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"}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f00000008c0)) 13:04:11 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0xf000, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:11 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x206, 0x0) 13:04:11 executing program 1: ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x16, 0x1b, 0x123, &(0x7f0000000080)="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"}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000880)={0x15f, 0x1c, &(0x7f0000000480)="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"}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f00000008c0)) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x16, 0x1b, 0x123, &(0x7f0000000080)="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"}) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) (async) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000880)={0x15f, 0x1c, &(0x7f0000000480)="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"}) (async) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f00000008c0)) (async) [ 1825.261685][T20243] binder: Bad value for 'stats' [ 1825.272128][T20246] FAULT_INJECTION: forcing a failure. [ 1825.272128][T20246] name failslab, interval 1, probability 0, space 0, times 0 13:04:11 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=glnbal,stats=global,stats=']) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1410, 0x400, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000040)={0xae3, 'syz1\x00'}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=glnbal,stats=global,stats=']) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1410, 0x400, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20000000) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0) (async) ioctl$IMSETDEVNAME(r0, 0x80184947, &(0x7f0000000040)={0xae3, 'syz1\x00'}) (async) [ 1825.315135][T20246] CPU: 1 PID: 20246 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1825.325110][T20246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1825.335209][T20246] Call Trace: [ 1825.338526][T20246] [ 1825.341499][T20246] dump_stack_lvl+0xd1/0x138 [ 1825.346150][T20246] should_fail_ex.cold+0x5/0xa [ 1825.350982][T20246] ? alloc_vfsmnt+0x23/0x6b0 [ 1825.355647][T20246] should_failslab+0x9/0x20 [ 1825.360257][T20246] kmem_cache_alloc+0x5a/0x430 13:04:12 executing program 1: ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x16, 0x1b, 0x123, &(0x7f0000000080)="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"}) (async, rerun: 32) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async, rerun: 32) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) (async) ioctl$PIO_FONTX(r0, 0x4b6c, &(0x7f0000000880)={0x15f, 0x1c, &(0x7f0000000480)="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"}) (async) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f00000008c0)) [ 1825.365114][T20246] alloc_vfsmnt+0x23/0x6b0 [ 1825.369591][T20246] clone_mnt+0x6c/0x1040 [ 1825.373920][T20246] copy_tree+0x3b1/0xae0 [ 1825.378241][T20246] copy_mnt_ns+0x1af/0xb30 [ 1825.382722][T20246] ? trace_kmem_cache_alloc+0x35/0x100 [ 1825.388251][T20246] ? kmem_cache_alloc+0x234/0x430 [ 1825.393348][T20246] create_new_namespaces+0xd6/0xb20 [ 1825.398625][T20246] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1825.400097][T20259] binder: Bad value for 'stats' [ 1825.404306][T20246] ksys_unshare+0x449/0x920 [ 1825.404347][T20246] ? unshare_fd+0x1c0/0x1c0 [ 1825.404387][T20246] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1825.404435][T20246] __x64_sys_unshare+0x31/0x40 [ 1825.404467][T20246] do_syscall_64+0x39/0xb0 [ 1825.433474][T20246] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1825.439441][T20246] RIP: 0033:0x7f51e048c0d9 [ 1825.443938][T20246] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1825.456539][T20259] binder: Bad value for 'stats' [ 1825.463650][T20246] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1825.463685][T20246] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1825.463706][T20246] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1825.463725][T20246] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1825.463742][T20246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 13:04:12 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x207, 0x0) [ 1825.463760][T20246] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1825.463798][T20246] 13:04:12 executing program 4: unshare(0x20000) (fail_nth: 66) 13:04:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x30000, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:12 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x20f, 0x0) [ 1825.667702][T20276] FAULT_INJECTION: forcing a failure. [ 1825.667702][T20276] name failslab, interval 1, probability 0, space 0, times 0 [ 1825.695377][T20276] CPU: 0 PID: 20276 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1825.705352][T20276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1825.715448][T20276] Call Trace: [ 1825.718769][T20276] [ 1825.721795][T20276] dump_stack_lvl+0xd1/0x138 [ 1825.726441][T20276] should_fail_ex.cold+0x5/0xa [ 1825.731260][T20276] ? alloc_vfsmnt+0x23/0x6b0 [ 1825.735899][T20276] should_failslab+0x9/0x20 [ 1825.740456][T20276] kmem_cache_alloc+0x5a/0x430 [ 1825.745273][T20276] alloc_vfsmnt+0x23/0x6b0 [ 1825.749741][T20276] clone_mnt+0x6c/0x1040 [ 1825.754045][T20276] copy_tree+0x3b1/0xae0 [ 1825.758357][T20276] copy_mnt_ns+0x1af/0xb30 [ 1825.762808][T20276] ? trace_kmem_cache_alloc+0x35/0x100 [ 1825.768307][T20276] ? kmem_cache_alloc+0x234/0x430 [ 1825.773358][T20276] create_new_namespaces+0xd6/0xb20 [ 1825.778679][T20276] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1825.784350][T20276] ksys_unshare+0x449/0x920 [ 1825.788964][T20276] ? unshare_fd+0x1c0/0x1c0 [ 1825.793500][T20276] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1825.799441][T20276] __x64_sys_unshare+0x31/0x40 [ 1825.804235][T20276] do_syscall_64+0x39/0xb0 [ 1825.808678][T20276] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1825.814610][T20276] RIP: 0033:0x7f51e048c0d9 [ 1825.819131][T20276] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1825.838762][T20276] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1825.847198][T20276] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1825.855188][T20276] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 13:04:12 executing program 0: r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_LISTALL(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb4, r0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0xa0, 0x8, 0x0, 0x1, [{0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3f5fe4ec}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xcb930f5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd8}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3c53109b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3126daec}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x28d5db7c}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x13}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7c5fca39}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1fe59c1f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2622621f}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4ea9635}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15039390}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x5a}]}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x513a6a0eaee39aec}, 0x4090) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="001800000000000000000d008c0f9a5be4008af47176"], 0x14}}, 0x0) (async) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000200)={0x16c, 0x4, &(0x7f0000000280)="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"}) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000006c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan4\x00'}) 13:04:12 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000080)={@null, @bcast, @null, 0x2, 0x3, 0x6, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) 13:04:12 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000340)={0x38, 0x7, r4, 0x0, 0x10000, 0x0, 0x0, 0x2e4ef3, 0xe8667}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x1404, &(0x7f0000000040)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x10d200, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x1411, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r9, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r8, 0x3ba0, &(0x7f0000000540)={0x38, 0x6, r9, 0x0, r5}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r10}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000400)={0x38, 0x7, r10, 0x0, 0x0, 0x0, 0x3, 0x1d6a5, 0x7e02}) mount$binderfs(&(0x7f0000000140), &(0x7f0000000180)='./binderfs2\x00', &(0x7f00000001c0), 0x240000, &(0x7f00000002c0)={[{@stats}, {@max={'max', 0x3d, 0x2}}], [{@obj_user={'obj_user', 0x3d, '-'}}, {@obj_role={'obj_role', 0x3d, 'binder\x00'}}, {@uid_lt={'uid<', 0xee00}}]}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x140d, 0x100, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x20040010) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 13:04:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x34000, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:12 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x218, 0x0) [ 1825.863173][T20276] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1825.871158][T20276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1825.879145][T20276] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1825.887149][T20276] 13:04:12 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000080)={@null, @bcast, @null, 0x2, 0x3, 0x6, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) 13:04:12 executing program 4: unshare(0x20000) (fail_nth: 67) 13:04:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x400300, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:12 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000340)={0x38, 0x7, r4, 0x0, 0x10000, 0x0, 0x0, 0x2e4ef3, 0xe8667}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x1404, &(0x7f0000000040)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x10d200, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x1411, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r9, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r8, 0x3ba0, &(0x7f0000000540)={0x38, 0x6, r9, 0x0, r5}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r10}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000400)={0x38, 0x7, r10, 0x0, 0x0, 0x0, 0x3, 0x1d6a5, 0x7e02}) mount$binderfs(&(0x7f0000000140), &(0x7f0000000180)='./binderfs2\x00', &(0x7f00000001c0), 0x240000, &(0x7f00000002c0)={[{@stats}, {@max={'max', 0x3d, 0x2}}], [{@obj_user={'obj_user', 0x3d, '-'}}, {@obj_role={'obj_role', 0x3d, 'binder\x00'}}, {@uid_lt={'uid<', 0xee00}}]}) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x140d, 0x100, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x20040010) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r3}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000340)={0x38, 0x7, r4, 0x0, 0x10000, 0x0, 0x0, 0x2e4ef3, 0xe8667}) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x1404, &(0x7f0000000040)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x10d200, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x1411, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000100)={0xc}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r9}) (async) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r8, 0x3ba0, &(0x7f0000000540)={0x38, 0x6, r9, 0x0, r5}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r10}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000400)={0x38, 0x7, r10, 0x0, 0x0, 0x0, 0x3, 0x1d6a5, 0x7e02}) (async) mount$binderfs(&(0x7f0000000140), &(0x7f0000000180)='./binderfs2\x00', &(0x7f00000001c0), 0x240000, &(0x7f00000002c0)={[{@stats}, {@max={'max', 0x3d, 0x2}}], [{@obj_user={'obj_user', 0x3d, '-'}}, {@obj_role={'obj_role', 0x3d, 'binder\x00'}}, {@uid_lt={'uid<', 0xee00}}]}) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x140d, 0x100, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x20040010) (async) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) (async) 13:04:12 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x600, 0x0) 13:04:12 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async, rerun: 32) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x8) (rerun: 32) ioctl$SIOCAX25CTLCON(r0, 0x89e8, &(0x7f0000000080)={@null, @bcast, @null, 0x2, 0x3, 0x6, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) [ 1826.029949][T20295] FAULT_INJECTION: forcing a failure. [ 1826.029949][T20295] name failslab, interval 1, probability 0, space 0, times 0 13:04:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0xf0ffff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1826.072113][T20295] CPU: 0 PID: 20295 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1826.082085][T20295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1826.093140][T20295] Call Trace: [ 1826.096455][T20295] [ 1826.099417][T20295] dump_stack_lvl+0xd1/0x138 [ 1826.104058][T20295] should_fail_ex.cold+0x5/0xa [ 1826.108890][T20295] ? alloc_vfsmnt+0x23/0x6b0 [ 1826.113534][T20295] should_failslab+0x9/0x20 [ 1826.118098][T20295] kmem_cache_alloc+0x5a/0x430 [ 1826.122924][T20295] alloc_vfsmnt+0x23/0x6b0 [ 1826.127396][T20295] clone_mnt+0x6c/0x1040 [ 1826.131697][T20295] copy_tree+0x3b1/0xae0 [ 1826.136008][T20295] copy_mnt_ns+0x1af/0xb30 [ 1826.140496][T20295] ? trace_kmem_cache_alloc+0x35/0x100 [ 1826.146030][T20295] ? kmem_cache_alloc+0x234/0x430 [ 1826.151106][T20295] create_new_namespaces+0xd6/0xb20 [ 1826.156372][T20295] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1826.162155][T20295] ksys_unshare+0x449/0x920 [ 1826.166730][T20295] ? unshare_fd+0x1c0/0x1c0 [ 1826.171305][T20295] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1826.177274][T20295] __x64_sys_unshare+0x31/0x40 [ 1826.182096][T20295] do_syscall_64+0x39/0xb0 [ 1826.186560][T20295] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1826.192519][T20295] RIP: 0033:0x7f51e048c0d9 [ 1826.196986][T20295] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1826.216647][T20295] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1826.225093][T20295] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1826.233080][T20295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1826.241063][T20295] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1826.249056][T20295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1826.257049][T20295] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1826.265059][T20295] 13:04:13 executing program 1: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x80) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x1f, 0x1, 0x4, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x1, 0x8, 0x4}}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r0, 0x3, {0x0, 0x0, 0x3}}, 0x18) 13:04:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x1000000, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:13 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x1500, 0x0) 13:04:13 executing program 0: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x704, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) 13:04:13 executing program 4: unshare(0x20000) (fail_nth: 68) 13:04:13 executing program 2: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000200), 0x201, 0x0) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 32) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (rerun: 32) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r3, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r4}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000340)={0x38, 0x7, r4, 0x0, 0x10000, 0x0, 0x0, 0x2e4ef3, 0xe8667}) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x1404, &(0x7f0000000040)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) r6 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000003c0), 0x10d200, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x28, 0x1411, 0x200, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) (async, rerun: 32) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async, rerun: 64) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (rerun: 64) ioctl$IOMMU_IOAS_ALLOC(r8, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r8, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r9, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r8, 0x3ba0, &(0x7f0000000540)={0x38, 0x6, r9, 0x0, r5}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r7, 0x3ba0, &(0x7f0000000240)={0x38, 0x7, r10}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r6, 0x3ba0, &(0x7f0000000400)={0x38, 0x7, r10, 0x0, 0x0, 0x0, 0x3, 0x1d6a5, 0x7e02}) (async) mount$binderfs(&(0x7f0000000140), &(0x7f0000000180)='./binderfs2\x00', &(0x7f00000001c0), 0x240000, &(0x7f00000002c0)={[{@stats}, {@max={'max', 0x3d, 0x2}}], [{@obj_user={'obj_user', 0x3d, '-'}}, {@obj_role={'obj_role', 0x3d, 'binder\x00'}}, {@uid_lt={'uid<', 0xee00}}]}) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x140d, 0x100, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x44}, 0x20040010) (async) ioctl$KDDISABIO(0xffffffffffffffff, 0x4b37) 13:04:13 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0xff00, 0x0) 13:04:13 executing program 1: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x80) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x1f, 0x1, 0x4, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x1, 0x8, 0x4}}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r0, 0x3, {0x0, 0x0, 0x3}}, 0x18) 13:04:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x2000000, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1826.417841][T20323] FAULT_INJECTION: forcing a failure. [ 1826.417841][T20323] name failslab, interval 1, probability 0, space 0, times 0 13:04:13 executing program 0: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x704, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x704, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) [ 1826.535802][T20323] CPU: 1 PID: 20323 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1826.545859][T20323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1826.555967][T20323] Call Trace: [ 1826.559283][T20323] [ 1826.562262][T20323] dump_stack_lvl+0xd1/0x138 [ 1826.566910][T20323] should_fail_ex.cold+0x5/0xa [ 1826.571743][T20323] ? alloc_vfsmnt+0x23/0x6b0 [ 1826.576389][T20323] should_failslab+0x9/0x20 [ 1826.581049][T20323] kmem_cache_alloc+0x5a/0x430 [ 1826.585876][T20323] alloc_vfsmnt+0x23/0x6b0 [ 1826.590352][T20323] clone_mnt+0x6c/0x1040 [ 1826.594667][T20323] copy_tree+0x3b1/0xae0 [ 1826.599075][T20323] copy_mnt_ns+0x1af/0xb30 [ 1826.603556][T20323] ? trace_kmem_cache_alloc+0x35/0x100 [ 1826.609072][T20323] ? kmem_cache_alloc+0x234/0x430 [ 1826.612496][T20343] binder: Unknown parameter 'þ—¾' [ 1826.614132][T20323] create_new_namespaces+0xd6/0xb20 [ 1826.614186][T20323] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1826.614225][T20323] ksys_unshare+0x449/0x920 13:04:13 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x2) 13:04:13 executing program 2: mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000000), 0x800000, &(0x7f0000000040)=ANY=[@ANYBLOB="1efe97be07070000000008b998565129a5666174733d676c6f1918446082ccc5e2f7439a000000001700a70b7526e1d74aed46157b9635f934ef50af432bc42dbd5b9e2fa8168d3c3be3901f8f"]) mount$binderfs(&(0x7f0000000100), &(0x7f0000000140)='./binderfs\x00', &(0x7f0000000180), 0x140820, &(0x7f00000001c0)=ANY=[@ANYBLOB="6dc0ae875ae9d1421a3030303030303030303030040031303030302c6d61736b3d4541595f455845432c00"]) r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) r1 = getuid() syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000580), 0xffffffffffffffff) mount$binderfs(&(0x7f00000004c0), &(0x7f0000000500)='./binderfs2\x00', &(0x7f0000000540), 0x100000, &(0x7f0000000800)=ANY=[@ANYBLOB='max=00000000000000000000377,stats=global,max=00000000000000000000001,max=00000000000000000000010,stats=global,stats=global,hash,subj_user=!