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:50 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r4 = getpid() ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000380)={r4, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r3, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:50 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x1) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r1 = getpid() ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000380)={r1, 0x1, 0x59}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r3 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r3, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:50 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:50 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r4 = getpid() ioctl$BINDER_FREEZE(r3, 0x400c620e, &(0x7f0000000380)={r4, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r6 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r6, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r3, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:50 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:50 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:50 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x1) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r1 = getpid() ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000380)={r1, 0x1, 0x59}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r3 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r3, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:50 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)={0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r2, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:50 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:50 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:50 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r4, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:50 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:50 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:50 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:51 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)={0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r2, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:51 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:51 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:51 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) timerfd_create(0x5, 0x0) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:51 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r4, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:51 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:51 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:51 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r3, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:51 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:51 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:51 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:51 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:51 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r4, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:51 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r3, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:51 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:51 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:51 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:51 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:51 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x1) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r1 = getpid() ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000380)={r1, 0x1, 0x59}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r3 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r3, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:52 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:52 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:52 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:52 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r3, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:52 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:52 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x1) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r1 = getpid() ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000380)={r1, 0x1, 0x59}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r3 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r3, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:52 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:52 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:52 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:52 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r3 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r5 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r5, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r3, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r3, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:52 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x1) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r1 = getpid() ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000380)={r1, 0x1, 0x59}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r3 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r3, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:52 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:52 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:52 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:52 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:52 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:52 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r2, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:52 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:52 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r4, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:52 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:52 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:52 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:52 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r2, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:52 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:52 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:53 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)={0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:53 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r4, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:53 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:53 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:53 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)={0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:53 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:53 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r2, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:53 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:53 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0) syz_open_dev$mouse(0x0, 0x5, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:53 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)={0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:53 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r4, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:53 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:53 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7fffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:53 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r2, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:53 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:53 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:53 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:53 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r4, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:53 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:53 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:53 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:53 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7fffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:53 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r2, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:53 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r4, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:53 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0) syz_open_dev$mouse(0x0, 0x0, 0x2080) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:54 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:54 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:54 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r2, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:54 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0) syz_open_dev$mouse(0x0, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:54 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x7fffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:54 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r4, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r4, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:54 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:54 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:54 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0) syz_open_dev$mouse(0x0, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:54 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x7fffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:54 