}\'{@%-,fowner<', @ANYRESDEC=r1, @ANYBLOB="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"]) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)={0x170, r0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51e982c0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e4da571}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a3d795e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b8113e6}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x652c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5929f701}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x769a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe957}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f367a64}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77b36b67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5133f124}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4fcb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x348ccc0e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb36c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x6ac3b5aa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x65681c50}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x137d7e75}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x7e3890ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0x6aff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x489f1145}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3142ad5b}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c7b42e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9102201}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c034256}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe99d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d94302b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4626f351}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x9}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0xfffffffffffffecd, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x170}, 0x1, 0x0, 0x0, 0x10}, 0x40050) mount$binderfs(&(0x7f0000000680), &(0x7f00000006c0)='./binderfs2\x00', &(0x7f0000000700), 0x92000, &(0x7f0000000740)={[{@max={'max', 0x3d, 0x3f}}, {@max={'max', 0x3d, 0x6}}, {@max={'max', 0x3d, 0x6}}, {@max={'max', 0x3d, 0x1000}}], [{@fsname={'fsname', 0x3d, './binderfs2\x00'}}]}) 13:04:13 executing program 0: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r0, 0x704, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) 13:04:13 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x3) [ 1826.614259][T20323] ? unshare_fd+0x1c0/0x1c0 [ 1826.629055][T20343] binder: Unknown parameter 'mÀ®‡ZéÑB00000000000' [ 1826.630365][T20323] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1826.652075][T20323] __x64_sys_unshare+0x31/0x40 [ 1826.656900][T20323] do_syscall_64+0x39/0xb0 [ 1826.661379][T20323] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1826.667336][T20323] RIP: 0033:0x7f51e048c0d9 [ 1826.671793][T20323] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1826.691447][T20323] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1826.699924][T20323] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1826.707949][T20323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1826.715967][T20323] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1826.723982][T20323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 13:04:13 executing program 4: unshare(0x20000) (fail_nth: 69) 13:04:13 executing program 2: mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000000), 0x800000, &(0x7f0000000040)=ANY=[@ANYBLOB="1efe97be07070000000008b998565129a5666174733d676c6f1918446082ccc5e2f7439a000000001700a70b7526e1d74aed46157b9635f934ef50af432bc42dbd5b9e2fa8168d3c3be3901f8f"]) mount$binderfs(&(0x7f0000000100), &(0x7f0000000140)='./binderfs\x00', &(0x7f0000000180), 0x140820, &(0x7f00000001c0)=ANY=[@ANYBLOB="6dc0ae875ae9d1421a3030303030303030303030040031303030302c6d61736b3d4541595f455845432c00"]) (async) r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) (async, rerun: 64) r1 = getuid() (rerun: 64) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000580), 0xffffffffffffffff) (async, rerun: 32) mount$binderfs(&(0x7f00000004c0), &(0x7f0000000500)='./binderfs2\x00', &(0x7f0000000540), 0x100000, &(0x7f0000000800)=ANY=[@ANYBLOB='max=00000000000000000000377,stats=global,max=00000000000000000000001,max=00000000000000000000010,stats=global,stats=global,hash,subj_user=!}\'{@%-,fowner<', @ANYRESDEC=r1, @ANYBLOB="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"]) (async, rerun: 32) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)={0x170, r0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51e982c0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e4da571}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a3d795e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b8113e6}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x652c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5929f701}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x769a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe957}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f367a64}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77b36b67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5133f124}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4fcb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x348ccc0e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb36c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x6ac3b5aa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x65681c50}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x137d7e75}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x7e3890ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0x6aff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x489f1145}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3142ad5b}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c7b42e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9102201}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c034256}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe99d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d94302b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4626f351}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x9}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0xfffffffffffffecd, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x170}, 0x1, 0x0, 0x0, 0x10}, 0x40050) mount$binderfs(&(0x7f0000000680), &(0x7f00000006c0)='./binderfs2\x00', &(0x7f0000000700), 0x92000, &(0x7f0000000740)={[{@max={'max', 0x3d, 0x3f}}, {@max={'max', 0x3d, 0x6}}, {@max={'max', 0x3d, 0x6}}, {@max={'max', 0x3d, 0x1000}}], [{@fsname={'fsname', 0x3d, './binderfs2\x00'}}]}) 13:04:13 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x328085b, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1404, 0x2, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000040), 0x4) 13:04:13 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x4) 13:04:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x3000000, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:13 executing program 1: sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}}, 0x80) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x2f, 0x6, 0x1f, 0x1, 0x4, @empty, @private0={0xfc, 0x0, '\x00', 0x1}, 0x20, 0x1, 0x8, 0x4}}) connect$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r0, 0x3, {0x0, 0x0, 0x3}}, 0x18) [ 1826.732001][T20323] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1826.740045][T20323] [ 1826.799390][T20352] binder: Unknown parameter 'þ—¾' 13:04:13 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x328085b, 0x0) (async) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1404, 0x2, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) (async, rerun: 32) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000040), 0x4) (rerun: 32) 13:04:13 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x5) 13:04:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x4000000, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:13 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x10000, 0x0) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000007c0)={"e6b2da29bf178244b5d4e049edbbb2d971db6228cb2ac0ea15cd608b80ace2b7", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000800)={"44a5d4f83a7572fe8c7cf729944581a311f02205073cd182cb52aa8dd7c90f6f", r0}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000080)={@empty, @private=0xa010100}) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000000)={"91be78f50020edd3a309aba131ac99933d9cfd03ab669b7c64ea706a53f8a23a"}) [ 1826.842094][T20352] binder: Unknown parameter 'mÀ®‡ZéÑB00000000000' [ 1826.863735][T20363] FAULT_INJECTION: forcing a failure. [ 1826.863735][T20363] name failslab, interval 1, probability 0, space 0, times 0 [ 1826.904987][T20363] CPU: 0 PID: 20363 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1826.914962][T20363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1826.925077][T20363] Call Trace: [ 1826.928392][T20363] [ 1826.931347][T20363] dump_stack_lvl+0xd1/0x138 [ 1826.935999][T20363] should_fail_ex.cold+0x5/0xa [ 1826.940909][T20363] ? alloc_vfsmnt+0x23/0x6b0 [ 1826.945553][T20363] should_failslab+0x9/0x20 [ 1826.950116][T20363] kmem_cache_alloc+0x5a/0x430 [ 1826.954929][T20363] alloc_vfsmnt+0x23/0x6b0 [ 1826.959404][T20363] clone_mnt+0x6c/0x1040 [ 1826.963698][T20363] copy_tree+0x3b1/0xae0 [ 1826.968009][T20363] copy_mnt_ns+0x1af/0xb30 [ 1826.972570][T20363] ? trace_kmem_cache_alloc+0x35/0x100 [ 1826.978178][T20363] ? kmem_cache_alloc+0x234/0x430 [ 1826.983353][T20363] create_new_namespaces+0xd6/0xb20 [ 1826.988622][T20363] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1826.994321][T20363] ksys_unshare+0x449/0x920 [ 1826.998887][T20363] ? unshare_fd+0x1c0/0x1c0 13:04:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x5000000, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x6000000, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1827.003464][T20363] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1827.009433][T20363] __x64_sys_unshare+0x31/0x40 [ 1827.014253][T20363] do_syscall_64+0x39/0xb0 [ 1827.018717][T20363] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1827.024695][T20363] RIP: 0033:0x7f51e048c0d9 [ 1827.029151][T20363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1827.048809][T20363] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1827.057274][T20363] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1827.065294][T20363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1827.073313][T20363] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1827.081342][T20363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1827.089361][T20363] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1827.097407][T20363] 13:04:13 executing program 4: unshare(0x20000) (fail_nth: 70) 13:04:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x7000000, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:13 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x328085b, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1404, 0x2, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000040), 0x4) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x328085b, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x1404, 0x2, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20000800) (async) setsockopt$MRT_PIM(r0, 0x0, 0xcf, &(0x7f0000000040), 0x4) (async) 13:04:13 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x6) 13:04:13 executing program 2: mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000000), 0x800000, &(0x7f0000000040)=ANY=[@ANYBLOB="1efe97be07070000000008b998565129a5666174733d676c6f1918446082ccc5e2f7439a000000001700a70b7526e1d74aed46157b9635f934ef50af432bc42dbd5b9e2fa8168d3c3be3901f8f"]) (async) mount$binderfs(&(0x7f0000000100), &(0x7f0000000140)='./binderfs\x00', &(0x7f0000000180), 0x140820, &(0x7f00000001c0)=ANY=[@ANYBLOB="6dc0ae875ae9d1421a3030303030303030303030040031303030302c6d61736b3d4541595f455845432c00"]) (async) r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), 0xffffffffffffffff) (async) r1 = getuid() (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000580), 0xffffffffffffffff) mount$binderfs(&(0x7f00000004c0), &(0x7f0000000500)='./binderfs2\x00', &(0x7f0000000540), 0x100000, &(0x7f0000000800)=ANY=[@ANYBLOB='max=00000000000000000000377,stats=global,max=00000000000000000000001,max=00000000000000000000010,stats=global,stats=global,hash,subj_user=!}\'{@%-,fowner<', @ANYRESDEC=r1, @ANYBLOB="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"]) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000a00)={0x170, r0, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x94}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51e982c0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1e4da571}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3a3d795e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x0, 0x6, 0xfe}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4b8113e6}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xa4, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x652c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5929f701}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x769a}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe957}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f367a64}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x77b36b67}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5133f124}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4fcb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x348ccc0e}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb36c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x6ac3b5aa}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x65681c50}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x137d7e75}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x7e3890ba}, @NLBL_CIPSOV4_A_MLSCATREM={0x0, 0xa, 0x6aff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x0, 0x9, 0x489f1145}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3142ad5b}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5c7b42e9}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x9102201}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3c034256}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe99d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1d94302b}]}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x10, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4626f351}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x3c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x9}, {0x5}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}, {0xfffffffffffffecd, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8}]}, 0x170}, 0x1, 0x0, 0x0, 0x10}, 0x40050) (async) mount$binderfs(&(0x7f0000000680), &(0x7f00000006c0)='./binderfs2\x00', &(0x7f0000000700), 0x92000, &(0x7f0000000740)={[{@max={'max', 0x3d, 0x3f}}, {@max={'max', 0x3d, 0x6}}, {@max={'max', 0x3d, 0x6}}, {@max={'max', 0x3d, 0x1000}}], [{@fsname={'fsname', 0x3d, './binderfs2\x00'}}]}) 13:04:13 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x10000, 0x0) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000007c0)={"e6b2da29bf178244b5d4e049edbbb2d971db6228cb2ac0ea15cd608b80ace2b7", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000800)={"44a5d4f83a7572fe8c7cf729944581a311f02205073cd182cb52aa8dd7c90f6f", r0}) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000080)={@empty, @private=0xa010100}) (async) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000000)={"91be78f50020edd3a309aba131ac99933d9cfd03ab669b7c64ea706a53f8a23a"}) 13:04:13 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x7) [ 1827.181925][T20386] binder: Unknown parameter 'þ—¾' 13:04:13 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x9000000, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:13 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x20000, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x1f}}, {@max={'max', 0x3d, 0x9}}, {@stats}], [{@dont_measure}, {@pcr={'pcr', 0x3d, 0x26}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\r).*-'}}, {@appraise}, {@dont_hash}]}) [ 1827.214455][T20388] binder: Unknown parameter 'mÀ®‡ZéÑB00000000000' [ 1827.249494][T20400] FAULT_INJECTION: forcing a failure. [ 1827.249494][T20400] name failslab, interval 1, probability 0, space 0, times 0 [ 1827.289072][T20400] CPU: 1 PID: 20400 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1827.299053][T20400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1827.309151][T20400] Call Trace: [ 1827.312458][T20400] [ 1827.315423][T20400] dump_stack_lvl+0xd1/0x138 [ 1827.320066][T20400] should_fail_ex.cold+0x5/0xa [ 1827.324900][T20400] ? alloc_vfsmnt+0x23/0x6b0 [ 1827.329542][T20400] should_failslab+0x9/0x20 [ 1827.334104][T20400] kmem_cache_alloc+0x5a/0x430 [ 1827.338920][T20400] alloc_vfsmnt+0x23/0x6b0 [ 1827.343390][T20400] clone_mnt+0x6c/0x1040 [ 1827.347689][T20400] copy_tree+0x3b1/0xae0 [ 1827.351977][T20400] copy_mnt_ns+0x1af/0xb30 [ 1827.356427][T20400] ? trace_kmem_cache_alloc+0x35/0x100 [ 1827.361919][T20400] ? kmem_cache_alloc+0x234/0x430 [ 1827.366967][T20400] create_new_namespaces+0xd6/0xb20 [ 1827.372202][T20400] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1827.378216][T20400] ksys_unshare+0x449/0x920 [ 1827.382749][T20400] ? unshare_fd+0x1c0/0x1c0 [ 1827.387294][T20400] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1827.393233][T20400] __x64_sys_unshare+0x31/0x40 [ 1827.398023][T20400] do_syscall_64+0x39/0xb0 [ 1827.402466][T20400] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1827.408486][T20400] RIP: 0033:0x7f51e048c0d9 [ 1827.412918][T20400] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 13:04:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x60000000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000041}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4040081) [ 1827.432552][T20400] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1827.441074][T20400] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1827.449061][T20400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1827.457045][T20400] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1827.465031][T20400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1827.473028][T20400] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1827.481037][T20400] 13:04:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0xf000000, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:14 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0xf) [ 1827.548945][T20409] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:04:14 executing program 4: unshare(0x20000) (fail_nth: 71) 13:04:14 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x20000, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x1f}}, {@max={'max', 0x3d, 0x9}}, {@stats}], [{@dont_measure}, {@pcr={'pcr', 0x3d, 0x26}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\r).*-'}}, {@appraise}, {@dont_hash}]}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x20000, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x1f}}, {@max={'max', 0x3d, 0x9}}, {@stats}], [{@dont_measure}, {@pcr={'pcr', 0x3d, 0x26}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\r).*-'}}, {@appraise}, {@dont_hash}]}) (async) 13:04:14 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x10000, 0x0) (async) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f00000007c0)={"e6b2da29bf178244b5d4e049edbbb2d971db6228cb2ac0ea15cd608b80ace2b7", 0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000800)={"44a5d4f83a7572fe8c7cf729944581a311f02205073cd182cb52aa8dd7c90f6f", r0}) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) ioctl$SIOCGETSGCNT(r1, 0x89e1, &(0x7f0000000080)={@empty, @private=0xa010100}) (async) ioctl$SYNC_IOC_MERGE(r0, 0xc0303e03, &(0x7f0000000000)={"91be78f50020edd3a309aba131ac99933d9cfd03ab669b7c64ea706a53f8a23a"}) 13:04:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x60000000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000041}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4040081) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x60000000}, 0x20000001) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000041}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4040081) (async) 13:04:14 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x18) 13:04:14 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x20000, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x1f}}, {@max={'max', 0x3d, 0x9}}, {@stats}], [{@dont_measure}, {@pcr={'pcr', 0x3d, 0x26}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\r).*-'}}, {@appraise}, {@dont_hash}]}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x20000, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x1f}}, {@max={'max', 0x3d, 0x9}}, {@stats}], [{@dont_measure}, {@pcr={'pcr', 0x3d, 0x26}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\r).*-'}}, {@appraise}, {@dont_hash}]}) (async) [ 1827.635776][T20416] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:04:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x26590000, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:14 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x300) 13:04:14 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x6, "2a972219020a98ab"}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x140c, 0x30c, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}}, 0x4080) [ 1827.685613][T20426] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1827.699166][T20431] FAULT_INJECTION: forcing a failure. [ 1827.699166][T20431] name failslab, interval 1, probability 0, space 0, times 0 13:04:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x3f000000, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:14 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x60000000}, 0x20000001) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000041}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4040081) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x14, r1, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x60000000}, 0x20000001) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000041}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, r1, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4040081) (async) 13:04:14 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x500) [ 1827.861404][T20443] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1827.870961][T20431] CPU: 1 PID: 20431 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1827.871000][T20431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1827.871021][T20431] Call Trace: [ 1827.871030][T20431] [ 1827.871041][T20431] dump_stack_lvl+0xd1/0x138 [ 1827.871080][T20431] should_fail_ex.cold+0x5/0xa [ 1827.871123][T20431] ? alloc_vfsmnt+0x23/0x6b0 [ 1827.871157][T20431] should_failslab+0x9/0x20 [ 1827.915720][T20431] kmem_cache_alloc+0x5a/0x430 [ 1827.920526][T20431] alloc_vfsmnt+0x23/0x6b0 [ 1827.924970][T20431] clone_mnt+0x6c/0x1040 [ 1827.929246][T20431] copy_tree+0x3b1/0xae0 [ 1827.933525][T20431] copy_mnt_ns+0x1af/0xb30 [ 1827.937973][T20431] ? trace_kmem_cache_alloc+0x35/0x100 [ 1827.943468][T20431] ? kmem_cache_alloc+0x234/0x430 [ 1827.948517][T20431] create_new_namespaces+0xd6/0xb20 [ 1827.955574][T20431] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1827.961239][T20431] ksys_unshare+0x449/0x920 [ 1827.965765][T20431] ? unshare_fd+0x1c0/0x1c0 [ 1827.970301][T20431] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1827.976318][T20431] __x64_sys_unshare+0x31/0x40 [ 1827.981106][T20431] do_syscall_64+0x39/0xb0 [ 1827.985549][T20431] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1827.991476][T20431] RIP: 0033:0x7f51e048c0d9 [ 1827.995912][T20431] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1828.015548][T20431] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1828.023982][T20431] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1828.031976][T20431] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1828.039958][T20431] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1828.047939][T20431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1828.055923][T20431] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1828.063939][T20431] [ 1828.080392][T20447] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:04:14 executing program 4: unshare(0x20000) (fail_nth: 72) 13:04:14 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x6, "2a972219020a98ab"}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x140c, 0x30c, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}}, 0x4080) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x6, "2a972219020a98ab"}) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) ioctl$TIOCNOTTY(r0, 0x5422) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x140c, 0x30c, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}}, 0x4080) (async) 13:04:14 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x9, 0x40, 0x1, 0x2, 0x9, "f1f032cb114081fc94eaa471e1f5be363d8910", 0xffffffab, 0x6}) 13:04:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x9effffff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:14 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x600) 13:04:14 executing program 2: clock_gettime(0x7, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x5, &(0x7f0000000100)) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x200400, &(0x7f0000000000)=ANY=[@ANYRES8=r0]) clock_gettime(0x7, &(0x7f00000001c0)) clock_getres(0x1, &(0x7f0000000180)) clock_getres(0x5, &(0x7f0000000140)) 13:04:14 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x9, 0x40, 0x1, 0x2, 0x9, "f1f032cb114081fc94eaa471e1f5be363d8910", 0xffffffab, 0x6}) 13:04:14 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x700) 13:04:14 executing program 2: clock_gettime(0x7, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x5, &(0x7f0000000100)) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x200400, &(0x7f0000000000)=ANY=[@ANYRES8=r0]) clock_gettime(0x7, &(0x7f00000001c0)) clock_getres(0x1, &(0x7f0000000180)) clock_getres(0x5, &(0x7f0000000140)) clock_gettime(0x7, &(0x7f0000000040)) (async) clock_gettime(0x5, &(0x7f0000000100)) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x200400, &(0x7f0000000000)=ANY=[@ANYRES8=r0]) (async) clock_gettime(0x7, &(0x7f00000001c0)) (async) clock_getres(0x1, &(0x7f0000000180)) (async) clock_getres(0x5, &(0x7f0000000140)) (async) 13:04:14 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0xf0ffffff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:14 executing program 0: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x6, "2a972219020a98ab"}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x140c, 0x30c, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}}, 0x4080) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000000)={0x0, 0x0, 0x7, 0x0, 0x6, "2a972219020a98ab"}) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) ioctl$TIOCNOTTY(r0, 0x5422) (async) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x140c, 0x30c, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x28}}, 0x4080) (async) 13:04:15 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0xf00) [ 1828.331910][T20474] FAULT_INJECTION: forcing a failure. [ 1828.331910][T20474] name failslab, interval 1, probability 0, space 0, times 0 [ 1828.367415][T20474] CPU: 0 PID: 20474 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1828.377373][T20474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1828.387471][T20474] Call Trace: [ 1828.390785][T20474] [ 1828.393753][T20474] dump_stack_lvl+0xd1/0x138 [ 1828.398398][T20474] should_fail_ex.cold+0x5/0xa [ 1828.403225][T20474] ? alloc_vfsmnt+0x23/0x6b0 [ 1828.407873][T20474] should_failslab+0x9/0x20 [ 1828.412431][T20474] kmem_cache_alloc+0x5a/0x430 [ 1828.417253][T20474] alloc_vfsmnt+0x23/0x6b0 [ 1828.421719][T20474] clone_mnt+0x6c/0x1040 [ 1828.426016][T20474] copy_tree+0x3b1/0xae0 [ 1828.430306][T20474] copy_mnt_ns+0x1af/0xb30 [ 1828.434753][T20474] ? trace_kmem_cache_alloc+0x35/0x100 [ 1828.440241][T20474] ? kmem_cache_alloc+0x234/0x430 [ 1828.445289][T20474] create_new_namespaces+0xd6/0xb20 [ 1828.450523][T20474] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1828.456183][T20474] ksys_unshare+0x449/0x920 [ 1828.460730][T20474] ? unshare_fd+0x1c0/0x1c0 [ 1828.465266][T20474] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1828.471202][T20474] __x64_sys_unshare+0x31/0x40 [ 1828.475993][T20474] do_syscall_64+0x39/0xb0 [ 1828.480436][T20474] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1828.486385][T20474] RIP: 0033:0x7f51e048c0d9 [ 1828.490814][T20474] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1828.510454][T20474] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1828.518890][T20474] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1828.526874][T20474] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1828.534861][T20474] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1828.542849][T20474] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1828.550837][T20474] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1828.558925][T20474] 13:04:15 executing program 4: unshare(0x20000) (fail_nth: 73) 13:04:15 executing program 0: sendto$ax25(0xffffffffffffffff, &(0x7f0000000000)="d748be01c72f22d0edd8f7f473580c0a08", 0x11, 0x10, &(0x7f0000000040)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) getpeername$ax25(r0, &(0x7f00000000c0)={{0x3, @null}, [@rose, @null, @default, @default, @netrom, @netrom, @bcast, @null]}, &(0x7f0000000140)=0x48) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) 13:04:15 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x1800) 13:04:15 executing program 1: ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x9, 0x40, 0x1, 0x2, 0x9, "f1f032cb114081fc94eaa471e1f5be363d8910", 0xffffffab, 0x6}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000000)={0x9, 0x40, 0x1, 0x2, 0x9, "f1f032cb114081fc94eaa471e1f5be363d8910", 0xffffffab, 0x6}) (async) 13:04:15 executing program 2: clock_gettime(0x7, &(0x7f0000000040)={0x0, 0x0}) clock_gettime(0x5, &(0x7f0000000100)) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x200400, &(0x7f0000000000)=ANY=[@ANYRES8=r0]) clock_gettime(0x7, &(0x7f00000001c0)) clock_getres(0x1, &(0x7f0000000180)) clock_getres(0x5, &(0x7f0000000140)) clock_gettime(0x7, &(0x7f0000000040)) (async) clock_gettime(0x5, &(0x7f0000000100)) (async) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x200400, &(0x7f0000000000)=ANY=[@ANYRES8=r0]) (async) clock_gettime(0x7, &(0x7f00000001c0)) (async) clock_getres(0x1, &(0x7f0000000180)) (async) clock_getres(0x5, &(0x7f0000000140)) (async) 13:04:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0xfffff000, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:15 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000040)) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f00000000c0)) 13:04:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x7, 0xf8, 0x80000001, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x1, 0x1, 0x1, 0x9}}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="14830000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="14000200776730000000000000000000000000000800070007000000080005000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542"], 0x314}, 0x1, 0x0, 0x0, 0x4}, 0x8001) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) 13:04:15 executing program 0: sendto$ax25(0xffffffffffffffff, &(0x7f0000000000)="d748be01c72f22d0edd8f7f473580c0a08", 0x11, 0x10, &(0x7f0000000040)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) getpeername$ax25(r0, &(0x7f00000000c0)={{0x3, @null}, [@rose, @null, @default, @default, @netrom, @netrom, @bcast, @null]}, &(0x7f0000000140)=0x48) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) 13:04:15 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x4000) 13:04:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0xffffff7f, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1828.723659][T20504] binder: Bad value for 'stats' [ 1828.731352][T20505] FAULT_INJECTION: forcing a failure. [ 1828.731352][T20505] name failslab, interval 1, probability 0, space 0, times 0 13:04:15 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000040)) (async) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f00000000c0)) [ 1828.820225][T20505] CPU: 0 PID: 20505 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1828.830197][T20505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1828.840305][T20505] Call Trace: [ 1828.843619][T20505] [ 1828.844161][T20515] binder: Bad value for 'stats' [ 1828.846557][T20505] dump_stack_lvl+0xd1/0x138 [ 1828.846597][T20505] should_fail_ex.cold+0x5/0xa [ 1828.860863][T20505] ? alloc_vfsmnt+0x23/0x6b0 [ 1828.865508][T20505] should_failslab+0x9/0x20 [ 1828.870079][T20505] kmem_cache_alloc+0x5a/0x430 [ 1828.874880][T20505] alloc_vfsmnt+0x23/0x6b0 [ 1828.879437][T20505] clone_mnt+0x6c/0x1040 [ 1828.883719][T20505] copy_tree+0x3b1/0xae0 [ 1828.887974][T20505] copy_mnt_ns+0x1af/0xb30 [ 1828.892514][T20505] ? trace_kmem_cache_alloc+0x35/0x100 [ 1828.897985][T20505] ? kmem_cache_alloc+0x234/0x430 [ 1828.903008][T20505] create_new_namespaces+0xd6/0xb20 [ 1828.908238][T20505] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1828.913915][T20505] ksys_unshare+0x449/0x920 [ 1828.918427][T20505] ? unshare_fd+0x1c0/0x1c0 [ 1828.922938][T20505] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1828.928864][T20505] __x64_sys_unshare+0x31/0x40 [ 1828.933669][T20505] do_syscall_64+0x39/0xb0 [ 1828.938090][T20505] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1828.943992][T20505] RIP: 0033:0x7f51e048c0d9 [ 1828.948404][T20505] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 13:04:15 executing program 4: unshare(0x20000) (fail_nth: 74) 13:04:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0xffffff9e, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x7, 0xf8, 0x80000001, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x1, 0x1, 0x1, 0x9}}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="14830000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="14000200776730000000000000000000000000000800070007000000080005000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542"], 0x314}, 0x1, 0x0, 0x0, 0x4}, 0x8001) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) 13:04:15 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0xff00) 13:04:15 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) ioctl$SIOCAX25GETINFO(0xffffffffffffffff, 0x89ed, &(0x7f0000000040)) (async) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async, rerun: 32) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f00000000c0)) (rerun: 32) 13:04:15 executing program 0: sendto$ax25(0xffffffffffffffff, &(0x7f0000000000)="d748be01c72f22d0edd8f7f473580c0a08", 0x11, 0x10, &(0x7f0000000040)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default]}, 0x48) (async) r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xcb) getpeername$ax25(r0, &(0x7f00000000c0)={{0x3, @null}, [@rose, @null, @default, @default, @netrom, @netrom, @bcast, @null]}, &(0x7f0000000140)=0x48) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) [ 1828.968009][T20505] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1828.976702][T20505] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1828.984695][T20505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1828.992665][T20505] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1829.000633][T20505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1829.008617][T20505] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1829.017129][T20505] 13:04:15 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$can_j1939(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)="ff2d041bcdd1ab20d7dbbaaf29da39f20ba60046bfad71f62291fc5612fb59f498484b0a4d9c17b28667dc5cb28b11bc45020b17", 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x2102010, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x7}}, {}], [{@smackfsfloor}]}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) 13:04:15 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'syztnl1\x00', 0x0, 0x29, 0x7, 0xf8, 0x80000001, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2, 0x1, 0x1, 0x1, 0x9}}) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB="14830000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000ffdbdf25000000008c0208808802008008000a00010000000800030070e8d2c5200004000a004e200000007f00000000000000000000ffff0000000003000000060005003e0d00001400040002004e20ffffffff000000000000000008000a00010000000802098018010080060001000a00000014000200200100000000000000000000000000020500030000000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000200000008000200e00000020500030001000000060001000a00000014000200fc01000000000000000000000000000105000300010000000600010002000000080002000a01010105000300020000000600010002000000080002006401010205000300030000000600010002000000080002007f0000010500030000000000060001000a00000014000200000000000000000000000000000000010500030002000000060001000a0000001400020000000000000000000000ffff00000000050003000200000040000080060001000a00000014000200200100000000000000000000000000000500030001000000060001000200000008000200ac14141a0500030002000000ac000080060001000a0000001400020000000000000000000000ffffe00000010500030001000000060001000a00000014000200fe8000000000000000000000000000330500030002000000060001000a00000014000200ff0100000000000000000000000000010500030001000000060001000a0000001400020000000000000000000000ffffac14140b0500030000000000060001000200000008000200e0000002050003000100000008000a0001000000200004000a004e2000000003200100000000000000000000000000000101000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb54208000100", @ANYRES32=r1, @ANYBLOB="14000200776730000000000000000000000000000800070007000000080005000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb542"], 