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)={0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:54 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0) syz_open_dev$mouse(0x0, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:54 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:54 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r2, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:54 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0) syz_open_dev$mouse(0x0, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:54 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x7fffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:54 executing program 0: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) 06:11:54 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0) syz_open_dev$mouse(0x0, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:54 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)={0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:54 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:55 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r2, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) 06:11:55 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0) syz_open_dev$mouse(0x0, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:55 executing program 5: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000001c0)={0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) 06:11:55 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x7fffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) [ 128.392603][ T7368] list_del corruption. prev->next should be ffff88805c49d000, but was ffff888077482000. (prev=ffffffff8e5b8c80) 06:11:55 executing program 4: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, 0x0) syz_open_dev$mouse(0x0, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r2 = getpid() ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f0000000380)={r2, 0x1, 0x59}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:55 executing program 1: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x1) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r1, 0xc00c620f, &(0x7f0000000100)) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x7fffffffffffffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r4, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r6 = getpid() ioctl$BINDER_FREEZE(r5, 0x400c620e, &(0x7f0000000380)={r6, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r8 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r8, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r5, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r1, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r5, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) ioctl$DRM_IOCTL_LOCK(r5, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) [ 128.508543][ T7368] ------------[ cut here ]------------ [ 128.514213][ T7368] kernel BUG at lib/list_debug.c:59! [ 128.562063][ T7368] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 128.568204][ T7368] CPU: 1 PID: 7368 Comm: syz-executor.0 Not tainted 6.4.0-rc2-next-20230515-syzkaller #0 [ 128.578139][ T7368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/28/2023 [ 128.588425][ T7368] RIP: 0010:__list_del_entry_valid+0x11f/0x1b0 [ 128.594663][ T7368] Code: 29 a7 8a e8 e3 0a 51 fd 0f 0b 48 89 ca 48 c7 c7 c0 29 a7 8a e8 d2 0a 51 fd 0f 0b 4c 89 c2 48 c7 c7 20 2a a7 8a e8 c1 0a 51 fd <0f> 0b 48 89 d1 48 c7 c7 a0 2a a7 8a 4c 89 c2 e8 ad 0a 51 fd 0f 0b [ 128.614319][ T7368] RSP: 0018:ffffc9000535fd58 EFLAGS: 00010282 [ 128.620493][ T7368] RAX: 000000000000006d RBX: 0000000000000001 RCX: 0000000000000000 [ 128.628503][ T7368] RDX: 0000000000000000 RSI: ffffffff81689ddc RDI: 0000000000000005 [ 128.636527][ T7368] RBP: ffff88805c49d000 R08: 0000000000000005 R09: 0000000000000000 [ 128.644713][ T7368] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88805c49d008 [ 128.652725][ T7368] R13: ffff88805c498098 R14: ffff88805c49b000 R15: ffff88805c4985f0 [ 128.660951][ T7368] FS: 000055555579b400(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 128.669928][ T7368] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 128.676531][ T7368] CR2: 000055555661a708 CR3: 0000000022b7e000 CR4: 00000000003506e0 [ 128.684520][ T7368] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 128.692590][ T7368] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 128.700577][ T7368] Call Trace: [ 128.703871][ T7368] [ 128.706814][ T7368] nfc_llcp_unregister_device+0xb8/0x260 [ 128.712496][ T7368] nfc_unregister_device+0x196/0x330 [ 128.717804][ T7368] virtual_ncidev_close+0x52/0xb0 [ 128.722869][ T7368] __fput+0x27c/0xa90 [ 128.726883][ T7368] ? virtual_nci_open+0x10/0x10 [ 128.731773][ T7368] task_work_run+0x16f/0x270 [ 128.736389][ T7368] ? task_work_cancel+0x30/0x30 [ 128.741268][ T7368] exit_to_user_mode_prepare+0x210/0x240 [ 128.746928][ T7368] syscall_exit_to_user_mode+0x1d/0x50 [ 128.752428][ T7368] do_syscall_64+0x46/0xb0 [ 128.756885][ T7368] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 128.762817][ T7368] RIP: 0033:0x7f3d4f03e01b [ 128.767248][ T7368] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 128.786885][ T7368] RSP: 002b:00007ffd5d0e6c00 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 128.795320][ T7368] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 00007f3d4f03e01b [ 128.803311][ T7368] RDX: 0000000000000000 RSI: 0000001b2cd22cb8 RDI: 0000000000000004 06:11:55 executing program 3: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$BINDER_GET_FROZEN_INFO(r0, 0xc00c620f, &(0x7f0000000100)) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x3}) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x7fffffffffffffff) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x4, r3, 0x8001}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) r5 = getpid() ioctl$BINDER_FREEZE(r4, 0x400c620e, &(0x7f0000000380)={r5, 0x1, 0x59}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f00000003c0)={0x0, 0x1}) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r7 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r6, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r7, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) 06:11:55 executing program 2: ioctl$BINDER_GET_EXTENDED_ERROR(0xffffffffffffffff, 0xc00c6211, &(0x7f0000000000)) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000080)=0x1) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x0, 0x0) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000140)={@none, 0x3}) r1 = syz_open_dev$mouse(&(0x7f0000000180), 0x5, 0x2080) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000001c0)={0x3}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xfcd4b48176a6d6a7, &(0x7f0000000240)={0x5, &(0x7f0000000200)=[{0x0, 0xbc, 0x3, 0x2}, {0x3, 0xa6, 0x6, 0x2}, {0x0, 0x3, 0x40, 0x80000001}, {0x8000, 0x5, 0x4, 0x200}, {0x7, 0x3, 0xfd, 0x9}]}) openat$nci(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder1\x00', 0x802, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000340), 0x401, 0x40) getpid() r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000001400)={0x3, &(0x7f00000013c0)=[{0x2, 0xf7, 0x6, 0x1ff}, {0x3, 0xd0, 0x1, 0x9}, {0xa9, 0x8, 0x1, 0xfffffffc}]}) r4 = timerfd_create(0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r3, 0x40182103, &(0x7f0000001440)={0x0, 0x0, r4, 0xfffffff7, 0x80000}) shmctl$SHM_LOCK(0x0, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000001480)) sendmsg$can_bcm(r2, &(0x7f0000001600)={&(0x7f0000001500), 0x10, &(0x7f00000015c0)={&(0x7f0000001540)={0x5, 0x10, 0x800, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "f666792055399b50"}}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x800) ioctl$BINDER_GET_EXTENDED_ERROR(r0, 0xc00c6211, &(0x7f0000001640)) ioctl$UI_DEV_DESTROY(r2, 0x5502) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000001680)={0x73622a85, 0xa, 0x2}) syz_open_dev$vcsa(&(0x7f00000016c0), 0xb6, 0x80) ioctl$DRM_IOCTL_LOCK(r2, 0x4008642a, &(0x7f0000001700)={0x0, 0x1}) [ 128.811303][ T7368] RBP: 00007f3d4f1ad980 R08: 0000000000000000 R09: 00000000b9f50a3a [ 128.819306][ T7368] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000001f7e7 [ 128.827314][ T7368] R13: 00007ffd5d0e6d00 R14: 00007f3d4f1ac050 R15: 0000000000000032 [ 128.835342][ T7368] [ 128.838377][ T7368] Modules linked in: [ 128.863801][ T7368] ---[ end trace 0000000000000000 ]--- [ 128.873261][ T7368] RIP: 0010:__list_del_entry_valid+0x11f/0x1b0 [ 128.886159][ T7368] Code: 29 a7 8a e8 e3 0a 51 fd 0f 0b 48 89 ca 48 c7 c7 c0 29 a7 8a e8 d2 0a 51 fd 0f 0b 4c 89 c2 48 c7 c7 20 2a a7 8a e8 c1 0a 51 fd <0f> 0b 48 89 d1 48 c7 c7 a0 2a a7 8a 4c 89 c2 e8 ad 0a 51 fd 0f 0b [ 128.923087][ T7368] RSP: 0018:ffffc9000535fd58 EFLAGS: 00010282 [ 128.940516][ T7368] RAX: 000000000000006d RBX: 0000000000000001 RCX: 0000000000000000 [ 128.948859][ T7368] RDX: 0000000000000000 RSI: ffffffff81689ddc RDI: 0000000000000005 [ 128.968800][ T7368] RBP: ffff88805c49d000 R08: 0000000000000005 R09: 0000000000000000 [ 128.984139][ T7368] R10: 0000000080000000 R11: 0000000000000001 R12: ffff88805c49d008 [ 128.992247][ T7368] R13: ffff88805c498098 R14: ffff88805c49b000 R15: ffff88805c4985f0 [ 129.008552][ T7368] FS: 000055555579b400(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 129.025074][ T7368] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 129.037897][ T7368] CR2: 00007f43a5185998 CR3: 0000000022b7e000 CR4: 00000000003506f0 [ 129.046046][ T7368] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 129.055201][ T7368] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 129.072058][ T7368] Kernel panic - not syncing: Fatal exception [ 129.078390][ T7368] Kernel Offset: disabled [ 129.082732][ T7368] Rebooting in 86400 seconds..