0x314}, 0x1, 0x0, 0x0, 0x4}, 0x8001) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) [ 1829.070531][T20523] binder: Bad value for 'stats' 13:04:15 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0xfffffff0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:15 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x400000) [ 1829.118713][T20531] FAULT_INJECTION: forcing a failure. [ 1829.118713][T20531] name failslab, interval 1, probability 0, space 0, times 0 [ 1829.142250][T20531] CPU: 0 PID: 20531 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1829.152222][T20531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1829.162319][T20531] Call Trace: [ 1829.165636][T20531] [ 1829.168610][T20531] dump_stack_lvl+0xd1/0x138 [ 1829.173260][T20531] should_fail_ex.cold+0x5/0xa [ 1829.178093][T20531] ? alloc_vfsmnt+0x23/0x6b0 [ 1829.182738][T20531] should_failslab+0x9/0x20 [ 1829.187302][T20531] kmem_cache_alloc+0x5a/0x430 [ 1829.192120][T20531] alloc_vfsmnt+0x23/0x6b0 [ 1829.196596][T20531] clone_mnt+0x6c/0x1040 [ 1829.200896][T20531] copy_tree+0x3b1/0xae0 [ 1829.205195][T20531] copy_mnt_ns+0x1af/0xb30 [ 1829.209668][T20531] ? trace_kmem_cache_alloc+0x35/0x100 13:04:15 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$can_j1939(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)="ff2d041bcdd1ab20d7dbbaaf29da39f20ba60046bfad71f62291fc5612fb59f498484b0a4d9c17b28667dc5cb28b11bc45020b17", 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x2102010, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x7}}, {}], [{@smackfsfloor}]}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) sendmsg$can_j1939(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)="ff2d041bcdd1ab20d7dbbaaf29da39f20ba60046bfad71f62291fc5612fb59f498484b0a4d9c17b28667dc5cb28b11bc45020b17", 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x2102010, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x7}}, {}], [{@smackfsfloor}]}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) (async) 13:04:15 executing program 2: mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs2\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0]) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x44810) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000025bd7000ffdbdf25200000000c00060000000000000000000c000600000000000300000008000300", @ANYRES32=r4, @ANYBLOB="0c000003010100000100000108000300", @ANYRES32=r5, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x48000) [ 1829.215194][T20531] ? kmem_cache_alloc+0x234/0x430 [ 1829.220275][T20531] create_new_namespaces+0xd6/0xb20 [ 1829.225542][T20531] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1829.231245][T20531] ksys_unshare+0x449/0x920 [ 1829.235805][T20531] ? unshare_fd+0x1c0/0x1c0 [ 1829.240386][T20531] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1829.246354][T20531] __x64_sys_unshare+0x31/0x40 [ 1829.251156][T20531] do_syscall_64+0x39/0xb0 [ 1829.255600][T20531] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1829.261528][T20531] RIP: 0033:0x7f51e048c0d9 [ 1829.265961][T20531] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1829.285616][T20531] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1829.294067][T20531] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1829.302060][T20531] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1829.310050][T20531] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1829.318038][T20531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1829.326118][T20531] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1829.334211][T20531] 13:04:16 executing program 4: unshare(0x20000) (fail_nth: 75) 13:04:16 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x1000000) 13:04:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0xffffffff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:16 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async, rerun: 32) r0 = socket$can_j1939(0x1d, 0x2, 0x7) (rerun: 32) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) sendmsg$can_j1939(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)="ff2d041bcdd1ab20d7dbbaaf29da39f20ba60046bfad71f62291fc5612fb59f498484b0a4d9c17b28667dc5cb28b11bc45020b17", 0x34}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x2102010, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x7}}, {}], [{@smackfsfloor}]}) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000200)=0x1, 0x4) 13:04:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x0, {0x1}}, 0x18) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xaa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004014}, 0x14) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x140d, 0x10, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4800) 13:04:16 executing program 2: mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs2\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0]) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x44810) (async) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000025bd7000ffdbdf25200000000c00060000000000000000000c000600000000000300000008000300", @ANYRES32=r4, @ANYBLOB="0c000003010100000100000108000300", @ANYRES32=r5, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x48000) 13:04:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x0, {0x1}}, 0x18) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xaa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004014}, 0x14) (async, rerun: 64) r4 = socket$nl_rdma(0x10, 0x3, 0x14) (rerun: 64) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x140d, 0x10, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4800) 13:04:16 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x2000000) 13:04:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x5}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:16 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000000c0), 0x4) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) 13:04:16 executing program 2: mount$binderfs(0x0, &(0x7f00000000c0)='./binderfs2\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0]) (async, rerun: 32) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000002c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_INTERFACE(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x40, r1, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x44810) (async, rerun: 32) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000025bd7000ffdbdf25200000000c00060000000000000000000c000600000000000300000008000300", @ANYRES32=r4, @ANYBLOB="0c000003010100000100000108000300", @ANYRES32=r5, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x40080}, 0x48000) (rerun: 32) [ 1829.558550][T20564] FAULT_INJECTION: forcing a failure. [ 1829.558550][T20564] name failslab, interval 1, probability 0, space 0, times 0 13:04:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x0, {0x1}}, 0x18) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xaa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004014}, 0x14) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x140d, 0x10, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4800) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) bind$can_j1939(r2, &(0x7f0000000040)={0x1d, r3, 0x0, {0x1}}, 0x18) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xaa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004014}, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r4, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x20, 0x140d, 0x10, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4800) (async) [ 1829.617802][T20564] CPU: 1 PID: 20564 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1829.627772][T20564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1829.637870][T20564] Call Trace: [ 1829.641186][T20564] [ 1829.644159][T20564] dump_stack_lvl+0xd1/0x138 [ 1829.648898][T20564] should_fail_ex.cold+0x5/0xa [ 1829.653794][T20564] ? alloc_vfsmnt+0x23/0x6b0 [ 1829.658442][T20564] should_failslab+0x9/0x20 [ 1829.663008][T20564] kmem_cache_alloc+0x5a/0x430 [ 1829.667827][T20564] alloc_vfsmnt+0x23/0x6b0 [ 1829.672301][T20564] clone_mnt+0x6c/0x1040 [ 1829.676621][T20564] copy_tree+0x3b1/0xae0 [ 1829.680928][T20564] copy_mnt_ns+0x1af/0xb30 [ 1829.685669][T20564] ? trace_kmem_cache_alloc+0x35/0x100 [ 1829.691206][T20564] ? kmem_cache_alloc+0x234/0x430 [ 1829.696297][T20564] create_new_namespaces+0xd6/0xb20 [ 1829.701562][T20564] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1829.707267][T20564] ksys_unshare+0x449/0x920 [ 1829.711828][T20564] ? unshare_fd+0x1c0/0x1c0 [ 1829.716406][T20564] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1829.722485][T20564] __x64_sys_unshare+0x31/0x40 [ 1829.727307][T20564] do_syscall_64+0x39/0xb0 [ 1829.731827][T20564] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1829.737783][T20564] RIP: 0033:0x7f51e048c0d9 [ 1829.742250][T20564] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 13:04:16 executing program 4: unshare(0x20000) (fail_nth: 76) 13:04:16 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x3000000) 13:04:16 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000000c0), 0x4) (async) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) 13:04:16 executing program 1: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000200)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x10c0464, &(0x7f0000000100)={[{@stats}, {@stats}, {@stats}], [{@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, '&'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@subj_user={'subj_user', 0x3d, './binderfs\x00'}}, {@obj_user={'obj_user', 0x3d, './binderfs\x00'}}, {@measure}, {@uid_gt={'uid>', 0xee00}}]}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x40) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000240)={0x6, 0x80}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x47}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40810}, 0x4000054) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r1) 13:04:16 executing program 2: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) [ 1829.761912][T20564] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1829.770402][T20564] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1829.778470][T20564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1829.786494][T20564] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1829.794514][T20564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1829.802514][T20564] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1829.810513][T20564] 13:04:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x7}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:16 executing program 1: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000200)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x10c0464, &(0x7f0000000100)={[{@stats}, {@stats}, {@stats}], [{@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, '&'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@subj_user={'subj_user', 0x3d, './binderfs\x00'}}, {@obj_user={'obj_user', 0x3d, './binderfs\x00'}}, {@measure}, {@uid_gt={'uid>', 0xee00}}]}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x40) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000240)={0x6, 0x80}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x47}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40810}, 0x4000054) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r1) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) (async) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000200)) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x10c0464, &(0x7f0000000100)={[{@stats}, {@stats}, {@stats}], [{@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, '&'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@subj_user={'subj_user', 0x3d, './binderfs\x00'}}, {@obj_user={'obj_user', 0x3d, './binderfs\x00'}}, {@measure}, {@uid_gt={'uid>', 0xee00}}]}) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x40) (async) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000240)={0x6, 0x80}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00'}) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x47}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40810}, 0x4000054) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r1) (async) 13:04:16 executing program 0: getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) setsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f00000000c0), 0x4) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}) 13:04:16 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x8}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:16 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x4000000) [ 1829.891397][T20600] binder: Bad value for 'stats' 13:04:16 executing program 2: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) [ 1829.973689][T20605] FAULT_INJECTION: forcing a failure. [ 1829.973689][T20605] name failslab, interval 1, probability 0, space 0, times 0 [ 1829.999311][T20614] binder: Bad value for 'stats' [ 1830.002463][T20605] CPU: 1 PID: 20605 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1830.011556][T20614] binder: Bad value for 'stats' 13:04:16 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000008074a000200"/24], 0x18}, 0x1, 0x0, 0x0, 0x4040011}, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000010000000800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4805) socketpair(0x10, 0x5, 0x3, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x140c, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8da8e8f154355a10}, 0x40000) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x1406, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8000040) [ 1830.014075][T20605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1830.014095][T20605] Call Trace: [ 1830.014105][T20605] [ 1830.014117][T20605] dump_stack_lvl+0xd1/0x138 [ 1830.014153][T20605] should_fail_ex.cold+0x5/0xa [ 1830.014192][T20605] ? alloc_vfsmnt+0x23/0x6b0 [ 1830.014222][T20605] should_failslab+0x9/0x20 [ 1830.014257][T20605] kmem_cache_alloc+0x5a/0x430 [ 1830.014291][T20605] alloc_vfsmnt+0x23/0x6b0 [ 1830.014325][T20605] clone_mnt+0x6c/0x1040 [ 1830.067867][T20605] copy_tree+0x3b1/0xae0 [ 1830.072183][T20605] copy_mnt_ns+0x1af/0xb30 [ 1830.076668][T20605] ? trace_kmem_cache_alloc+0x35/0x100 [ 1830.082192][T20605] ? kmem_cache_alloc+0x234/0x430 [ 1830.087278][T20605] create_new_namespaces+0xd6/0xb20 [ 1830.092546][T20605] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1830.098245][T20605] ksys_unshare+0x449/0x920 [ 1830.102789][T20605] ? unshare_fd+0x1c0/0x1c0 [ 1830.107316][T20605] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1830.113220][T20605] __x64_sys_unshare+0x31/0x40 [ 1830.117984][T20605] do_syscall_64+0x39/0xb0 [ 1830.122405][T20605] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1830.128320][T20605] RIP: 0033:0x7f51e048c0d9 [ 1830.132734][T20605] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1830.152373][T20605] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1830.160791][T20605] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 13:04:16 executing program 4: unshare(0x20000) (fail_nth: 77) 13:04:16 executing program 2: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) 13:04:16 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x5000000) 13:04:16 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000008074a000200"/24], 0x18}, 0x1, 0x0, 0x0, 0x4040011}, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000010000000800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4805) (async) socketpair(0x10, 0x5, 0x3, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x140c, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8da8e8f154355a10}, 0x40000) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x1406, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8000040) (rerun: 32) [ 1830.168772][T20605] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1830.176753][T20605] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1830.184817][T20605] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1830.192793][T20605] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1830.200771][T20605] [ 1830.264437][T20627] binder: Bad value for 'stats' 13:04:16 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x6000000) [ 1830.294327][T20633] FAULT_INJECTION: forcing a failure. [ 1830.294327][T20633] name failslab, interval 1, probability 0, space 0, times 0 [ 1830.302302][T20627] binder: Bad value for 'stats' [ 1830.328911][T20633] CPU: 0 PID: 20633 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 13:04:17 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x7000000) 13:04:17 executing program 1: r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000200)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x10c0464, &(0x7f0000000100)={[{@stats}, {@stats}, {@stats}], [{@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, '&'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@subj_user={'subj_user', 0x3d, './binderfs\x00'}}, {@obj_user={'obj_user', 0x3d, './binderfs\x00'}}, {@measure}, {@uid_gt={'uid>', 0xee00}}]}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x40) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000240)={0x6, 0x80}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00', 0x0}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x47}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40810}, 0x4000054) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r1) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) (async) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000200)) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x10c0464, &(0x7f0000000100)={[{@stats}, {@stats}, {@stats}], [{@appraise_type}, {@smackfsroot={'smackfsroot', 0x3d, '&'}}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@subj_user={'subj_user', 0x3d, './binderfs\x00'}}, {@obj_user={'obj_user', 0x3d, './binderfs\x00'}}, {@measure}, {@uid_gt={'uid>', 0xee00}}]}) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000280)=0x40) (async) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000240)={0x6, 0x80}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000300), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wg0\x00'}) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xc8, r2, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x47}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xb1}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40810}, 0x4000054) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r1) (async) [ 1830.338885][T20633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1830.348980][T20633] Call Trace: [ 1830.352292][T20633] [ 1830.355272][T20633] dump_stack_lvl+0xd1/0x138 [ 1830.359914][T20633] should_fail_ex.cold+0x5/0xa [ 1830.364737][T20633] ? alloc_vfsmnt+0x23/0x6b0 [ 1830.369380][T20633] should_failslab+0x9/0x20 [ 1830.373945][T20633] kmem_cache_alloc+0x5a/0x430 [ 1830.378773][T20633] alloc_vfsmnt+0x23/0x6b0 [ 1830.383242][T20633] clone_mnt+0x6c/0x1040 [ 1830.387541][T20633] copy_tree+0x3b1/0xae0 13:04:17 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0xf000000) [ 1830.391841][T20633] copy_mnt_ns+0x1af/0xb30 [ 1830.396344][T20633] ? trace_kmem_cache_alloc+0x35/0x100 [ 1830.401869][T20633] ? kmem_cache_alloc+0x234/0x430 [ 1830.406950][T20633] create_new_namespaces+0xd6/0xb20 [ 1830.412220][T20633] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1830.417998][T20633] ksys_unshare+0x449/0x920 [ 1830.422563][T20633] ? unshare_fd+0x1c0/0x1c0 [ 1830.427136][T20633] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1830.433109][T20633] __x64_sys_unshare+0x31/0x40 [ 1830.437929][T20633] do_syscall_64+0x39/0xb0 [ 1830.442390][T20633] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1830.448338][T20633] RIP: 0033:0x7f51e048c0d9 [ 1830.452790][T20633] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1830.472450][T20633] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1830.480921][T20633] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 13:04:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x9}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:17 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x18000000) 13:04:17 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000101400012bbd7000fddbdf25080003000100000008004bda655936a089d113ce0013000000b9924b001300000008004b001300000008004c00010000007d3b580af05392a265fd80ef87a73bb1b2c7b14cee169da44440f8c8a19b94d791d3fc8d9884599205094d39f240d5001b30c79de73f7323632979a18f0127c52d4195fd917d31e26a118f32c8c5d11998cd443734d6d6611837f21321afde43e3b5dcc7e7ee651f4331627b629dbfaccf05713788054fe46d2ce38e4887f6b0d1e6a8f229f62caf1e166ee050927b92f44779137a40025198246b6ee8dc12e588d6fd96f13bf0"], 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) 13:04:17 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="73746174733d676c6f60616c2c73746174733d676c6fffffff7f00000000733d676c6f62616c2c73746174733d"]) [ 1830.489022][T20633] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1830.497089][T20633] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1830.505111][T20633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1830.513109][T20633] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1830.521108][T20633] 13:04:17 executing program 4: unshare(0x20000) (fail_nth: 78) 13:04:17 executing program 0: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000008074a000200"/24], 0x18}, 0x1, 0x0, 0x0, 0x4040011}, 0x40) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000010000000800010001000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000800}, 0x20008000) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x48, 0x0, 0x100, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4805) socketpair(0x10, 0x5, 0x3, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x18, 0x140c, 0x100, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8da8e8f154355a10}, 0x40000) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x30, 0x1406, 0x200, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8000040) 13:04:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0xa}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:17 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0xf6ffffff) 13:04:17 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000101400012bbd7000fddbdf25080003000100000008004bda655936a089d113ce0013000000b9924b001300000008004b001300000008004c00010000007d3b580af05392a265fd80ef87a73bb1b2c7b14cee169da44440f8c8a19b94d791d3fc8d9884599205094d39f240d5001b30c79de73f7323632979a18f0127c52d4195fd917d31e26a118f32c8c5d11998cd443734d6d6611837f21321afde43e3b5dcc7e7ee651f4331627b629dbfaccf05713788054fe46d2ce38e4887f6b0d1e6a8f229f62caf1e166ee050927b92f44779137a40025198246b6ee8dc12e588d6fd96f13bf0"], 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) [ 1830.626646][T20659] binder: Bad value for 'stats' 13:04:17 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) 13:04:17 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="73746174733d676c6f60616c2c73746174733d676c6fffffff7f00000000733d676c6f62616c2c73746174733d"]) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="73746174733d676c6f60616c2c73746174733d676c6fffffff7f00000000733d676c6f62616c2c73746174733d"]) (async) [ 1830.653462][T20664] FAULT_INJECTION: forcing a failure. [ 1830.653462][T20664] name failslab, interval 1, probability 0, space 0, times 0 [ 1830.721194][T20664] CPU: 1 PID: 20664 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1830.731174][T20664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1830.741268][T20664] Call Trace: [ 1830.744581][T20664] [ 1830.747544][T20664] dump_stack_lvl+0xd1/0x138 [ 1830.752172][T20664] should_fail_ex.cold+0x5/0xa [ 1830.756976][T20664] ? alloc_vfsmnt+0x23/0x6b0 [ 1830.761594][T20664] should_failslab+0x9/0x20 [ 1830.766128][T20664] kmem_cache_alloc+0x5a/0x430 [ 1830.770926][T20664] alloc_vfsmnt+0x23/0x6b0 [ 1830.775372][T20664] clone_mnt+0x6c/0x1040 [ 1830.779650][T20664] copy_tree+0x3b1/0xae0 [ 1830.783929][T20664] copy_mnt_ns+0x1af/0xb30 [ 1830.788375][T20664] ? trace_kmem_cache_alloc+0x35/0x100 [ 1830.793867][T20664] ? kmem_cache_alloc+0x234/0x430 [ 1830.798919][T20664] create_new_namespaces+0xd6/0xb20 [ 1830.804163][T20664] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1830.809832][T20664] ksys_unshare+0x449/0x920 [ 1830.814370][T20664] ? unshare_fd+0x1c0/0x1c0 [ 1830.818916][T20664] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1830.824855][T20664] __x64_sys_unshare+0x31/0x40 [ 1830.829669][T20664] do_syscall_64+0x39/0xb0 [ 1830.834110][T20664] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1830.840042][T20664] RIP: 0033:0x7f51e048c0d9 [ 1830.844475][T20664] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 13:04:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0xb}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:17 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0xff000000) 13:04:17 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) [ 1830.864113][T20664] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1830.872581][T20664] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1830.880570][T20664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1830.888568][T20664] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1830.896558][T20664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1830.904723][T20664] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1830.912730][T20664] 13:04:17 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) (async) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x81080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000101400012bbd7000fddbdf25080003000100000008004bda655936a089d113ce0013000000b9924b001300000008004b001300000008004c00010000007d3b580af05392a265fd80ef87a73bb1b2c7b14cee169da44440f8c8a19b94d791d3fc8d9884599205094d39f240d5001b30c79de73f7323632979a18f0127c52d4195fd917d31e26a118f32c8c5d11998cd443734d6d6611837f21321afde43e3b5dcc7e7ee651f4331627b629dbfaccf05713788054fe46d2ce38e4887f6b0d1e6a8f229f62caf1e166ee050927b92f44779137a40025198246b6ee8dc12e588d6fd96f13bf0"], 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) 13:04:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0xc}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:17 executing program 4: unshare(0x20000) (fail_nth: 79) 13:04:17 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0xffffff7f) [ 1830.980859][T20677] binder: Bad value for 'stats' 13:04:17 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) [ 1831.009798][T20677] binder: Bad value for 'stats' 13:04:17 executing program 1: mount$binderfs(0x0, &(0x7f0000000180)='./binderfs2\x00', 0x0, 0xa8014, 0x0) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80000001) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x3, 0xe, 0x1d3, &(0x7f00000001c0)="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"}) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000100)={[{@stats}], [{@subj_type={'subj_type', 0x3d, './binderfs\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@euid_lt={'euid<', 0xee01}}, {@obj_user={'obj_user', 0x3d, './binderfs\x00'}}]}) 13:04:17 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="73746174733d676c6f60616c2c73746174733d676c6fffffff7f00000000733d676c6f62616c2c73746174733d"]) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="73746174733d676c6f60616c2c73746174733d676c6fffffff7f00000000733d676c6f62616c2c73746174733d"]) (async) 13:04:17 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0xfffffff6) 13:04:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0xd}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1831.082041][T20691] FAULT_INJECTION: forcing a failure. [ 1831.082041][T20691] name failslab, interval 1, probability 0, space 0, times 0 [ 1831.122850][T20697] binder: Bad value for 'stats' [ 1831.130843][T20691] CPU: 0 PID: 20691 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1831.140806][T20691] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1831.150906][T20691] Call Trace: [ 1831.154226][T20691] [ 1831.157200][T20691] dump_stack_lvl+0xd1/0x138 [ 1831.161848][T20691] should_fail_ex.cold+0x5/0xa [ 1831.166681][T20691] ? alloc_vfsmnt+0x23/0x6b0 [ 1831.171327][T20691] should_failslab+0x9/0x20 [ 1831.175894][T20691] kmem_cache_alloc+0x5a/0x430 [ 1831.180888][T20691] alloc_vfsmnt+0x23/0x6b0 [ 1831.185360][T20691] clone_mnt+0x6c/0x1040 [ 1831.189672][T20691] copy_tree+0x3b1/0xae0 [ 1831.191121][T20704] binder: Unknown parameter 'subj_type' [ 1831.193979][T20691] copy_mnt_ns+0x1af/0xb30 [ 1831.194027][T20691] ? trace_kmem_cache_alloc+0x35/0x100 [ 1831.209598][T20691] ? kmem_cache_alloc+0x234/0x430 [ 1831.214676][T20691] create_new_namespaces+0xd6/0xb20 13:04:17 executing program 0: sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1406, 0x4, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a5859, 0x0) 13:04:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0xe}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:17 executing program 0: sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1406, 0x4, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) (async, rerun: 32) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a5859, 0x0) (rerun: 32) [ 1831.219952][T20691] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1831.225650][T20691] ksys_unshare+0x449/0x920 [ 1831.230211][T20691] ? unshare_fd+0x1c0/0x1c0 [ 1831.234772][T20691] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1831.240738][T20691] __x64_sys_unshare+0x31/0x40 [ 1831.245567][T20691] do_syscall_64+0x39/0xb0 [ 1831.250038][T20691] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1831.256062][T20691] RIP: 0033:0x7f51e048c0d9 [ 1831.260502][T20691] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1831.280233][T20691] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1831.288671][T20691] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1831.296659][T20691] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1831.304644][T20691] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1831.312632][T20691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 13:04:17 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0xf}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1831.320620][T20691] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1831.328628][T20691] 13:04:18 executing program 1: mount$binderfs(0x0, &(0x7f0000000180)='./binderfs2\x00', 0x0, 0xa8014, 0x0) (async) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80000001) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x3, 0xe, 0x1d3, &(0x7f00000001c0)="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"}) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000100)={[{@stats}], [{@subj_type={'subj_type', 0x3d, './binderfs\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@euid_lt={'euid<', 0xee01}}, {@obj_user={'obj_user', 0x3d, './binderfs\x00'}}]}) [ 1831.364648][T20697] binder: Bad value for 'stats' 13:04:18 executing program 4: unshare(0x20000) (fail_nth: 80) 13:04:18 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x1000000000000) 13:04:18 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="3c746174733de4071c00616c2c73cda474733d676c6f62716c2c73746174663d676c6f62616c2cf5a6407b40c3"]) 13:04:18 executing program 0: sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x1406, 0x4, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x6}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a5859, 0x0) 13:04:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x10}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:18 executing program 1: mount$binderfs(0x0, &(0x7f0000000180)='./binderfs2\x00', 0x0, 0xa8014, 0x0) (async) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x80000001) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x3, 0xe, 0x1d3, &(0x7f00000001c0)="cfaff92a598bd9ed30e4e21cb776705a5d663207ade9c6d83e8660274ed64934e8ec5cb4c339209f11cf7ce15e1d41c1f3c03b7142d12d55ac98cf09d4a177947edec39d7f5b73e4fdd3dec03a97167a059ba35e68a6942eda3917d4fa631b569fdb455b679fa2959247870ba1796abe376627fa4bd49eb24554996d51ba520e026ae611ef0e2443f915c7be83b1c0e760eb20e90d078124ff66f9329d52f6d4e53ad1f931afca6df24433c938341af3204f0a97dbbc5954646505c8ba70e3d9a45873219f8d533023a414d97374d19a1dc454e9b782d1977f61ff591e8eae8140e2ee8b0c838a9804e4fd12c03ded7122f22cc8aa17a01c32981bdbba8f5334c7d5ac5a7bf39f2a51f61b62656c859b61ee0875666deb144a4ed15a2218283228d24d0c533fc91352dd85da9966bd26e04e8c6b21c5b65bf81bbfcf7400833f42e248e3acf484f507f887e5a779e6b78c46805f3156ec47e08a6c621acc9c20c73e8de43369c1c4f5772056481dc645d0416a47832dcce42a90d9043d83e47b4e6a2eeccb646d6cf67d887044b3d38900158b96f032f2da1fc0fdb624a3f5f149dc4dbda8b9d6879636eefe8182bf22b8738258f0e281b016e46e29f6e7523061019f9d136db0a1ce78e046470c09084512414f3384162a2db99650cac902923a8272926526d994aa506e478371e515262ea58473d2510307769c7eec12cd47ba550371a900d31d0efb786b387704e26ec57300d4db8ade91ec6aefa83c132956f042332556fe77f03aea037f6c268129ed7b9bbb58d7c817507a2ed31cfbbd733a1a077531e8f1c23e3207d6be6e96b16e7c495ae7a1ff553c824c66e087b5668670d9ea0b441c2cc2a623d98a26fa86fa463bcdfa41ff4b569f6f2d9152af312df52d80a4ccdeb3a77237217e45d73c89db71bef9ba1904c5875d12bb475168c4b20bf16317efadfd81374e3a1dfa8ced3ab6643ce8b1c0ad0be8629dd85ffdfdcfe9f7937814f89df00fa360a6899789fcea72b11ff6f568e53201991a0c722c24305e57c70f40f57819018ab0637d5b6c809ae74bd9faa4820c997a46ca4ff728d7343e4043473a40d4b20705ee97c5ecdf2d0355378314c432dc1c51a83be2e6128e270bad83a6c5de637ad630eeabdafab6f6ed7dd8f09309912eee67631779871f45f1dbac15633a6bc08e1daf9f02c51f154d1a89dd19ed972af2356b5ec8f83cfa12f3f6719fe8b9eb7be8a46ffbd747d51f8e6bfe1dc93c01bd4fcdd306997b970e94ddd03038d5eab833febe9817f336ffc5f97277e638a4bd87ba846d886642eec1128cab2fd6f873d497e823e461ddaaf77919609b04ea5ae5391ad16e1f2501de29e104530629e3a9a068445216c477a2a4d2a12d9387dcf4f4c575c74fdf1e16737ed829e5d4221b21fec215635031e7d03dab9cbdf67cfa"}) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x2, &(0x7f0000000100)={[{@stats}], [{@subj_type={'subj_type', 0x3d, './binderfs\x00'}}, {@fowner_eq={'fowner', 0x3d, 0xee01}}, {@euid_lt={'euid<', 0xee01}}, {@obj_user={'obj_user', 0x3d, './binderfs\x00'}}]}) [ 1831.405645][T20713] binder: Unknown parameter 'subj_type' 13:04:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x11}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:18 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x401, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x6}}, {@max={'max', 0x3d, 0x7fffffffffffffff}}, {@stats}, {@stats}, {@stats}, {@stats}], [{@appraise}, {@obj_role={'obj_role', 0x3d, './binderfs\x00'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@subj_user={'subj_user', 0x3d, './binderfs\x00'}}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x62, 0x33, 0x63, 0x61, 0x31, 0x36, 0x38], 0x2d, [0x61, 0x55, 0x62, 0x39], 0x2d, [0x1, 0x61, 0x61, 0x38], 0x2d, [0x64, 0x66, 0x32, 0x38], 0x2d, [0x39, 0x64, 0x33, 0x38, 0x35, 0x66, 0x39, 0x35]}}}, {@subj_user={'subj_user', 0x3d, './binderfs\x00'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}) [ 1831.490200][T20722] binder: Unknown parameter ' [ 1831.599591][T20725] dump_stack_lvl+0xd1/0x138 [ 1831.604242][T20725] should_fail_ex.cold+0x5/0xa [ 1831.609158][T20725] ? alloc_vfsmnt+0x23/0x6b0 [ 1831.611132][T20733] binder: Bad value for 'max' [ 1831.613774][T20725] should_failslab+0x9/0x20 13:04:18 executing program 1: ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000780)={0x0, 0xd8, 0x7, &(0x7f0000000740)={0x1f, "fcc6915185bcd881e0f10b351d9c3a5742095c464e7435f9219c65a80bd438a604"}}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x84, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x60, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "060000005c5d00000200"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "eeec6141ae662cdd6542012e592430692eca45cc1f97ddffdf9eecdab53bd6a8"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x84}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000fcdbdf2509000000050007000b0000000500080002000000050007001b000000050007001e00000008000300", @ANYRES32=0x0, @ANYBLOB="e54106001f000000"], 0x44}}, 0x20000005) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x400700, 0x0) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000040)={0x9, 0x3, 0x46}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x20004084) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000810}, 0x24008004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)={0xd4, r3, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x145ea382}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6edbc188}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46224547}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b99368a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48b383a4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22edbd36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e93a314}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x520aa18b}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x1) 13:04:18 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x401, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x6}}, {@max={'max', 0x3d, 0x7fffffffffffffff}}, {@stats}, {@stats}, {@stats}, {@stats}], [{@appraise}, {@obj_role={'obj_role', 0x3d, './binderfs\x00'}}, {@uid_eq={'uid', 0x3d, 0xffffffffffffffff}}, {@subj_user={'subj_user', 0x3d, './binderfs\x00'}}, {@dont_hash}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x62, 0x33, 0x63, 0x61, 0x31, 0x36, 0x38], 0x2d, [0x61, 0x55, 0x62, 0x39], 0x2d, [0x1, 0x61, 0x61, 0x38], 0x2d, [0x64, 0x66, 0x32, 0x38], 0x2d, [0x39, 0x64, 0x33, 0x38, 0x35, 0x66, 0x39, 0x35]}}}, {@subj_user={'subj_user', 0x3d, './binderfs\x00'}}, {@uid_lt={'uid<', 0xffffffffffffffff}}]}) [ 1831.613819][T20725] kmem_cache_alloc+0x5a/0x430 [ 1831.613853][T20725] alloc_vfsmnt+0x23/0x6b0 [ 1831.632264][T20725] clone_mnt+0x6c/0x1040 [ 1831.636581][T20725] copy_tree+0x3b1/0xae0 [ 1831.640974][T20725] copy_mnt_ns+0x1af/0xb30 [ 1831.645485][T20725] ? trace_kmem_cache_alloc+0x35/0x100 [ 1831.650999][T20725] ? kmem_cache_alloc+0x234/0x430 [ 1831.656069][T20725] create_new_namespaces+0xd6/0xb20 [ 1831.661864][T20725] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1831.667562][T20725] ksys_unshare+0x449/0x920 [ 1831.672292][T20725] ? unshare_fd+0x1c0/0x1c0 [ 1831.673203][T20738] binder: Bad value for 'max' [ 1831.676830][T20725] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1831.676883][T20725] __x64_sys_unshare+0x31/0x40 [ 1831.676918][T20725] do_syscall_64+0x39/0xb0 [ 1831.676949][T20725] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1831.702736][T20725] RIP: 0033:0x7f51e048c0d9 [ 1831.707208][T20725] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1831.726872][T20725] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1831.731421][T20736] binder: Unknown parameter ' 13:04:18 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x200000000000000) [ 1831.844270][T20744] binder: Bad value for 'max' [ 1831.854402][T20749] binder: Unknown parameter ' [ 1831.929449][T20755] dump_stack_lvl+0xd1/0x138 [ 1831.934095][T20755] should_fail_ex.cold+0x5/0xa [ 1831.939197][T20755] ? alloc_vfsmnt+0x23/0x6b0 [ 1831.943846][T20755] should_failslab+0x9/0x20 [ 1831.948420][T20755] kmem_cache_alloc+0x5a/0x430 [ 1831.953244][T20755] alloc_vfsmnt+0x23/0x6b0 [ 1831.957723][T20755] clone_mnt+0x6c/0x1040 [ 1831.962049][T20755] copy_tree+0x3b1/0xae0 [ 1831.966372][T20755] copy_mnt_ns+0x1af/0xb30 [ 1831.971123][T20755] ? trace_kmem_cache_alloc+0x35/0x100 [ 1831.973112][T20766] binder: Bad value for 'stats' [ 1831.976620][T20755] ? kmem_cache_alloc+0x234/0x430 [ 1831.976662][T20755] create_new_namespaces+0xd6/0xb20 [ 1831.976706][T20755] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1831.997481][T20755] ksys_unshare+0x449/0x920 [ 1832.002046][T20755] ? unshare_fd+0x1c0/0x1c0 [ 1832.006613][T20755] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1832.012574][T20755] __x64_sys_unshare+0x31/0x40 [ 1832.017391][T20755] do_syscall_64+0x39/0xb0 [ 1832.021853][T20755] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1832.027819][T20755] RIP: 0033:0x7f51e048c0d9 [ 1832.032278][T20755] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 13:04:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x14}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:18 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0xa0000, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x100000001}}, {@stats}, {@max={'max', 0x3d, 0x3}}, {@max={'max', 0x3d, 0xc8}}, {@max={'max', 0x3d, 0x4771}}, {@max={'max', 0x3d, 0x3c}}, {@max={'max', 0x3d, 0x22}}, {@stats}], [{@permit_directio}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) 13:04:18 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x300000000000000) 13:04:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x22}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:18 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async, rerun: 64) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0xa0000, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x100000001}}, {@stats}, {@max={'max', 0x3d, 0x3}}, {@max={'max', 0x3d, 0xc8}}, {@max={'max', 0x3d, 0x4771}}, {@max={'max', 0x3d, 0x3c}}, {@max={'max', 0x3d, 0x22}}, {@stats}], [{@permit_directio}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) (rerun: 64) [ 1832.051932][T20755] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1832.060399][T20755] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1832.068419][T20755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1832.076443][T20755] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1832.084545][T20755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1832.089459][T20772] binder: Bad value for 'stats' [ 1832.092526][T20755] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1832.092569][T20755] [ 1832.097925][T20772] binder: Bad value for 'stats' [ 1832.118965][T20772] binder: Bad value for 'stats' [ 1832.125441][T20772] binder: Bad value for 'stats' [ 1832.130739][T20772] binder: Bad value for 'stats' [ 1832.136998][T20772] binder: Bad value for 'stats' [ 1832.142366][T20772] binder: Bad value for 'stats' [ 1832.148450][T20772] binder: Bad value for 'stats' 13:04:18 executing program 4: unshare(0x20000) (fail_nth: 82) 13:04:18 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x400000000000000) 13:04:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:18 executing program 1: ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000780)={0x0, 0xd8, 0x7, &(0x7f0000000740)={0x1f, "fcc6915185bcd881e0f10b351d9c3a5742095c464e7435f9219c65a80bd438a604"}}) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x84, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x60, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "060000005c5d00000200"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "eeec6141ae662cdd6542012e592430692eca45cc1f97ddffdf9eecdab53bd6a8"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x84}}, 0x0) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000fcdbdf2509000000050007000b0000000500080002000000050007001b000000050007001e00000008000300", @ANYRES32=0x0, @ANYBLOB="e54106001f000000"], 0x44}}, 0x20000005) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x400700, 0x0) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000040)={0x9, 0x3, 0x46}) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x20004084) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000810}, 0x24008004) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)={0xd4, r3, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x145ea382}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6edbc188}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46224547}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b99368a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48b383a4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22edbd36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e93a314}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x520aa18b}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, &(0x7f0000000780)={0x0, 0xd8, 0x7, &(0x7f0000000740)={0x1f, "fcc6915185bcd881e0f10b351d9c3a5742095c464e7435f9219c65a80bd438a604"}}) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x84, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x60, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "060000005c5d00000200"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "eeec6141ae662cdd6542012e592430692eca45cc1f97ddffdf9eecdab53bd6a8"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x84}}, 0x0) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00042bbd7000fcdbdf2509000000050007000b0000000500080002000000050007001b000000050007001e00000008000300", @ANYRES32=0x0, @ANYBLOB="e54106001f000000"], 0x44}}, 0x20000005) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x400700, 0x0) (async) ioctl$KDGKBENT(r4, 0x4b46, &(0x7f0000000040)={0x9, 0x3, 0x46}) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, r2, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x20004084) (async) sendmsg$NL802154_CMD_SET_CHANNEL(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000810}, 0x24008004) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000480)={&(0x7f0000000580)={0xd4, r3, 0x4, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x8c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x145ea382}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa5}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6edbc188}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x46224547}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x21}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x41}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2b99368a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x48b383a4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xae}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22edbd36}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6e93a314}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb5}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xfa}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x520aa18b}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0xd4}, 0x1, 0x0, 0x0, 0x10}, 0x1) (async) 13:04:18 executing program 0: socketpair(0x2c, 0x3, 0x180000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040)=0x1, 0x4) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) [ 1832.154143][T20772] binder: Bad value for 'stats' [ 1832.159577][T20772] binder: Bad value for 'stats' [ 1832.168066][T20772] binder: Bad value for 'stats' [ 1832.173513][T20772] binder: Bad value for 'stats' [ 1832.182161][T20772] binder: Bad value for 'stats' [ 1832.188708][T20772] binder: Bad value for 'stats' [ 1832.199374][T20772] binder: Bad value for 'stats' 13:04:18 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x500000000000000) [ 1832.228187][T20772] binder: Bad value for 'stats' 13:04:18 executing program 0: socketpair(0x2c, 0x3, 0x180000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040)=0x1, 0x4) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) socketpair(0x2c, 0x3, 0x180000, &(0x7f0000000000)) (async) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040)=0x1, 0x4) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) 13:04:18 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x2}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1832.254841][T20772] binder: Bad value for 'stats' 13:04:18 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x11180c8, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x3}}, 0x18) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040)=0x3, 0x4) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffffffffffffffff}) [ 1832.288824][T20772] binder: Bad value for 'stats' [ 1832.299452][T20786] FAULT_INJECTION: forcing a failure. [ 1832.299452][T20786] name failslab, interval 1, probability 0, space 0, times 0 [ 1832.342676][T20772] binder: Bad value for 'stats' [ 1832.354030][T20786] CPU: 1 PID: 20786 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1832.363998][T20786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1832.374105][T20786] Call Trace: [ 1832.377417][T20786] [ 1832.380389][T20786] dump_stack_lvl+0xd1/0x138 [ 1832.385125][T20786] should_fail_ex.cold+0x5/0xa 13:04:19 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x600000000000000) 13:04:19 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x11180c8, 0x0) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x3}}, 0x18) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040)=0x3, 0x4) (async) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffffffffffffffff}) [ 1832.389956][T20786] ? alloc_vfsmnt+0x23/0x6b0 [ 1832.394600][T20786] should_failslab+0x9/0x20 [ 1832.399156][T20786] kmem_cache_alloc+0x5a/0x430 [ 1832.403973][T20786] alloc_vfsmnt+0x23/0x6b0 [ 1832.408446][T20786] clone_mnt+0x6c/0x1040 [ 1832.412749][T20786] copy_tree+0x3b1/0xae0 [ 1832.414821][T20772] binder: Bad value for 'stats' [ 1832.417037][T20786] copy_mnt_ns+0x1af/0xb30 [ 1832.426353][T20786] ? trace_kmem_cache_alloc+0x35/0x100 [ 1832.431871][T20786] ? kmem_cache_alloc+0x234/0x430 [ 1832.432465][T20772] binder: Bad value for 'stats' [ 1832.436915][T20786] create_new_namespaces+0xd6/0xb20 [ 1832.436962][T20786] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1832.437000][T20786] ksys_unshare+0x449/0x920 [ 1832.437033][T20786] ? unshare_fd+0x1c0/0x1c0 [ 1832.437079][T20786] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1832.467697][T20786] __x64_sys_unshare+0x31/0x40 [ 1832.472498][T20786] do_syscall_64+0x39/0xb0 [ 1832.476943][T20786] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1832.482874][T20786] RIP: 0033:0x7f51e048c0d9 [ 1832.487305][T20786] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1832.506943][T20786] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1832.515384][T20786] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1832.523380][T20786] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1832.531371][T20786] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1832.539372][T20786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1832.547368][T20786] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1832.555378][T20786] [ 1832.577608][T20772] binder: Bad value for 'stats' [ 1832.596034][T20772] binder: Bad value for 'stats' [ 1832.602326][T20772] binder: Bad value for 'stats' [ 1832.624542][T20772] binder: Bad value for 'stats' [ 1832.629931][T20772] binder: Bad value for 'stats' [ 1832.636054][T20772] binder: Bad value for 'stats' [ 1832.641463][T20772] binder: Bad value for 'stats' [ 1832.648512][T20772] binder: Bad value for 'stats' [ 1832.654348][T20772] binder: Bad value for 'stats' [ 1832.659761][T20772] binder: Bad value for 'stats' [ 1832.665517][T20772] binder: Bad value for 'stats' [ 1832.671046][T20772] binder: Bad value for 'stats' [ 1832.676728][T20772] binder: Bad value for 'stats' [ 1832.682115][T20772] binder: Bad value for 'stats' [ 1832.687635][T20772] binder: Bad value for 'stats' [ 1832.692775][T20772] binder: Bad value for 'stats' [ 1832.699588][T20772] binder: Bad value for 'stats' [ 1832.704979][T20772] binder: Bad value for 'stats' [ 1832.710098][T20772] binder: Bad value for 'stats' [ 1832.716043][T20772] binder: Bad value for 'stats' [ 1832.721399][T20772] binder: Bad value for 'stats' [ 1832.726828][T20772] binder: Bad value for 'stats' [ 1832.732027][T20772] binder: Bad value for 'stats' [ 1832.737711][T20772] binder: Bad value for 'stats' [ 1832.742852][T20772] binder: Bad value for 'stats' [ 1832.748261][T20772] binder: Bad value for 'stats' [ 1832.753401][T20772] binder: Bad value for 'stats' [ 1832.759163][T20772] binder: Bad value for 'stats' [ 1832.764536][T20772] binder: Bad value for 'stats' [ 1832.769661][T20772] binder: Bad value for 'stats' [ 1832.779250][T20772] binder: Bad value for 'stats' [ 1832.785019][T20772] binder: Bad value for 'stats' [ 1832.790298][T20772] binder: Bad value for 'stats' [ 1832.796059][T20772] binder: Bad value for 'stats' [ 1832.802536][T20772] binder: Bad value for 'stats' [ 1832.808003][T20772] binder: Bad value for 'stats' [ 1832.813126][T20772] binder: Bad value for 'stats' [ 1832.818883][T20772] binder: Bad value for 'stats' [ 1832.824407][T20772] binder: Bad value for 'stats' [ 1832.829642][T20772] binder: Bad value for 'stats' [ 1832.835285][T20772] binder: Bad value for 'stats' [ 1832.840515][T20772] binder: Bad value for 'stats' 13:04:19 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async, rerun: 32) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0xa0000, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x100000001}}, {@stats}, {@max={'max', 0x3d, 0x3}}, {@max={'max', 0x3d, 0xc8}}, {@max={'max', 0x3d, 0x4771}}, {@max={'max', 0x3d, 0x3c}}, {@max={'max', 0x3d, 0x22}}, {@stats}], [{@permit_directio}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}) (rerun: 32) 13:04:19 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x700000000000000) 13:04:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x3}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:19 executing program 0: socketpair(0x2c, 0x3, 0x180000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000040)=0x1, 0x4) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) 13:04:19 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x11180c8, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async, rerun: 32) connect$can_j1939(r1, &(0x7f00000000c0)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x3}}, 0x18) (rerun: 32) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f0000000040)=0x3, 0x4) (async, rerun: 64) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0xffffffffffffffff}) (rerun: 64) 13:04:19 executing program 4: unshare(0x20000) (fail_nth: 83) [ 1832.845884][T20772] binder: Bad value for 'stats' [ 1832.851000][T20772] binder: Bad value for 'stats' 13:04:19 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) socket$igmp(0x2, 0x3, 0x2) 13:04:19 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0xf00000000000000) [ 1832.899812][T20808] FAULT_INJECTION: forcing a failure. [ 1832.899812][T20808] name failslab, interval 1, probability 0, space 0, times 0 13:04:19 executing program 1: sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140b, 0x200, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x810) r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140), 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x330, r0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x134, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ffd}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cab42c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeba7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe666}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b15}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3891}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2eacc6af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4595}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d8954b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2380}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ae0e0f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3593}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb265}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc863}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ec7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19c00fd4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x478857bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20ed}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6884b287}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x287f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ecadc4f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ae20f69}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf05}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fec4349}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd5b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d52391c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xbc, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14d72998}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a53711c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb0a6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22325966}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b154e12}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b4db834}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc2fc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b4dd035}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6330b906}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38f8725a}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x883e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67936d77}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x431ec2a0}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x91d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc721}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf54a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45a97890}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3789d4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15098163}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f531e4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x9c, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7cbc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc395}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56f25d65}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1869c17c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4094b823}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ff0dd3d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf15c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4baa13f0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62446c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x357732aa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4315}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x746d131e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x358548f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x211ed644}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb21c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf432}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20f3}]}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x4}, 0x40000) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) 13:04:19 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x4}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1832.941120][T20813] binder: Bad value for 'stats' [ 1832.959923][T20813] binder: Bad value for 'stats' [ 1832.969702][T20813] binder: Bad value for 'stats' [ 1832.976359][T20808] CPU: 1 PID: 20808 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1832.986323][T20808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1832.989584][T20813] binder: Bad value for 'stats' [ 1832.996399][T20808] Call Trace: [ 1832.996412][T20808] [ 1832.996424][T20808] dump_stack_lvl+0xd1/0x138 [ 1832.996462][T20808] should_fail_ex.cold+0x5/0xa [ 1832.996501][T20808] ? alloc_vfsmnt+0x23/0x6b0 [ 1832.996531][T20808] should_failslab+0x9/0x20 [ 1832.996566][T20808] kmem_cache_alloc+0x5a/0x430 [ 1832.996600][T20808] alloc_vfsmnt+0x23/0x6b0 [ 1832.996635][T20808] clone_mnt+0x6c/0x1040 [ 1832.996677][T20808] copy_tree+0x3b1/0xae0 [ 1833.015677][T20813] binder: Bad value for 'stats' [ 1833.017227][T20808] copy_mnt_ns+0x1af/0xb30 [ 1833.017279][T20808] ? trace_kmem_cache_alloc+0x35/0x100 [ 1833.022377][T20813] binder: Bad value for 'stats' [ 1833.026356][T20808] ? kmem_cache_alloc+0x234/0x430 [ 1833.026395][T20808] create_new_namespaces+0xd6/0xb20 [ 1833.026443][T20808] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1833.026480][T20808] ksys_unshare+0x449/0x920 [ 1833.026512][T20808] ? unshare_fd+0x1c0/0x1c0 [ 1833.026558][T20808] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1833.026610][T20808] __x64_sys_unshare+0x31/0x40 [ 1833.038998][T20813] binder: Bad value for 'stats' [ 1833.040222][T20808] do_syscall_64+0x39/0xb0 [ 1833.040263][T20808] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1833.115096][T20808] RIP: 0033:0x7f51e048c0d9 [ 1833.119538][T20808] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1833.139167][T20808] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1833.147691][T20808] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1833.155680][T20808] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1833.163668][T20808] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1833.171653][T20808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1833.179658][T20808] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1833.187767][T20808] [ 1833.196187][T20813] binder: Bad value for 'stats' [ 1833.202293][T20813] binder: Bad value for 'stats' 13:04:19 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) 13:04:19 executing program 1: sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140b, 0x200, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x810) r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140), 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x330, r0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x134, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ffd}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cab42c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeba7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe666}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b15}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3891}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2eacc6af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4595}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d8954b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2380}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ae0e0f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3593}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb265}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc863}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ec7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19c00fd4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x478857bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20ed}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6884b287}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x287f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ecadc4f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ae20f69}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf05}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fec4349}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd5b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d52391c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xbc, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14d72998}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a53711c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb0a6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22325966}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b154e12}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b4db834}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc2fc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b4dd035}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6330b906}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38f8725a}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x883e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67936d77}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x431ec2a0}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x91d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc721}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf54a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45a97890}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3789d4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15098163}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f531e4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x9c, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7cbc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc395}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56f25d65}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1869c17c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4094b823}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ff0dd3d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf15c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4baa13f0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62446c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x357732aa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4315}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x746d131e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x358548f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x211ed644}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb21c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf432}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20f3}]}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x4}, 0x40000) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) [ 1833.242812][T20813] binder: Bad value for 'stats' [ 1833.254239][T20813] binder: Bad value for 'stats' [ 1833.269900][T20813] binder: Bad value for 'stats' [ 1833.295157][T20813] binder: Bad value for 'stats' [ 1833.300449][T20813] binder: Bad value for 'stats' [ 1833.309395][T20813] binder: Bad value for 'stats' [ 1833.331023][T20813] binder: Bad value for 'stats' [ 1833.351536][T20813] binder: Bad value for 'stats' [ 1833.357594][T20813] binder: Bad value for 'stats' [ 1833.362704][T20813] binder: Bad value for 'stats' [ 1833.368550][T20813] binder: Bad value for 'stats' [ 1833.373828][T20813] binder: Bad value for 'stats' [ 1833.379300][T20813] binder: Bad value for 'stats' [ 1833.384924][T20813] binder: Bad value for 'stats' [ 1833.390122][T20813] binder: Bad value for 'stats' [ 1833.395445][T20813] binder: Bad value for 'stats' 13:04:20 executing program 2: socket$isdn_base(0x22, 0x3, 0x0) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) 13:04:20 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x1800000000000000) 13:04:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x5}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:20 executing program 4: unshare(0x20000) (fail_nth: 84) 13:04:20 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) 13:04:20 executing program 1: sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140b, 0x200, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x38}}, 0x810) r0 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000140), 0xc, &(0x7f0000000500)={&(0x7f00000001c0)={0x330, r0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x134, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe7a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4ffd}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1cab42c4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xeba7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe666}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1b15}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3891}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6d82}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xff3}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2eacc6af}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4595}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3d8954b5}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2380}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ae0e0f1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3593}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd9f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb265}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc863}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3ec7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x19c00fd4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x71bc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x478857bf}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b42}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20ed}]}, {0x54, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6884b287}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x287f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3ecadc4f}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4ae20f69}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xaf05}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xad40}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3fec4349}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33fd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd5b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d52391c}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0xbc, 0xc, 0x0, 0x1, [{0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x14d72998}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a53711c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb0a6}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x47c7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x22325966}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1b154e12}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7b4db834}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9b06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc2fc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5b4dd035}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6330b906}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x38f8725a}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x883e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x67936d77}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x431ec2a0}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x91d9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc721}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf54a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33dd}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45a97890}]}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x38, 0x8, 0x0, 0x1, [{0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3789d4b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15098163}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1f531e4e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x56}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x9c, 0xc, 0x0, 0x1, [{0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7cbc}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc395}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x56f25d65}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1869c17c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4094b823}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5ff0dd3d}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf15c}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4baa13f0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x62446c0}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x357732aa}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4315}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x746d131e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x358548f8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x211ed644}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb21c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf432}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x20f3}]}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x4}, 0x40000) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) [ 1833.400588][T20813] binder: Bad value for 'stats' [ 1833.406058][T20813] binder: Bad value for 'stats' [ 1833.411306][T20813] binder: Bad value for 'stats' [ 1833.418646][T20813] binder: Bad value for 'stats' [ 1833.423917][T20813] binder: Bad value for 'stats' [ 1833.429029][T20813] binder: Bad value for 'stats' [ 1833.436702][T20813] binder: Bad value for 'stats' [ 1833.441940][T20813] binder: Bad value for 'stats' 13:04:20 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0xf6ffffff00000000) 13:04:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x6}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:20 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x32a0859, 0x0) r0 = getuid() ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x3, @default, r0}) r1 = getuid() ioprio_set$uid(0x0, r1, 0x2007) [ 1833.486393][T20834] FAULT_INJECTION: forcing a failure. [ 1833.486393][T20834] name failslab, interval 1, probability 0, space 0, times 0 [ 1833.546379][T20834] CPU: 0 PID: 20834 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1833.556360][T20834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1833.566462][T20834] Call Trace: [ 1833.569779][T20834] [ 1833.572743][T20834] dump_stack_lvl+0xd1/0x138 [ 1833.577383][T20834] should_fail_ex.cold+0x5/0xa [ 1833.582200][T20834] ? alloc_vfsmnt+0x23/0x6b0 [ 1833.586841][T20834] should_failslab+0x9/0x20 [ 1833.591403][T20834] kmem_cache_alloc+0x5a/0x430 [ 1833.596222][T20834] alloc_vfsmnt+0x23/0x6b0 [ 1833.600687][T20834] clone_mnt+0x6c/0x1040 [ 1833.604990][T20834] copy_tree+0x3b1/0xae0 [ 1833.609284][T20834] copy_mnt_ns+0x1af/0xb30 [ 1833.613749][T20834] ? trace_kmem_cache_alloc+0x35/0x100 [ 1833.619270][T20834] ? kmem_cache_alloc+0x234/0x430 [ 1833.624356][T20834] create_new_namespaces+0xd6/0xb20 [ 1833.629626][T20834] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1833.635320][T20834] ksys_unshare+0x449/0x920 [ 1833.639975][T20834] ? unshare_fd+0x1c0/0x1c0 [ 1833.644558][T20834] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1833.650527][T20834] __x64_sys_unshare+0x31/0x40 [ 1833.655348][T20834] do_syscall_64+0x39/0xb0 [ 1833.659924][T20834] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1833.665882][T20834] RIP: 0033:0x7f51e048c0d9 [ 1833.670341][T20834] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 13:04:20 executing program 1: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="acb1bce19f37cc9b16bc3751b2", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fddbdf25010000000c00018008000100ac1e010108000200087dbb36000000040001800c00018008", @ANYRES32=0x0, @ANYBLOB="600001800500020005000000140004001d880000000000000000000000000101060001000200000008010000000000030000002900000000140004000000000050d3f4fc00fb16a10b7d000000000000000000000100050002189800000800020003000000040001"], 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x4008800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xf}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[], 0x31c}, 0x1, 0x0, 0x0, 0x8800}, 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x8aa0d5, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x8080, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000380)) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000811}, 0x8000) 13:04:20 executing program 1: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="acb1bce19f37cc9b16bc3751b2", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fddbdf25010000000c00018008000100ac1e010108000200087dbb36000000040001800c00018008", @ANYRES32=0x0, @ANYBLOB="600001800500020005000000140004001d880000000000000000000000000101060001000200000008010000000000030000002900000000140004000000000050d3f4fc00fb16a10b7d000000000000000000000100050002189800000800020003000000040001"], 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x4008800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xf}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[], 0x31c}, 0x1, 0x0, 0x0, 0x8800}, 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x8aa0d5, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x8080, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000380)) (async, rerun: 32) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000811}, 0x8000) (rerun: 32) 13:04:20 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x32a0859, 0x0) r0 = getuid() ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x3, @default, r0}) (async) r1 = getuid() ioprio_set$uid(0x0, r1, 0x2007) [ 1833.690001][T20834] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1833.698470][T20834] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1833.706491][T20834] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1833.714512][T20834] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1833.722540][T20834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1833.730562][T20834] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1833.738602][T20834] [ 1833.743372][T20845] binder: Bad value for 'stats' 13:04:20 executing program 2: socket$isdn_base(0x22, 0x3, 0x0) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) 13:04:20 executing program 1: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="acb1bce19f37cc9b16bc3751b2", @ANYRES16=0x0, @ANYBLOB="08002dbd7000fddbdf25010000000c00018008000100ac1e010108000200087dbb36000000040001800c00018008", @ANYRES32=0x0, @ANYBLOB="600001800500020005000000140004001d880000000000000000000000000101060001000200000008010000000000030000002900000000140004000000000050d3f4fc00fb16a10b7d000000000000000000000100050002189800000800020003000000040001"], 0xac}, 0x1, 0x0, 0x0, 0x10}, 0x4008800) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xf}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[], 0x31c}, 0x1, 0x0, 0x0, 0x8800}, 0x4) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x8aa0d5, 0x0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r0) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000340), 0x8080, 0x0) ioctl$TCGETS(r2, 0x5401, &(0x7f0000000380)) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)={0x1c, r1, 0x8, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x30}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000811}, 0x8000) 13:04:20 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0xff00000000000000) 13:04:20 executing program 4: unshare(0x20000) (fail_nth: 85) 13:04:20 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x32a0859, 0x0) (async) r0 = getuid() ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x3, @default, r0}) r1 = getuid() ioprio_set$uid(0x0, r1, 0x2007) 13:04:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x7}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:20 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x888014, 0x0) 13:04:20 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0xffffff7f00000000) 13:04:20 executing program 0: ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)) 13:04:20 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x888014, 0x0) 13:04:20 executing program 2: socket$isdn_base(0x22, 0x3, 0x0) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) socket$isdn_base(0x22, 0x3, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) 13:04:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x9}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1833.887790][T20871] binder: Bad value for 'stats' [ 1833.895275][T20872] FAULT_INJECTION: forcing a failure. [ 1833.895275][T20872] name failslab, interval 1, probability 0, space 0, times 0 [ 1833.952141][T20872] CPU: 0 PID: 20872 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1833.962120][T20872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1833.972229][T20872] Call Trace: [ 1833.975540][T20872] [ 1833.978506][T20872] dump_stack_lvl+0xd1/0x138 [ 1833.983151][T20872] should_fail_ex.cold+0x5/0xa [ 1833.987996][T20872] ? alloc_vfsmnt+0x23/0x6b0 [ 1833.992644][T20872] should_failslab+0x9/0x20 [ 1833.997216][T20872] kmem_cache_alloc+0x5a/0x430 13:04:20 executing program 0: ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)) 13:04:20 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x888014, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x888014, 0x0) (async) [ 1833.999937][T20882] binder: Bad value for 'stats' [ 1834.002011][T20872] alloc_vfsmnt+0x23/0x6b0 [ 1834.002054][T20872] clone_mnt+0x6c/0x1040 [ 1834.015689][T20872] copy_tree+0x3b1/0xae0 [ 1834.020011][T20872] copy_mnt_ns+0x1af/0xb30 [ 1834.024487][T20872] ? trace_kmem_cache_alloc+0x35/0x100 [ 1834.030014][T20872] ? kmem_cache_alloc+0x234/0x430 [ 1834.034214][T20884] binder: Bad value for 'stats' [ 1834.035239][T20872] create_new_namespaces+0xd6/0xb20 [ 1834.035294][T20872] unshare_nsproxy_namespaces+0xc5/0x1f0 13:04:20 executing program 2: ioprio_set$uid(0x0, 0xee00, 0x2007) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) [ 1834.050981][T20872] ksys_unshare+0x449/0x920 [ 1834.051026][T20872] ? unshare_fd+0x1c0/0x1c0 [ 1834.060205][T20872] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1834.066176][T20872] __x64_sys_unshare+0x31/0x40 [ 1834.071006][T20872] do_syscall_64+0x39/0xb0 [ 1834.075449][T20872] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1834.081417][T20872] RIP: 0033:0x7f51e048c0d9 [ 1834.085963][T20872] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1834.105625][T20872] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1834.114089][T20872] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1834.122110][T20872] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1834.130130][T20872] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1834.138153][T20872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1834.144143][T20892] binder: Bad value for 'stats' [ 1834.146136][T20872] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1834.146188][T20872] 13:04:20 executing program 4: unshare(0x20000) (fail_nth: 86) 13:04:20 executing program 0: ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000040)=[0x0, 0x0, 0x0]}) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) ioctl$SIOCAX25NOUID(0xffffffffffffffff, 0x89e3, &(0x7f0000000000)) (async) 13:04:20 executing program 1: mount$binderfs(0x0, &(0x7f0000000140)='./binderfs2\x00', 0x0, 0xa8014, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1409, 0x100, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x31) 13:04:20 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0xffffffff00000000) 13:04:20 executing program 2: ioprio_set$uid(0x0, 0xee00, 0x2007) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) 13:04:20 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0xf}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:20 executing program 1: mount$binderfs(0x0, &(0x7f0000000140)='./binderfs2\x00', 0x0, 0xa8014, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1409, 0x100, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x31) 13:04:20 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000040)={0x38}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@broadcast, @broadcast, 0xffffffffffffffff, "48fd15a5adf54fc8bafa2bb31aca65b759b0cc86a05176591943fb4ef2341666", 0x0, 0x1b84, 0x73a59a2, 0xfbca}, 0x3c) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"fd8b20220ad47424be313385525d89a6bdbd391895c1927a7fd21bfc9f3957ad"}) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x80000001) 13:04:20 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x6c, r1, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x40) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) [ 1834.288357][T20904] FAULT_INJECTION: forcing a failure. [ 1834.288357][T20904] name failslab, interval 1, probability 0, space 0, times 0 [ 1834.305785][T20907] binder: Bad value for 'stats' [ 1834.325401][T20904] CPU: 0 PID: 20904 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 13:04:21 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000040)={0x38}) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@broadcast, @broadcast, 0xffffffffffffffff, "48fd15a5adf54fc8bafa2bb31aca65b759b0cc86a05176591943fb4ef2341666", 0x0, 0x1b84, 0x73a59a2, 0xfbca}, 0x3c) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"fd8b20220ad47424be313385525d89a6bdbd391895c1927a7fd21bfc9f3957ad"}) (async) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x80000001) 13:04:21 executing program 1: mount$binderfs(0x0, &(0x7f0000000140)='./binderfs2\x00', 0x0, 0xa8014, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, 0x1409, 0x100, 0x70bd29, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x0, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x31) 13:04:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1834.335394][T20904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1834.345495][T20904] Call Trace: [ 1834.348820][T20904] [ 1834.351799][T20904] dump_stack_lvl+0xd1/0x138 [ 1834.356445][T20904] should_fail_ex.cold+0x5/0xa [ 1834.361284][T20904] ? alloc_vfsmnt+0x23/0x6b0 [ 1834.365973][T20904] should_failslab+0x9/0x20 [ 1834.370539][T20904] kmem_cache_alloc+0x5a/0x430 [ 1834.375363][T20904] alloc_vfsmnt+0x23/0x6b0 [ 1834.379846][T20904] clone_mnt+0x6c/0x1040 [ 1834.384202][T20904] copy_tree+0x3b1/0xae0 [ 1834.388525][T20904] copy_mnt_ns+0x1af/0xb30 [ 1834.393017][T20904] ? trace_kmem_cache_alloc+0x35/0x100 [ 1834.398546][T20904] ? kmem_cache_alloc+0x234/0x430 [ 1834.403628][T20904] create_new_namespaces+0xd6/0xb20 [ 1834.408904][T20904] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1834.414603][T20904] ksys_unshare+0x449/0x920 [ 1834.419171][T20904] ? unshare_fd+0x1c0/0x1c0 [ 1834.423738][T20904] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1834.429788][T20904] __x64_sys_unshare+0x31/0x40 [ 1834.434616][T20904] do_syscall_64+0x39/0xb0 [ 1834.439099][T20904] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1834.445059][T20904] RIP: 0033:0x7f51e048c0d9 [ 1834.449515][T20904] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1834.469192][T20904] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1834.477664][T20904] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 13:04:21 executing program 4: unshare(0x20000) (fail_nth: 87) 13:04:21 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000000040)={0x38}) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, &(0x7f00000000c0)={@broadcast, @broadcast, 0xffffffffffffffff, "48fd15a5adf54fc8bafa2bb31aca65b759b0cc86a05176591943fb4ef2341666", 0x0, 0x1b84, 0x73a59a2, 0xfbca}, 0x3c) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000080)={"fd8b20220ad47424be313385525d89a6bdbd391895c1927a7fd21bfc9f3957ad"}) (async, rerun: 32) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x80000001) (rerun: 32) 13:04:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0x2}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:21 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000041) 13:04:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x6c, r1, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) 13:04:21 executing program 2: ioprio_set$uid(0x0, 0xee00, 0x2007) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) ioprio_set$uid(0x0, 0xee00, 0x2007) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) ioctl$TIOCEXCL(0xffffffffffffffff, 0x540c) (async) [ 1834.485689][T20904] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1834.493707][T20904] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1834.501821][T20904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1834.509846][T20904] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1834.517885][T20904] 13:04:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0x3}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:21 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x6c, r1, 0x8, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xc}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x5}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x40) (async, rerun: 32) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (rerun: 32) [ 1834.607802][T20937] binder: Bad value for 'stats' 13:04:21 executing program 0: socketpair(0x21, 0x80000, 0x20, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x8e000, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0xee00, @ANYBLOB="2c571e9548b059ad0f000601000000000003000000000000000000"]) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @default}, [@rose, @netrom, @remote, @bcast, @bcast, @netrom, @netrom, @rose]}, &(0x7f0000000200)=0x48, 0x100000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040090) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20002cbd7000ffdbdf250100000014000200776732000000000000000000000000008e134fe70ef3fe8305e97bdc2df611917b6bc7aa41006018ecdc6dc1297ae900"/78], 0x28}, 0x1, 0x0, 0x0, 0x24048040}, 0x811) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000280)={0x3, @bcast}) 13:04:21 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000041) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) (async) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000041) (async) [ 1834.647397][T20941] binder: Bad value for 'stats' [ 1834.665955][T20942] FAULT_INJECTION: forcing a failure. [ 1834.665955][T20942] name failslab, interval 1, probability 0, space 0, times 0 [ 1834.705107][T20942] CPU: 1 PID: 20942 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1834.715075][T20942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1834.725173][T20942] Call Trace: [ 1834.728487][T20942] [ 1834.731461][T20942] dump_stack_lvl+0xd1/0x138 [ 1834.736278][T20942] should_fail_ex.cold+0x5/0xa [ 1834.741113][T20942] ? alloc_vfsmnt+0x23/0x6b0 [ 1834.745754][T20942] should_failslab+0x9/0x20 [ 1834.750312][T20942] kmem_cache_alloc+0x5a/0x430 [ 1834.755126][T20942] alloc_vfsmnt+0x23/0x6b0 [ 1834.759577][T20942] clone_mnt+0x6c/0x1040 [ 1834.763874][T20942] copy_tree+0x3b1/0xae0 [ 1834.768155][T20942] copy_mnt_ns+0x1af/0xb30 [ 1834.772614][T20942] ? trace_kmem_cache_alloc+0x35/0x100 [ 1834.778105][T20942] ? kmem_cache_alloc+0x234/0x430 [ 1834.783160][T20942] create_new_namespaces+0xd6/0xb20 [ 1834.788397][T20942] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1834.794066][T20942] ksys_unshare+0x449/0x920 [ 1834.798618][T20942] ? unshare_fd+0x1c0/0x1c0 [ 1834.803158][T20942] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1834.809091][T20942] __x64_sys_unshare+0x31/0x40 [ 1834.813879][T20942] do_syscall_64+0x39/0xb0 [ 1834.818321][T20942] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1834.824246][T20942] RIP: 0033:0x7f51e048c0d9 [ 1834.828689][T20942] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 13:04:21 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x7f, 0x9, @vifc_lcl_ifindex=r2, @rand_addr=0x64010102}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x140b, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40814}, 0x800) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0xffffffffffffffff, "d9e939d8cb4eb245f265221eea7ae3cac600e60a2bc22637c3560f94b4279b1b", 0x2, 0x10000, 0x300000, 0x100}, 0x3c) 13:04:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0x4}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1834.848317][T20942] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1834.856753][T20942] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1834.864741][T20942] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1834.872726][T20942] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1834.880715][T20942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1834.888708][T20942] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1834.896720][T20942] 13:04:21 executing program 4: unshare(0x20000) (fail_nth: 88) 13:04:21 executing program 0: socketpair(0x21, 0x80000, 0x20, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x8e000, &(0x7f00000006c0)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030303030352c6d61783d30303030303030303030303030303030303030303030322c73746174733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d676c6f62616c2c66736e616d653d2c736d61636b6673726f6f743d2e2f62696e6465726673002c7569643c71153ec4009dafb68409af7ea700b11bf8ac5ede612f44b41365b18ec98cc68ea6295f355f96c745b6f26aff7f75017db41c57686cbaf5d1bbc0791ae976f295c40fc2e56f2229516adeb25ccb783ef066d51f01f201e47670edb6bcb0b6a44a257f0513effb577f67e2e552b8dbc3a8c065339bbe690e642a298242edce1e8838aa4ba8526ea9103bc5cd6c2223f0f7e77d6c496b3a5175fb07bec25b6825895475ac70702c8416c9298f823d43dae1d5f3c3635d20a2fd392605239ce89145edf10d323ae271af2ecbb85ddf8d21f62976ec5e138cb6fe618c0302ac6cbfad8977065f239ef20575ebd6c21a12cbc5fdd0baa4d9c0d895045290232505adaa4c3fcaeefea188a9734d9e81afb9565fa5ba3d7c3c4bd457b5ff4cd3209c6747806cd1679ecda30c62d84268985953cf801208065f39d7c3270396ab66dd354cc72a76af781e94c50a3e511ad19cbb379a79c8af5f1f7e5e2a440537406729556743c9914ca6fef6cc93e391ec0f1d049eac40baba66422f852c38c9d9f79f9c8bd5d1bc875d51727607", @ANYRESDEC=0xee00, @ANYBLOB="2c571e9548b059ad0f000601000000000003000000000000000000"]) (async) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @default}, [@rose, @netrom, @remote, @bcast, @bcast, @netrom, @netrom, @rose]}, &(0x7f0000000200)=0x48, 0x100000) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040090) (async, rerun: 64) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20002cbd7000ffdbdf250100000014000200776732000000000000000000000000008e134fe70ef3fe8305e97bdc2df611917b6bc7aa41006018ecdc6dc1297ae900"/78], 0x28}, 0x1, 0x0, 0x0, 0x24048040}, 0x811) (async, rerun: 64) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000280)={0x3, @bcast}) 13:04:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0x5}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:21 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x7f, 0x9, @vifc_lcl_ifindex=r2, @rand_addr=0x64010102}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x140b, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40814}, 0x800) (async) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0xffffffffffffffff, "d9e939d8cb4eb245f265221eea7ae3cac600e60a2bc22637c3560f94b4279b1b", 0x2, 0x10000, 0x300000, 0x100}, 0x3c) 13:04:21 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000041) 13:04:21 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x400201, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000040)={0x6, 0x2}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000000)=0x7) 13:04:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0x6}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:21 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00', 0x0}) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x7f, 0x9, @vifc_lcl_ifindex=r2, @rand_addr=0x64010102}, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x140b, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40814}, 0x800) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0xffffffffffffffff, "d9e939d8cb4eb245f265221eea7ae3cac600e60a2bc22637c3560f94b4279b1b", 0x2, 0x10000, 0x300000, 0x100}, 0x3c) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) (async) setsockopt$MRT_DEL_VIF(r1, 0x0, 0xcb, &(0x7f0000000140)={0xffffffffffffffff, 0x1, 0x7f, 0x9, @vifc_lcl_ifindex=r2, @rand_addr=0x64010102}, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x20, 0x140b, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40814}, 0x800) (async) setsockopt$MRT_DEL_MFC_PROXY(r1, 0x0, 0xd3, &(0x7f0000000180)={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010100, 0xffffffffffffffff, "d9e939d8cb4eb245f265221eea7ae3cac600e60a2bc22637c3560f94b4279b1b", 0x2, 0x10000, 0x300000, 0x100}, 0x3c) (async) 13:04:21 executing program 0: socketpair(0x21, 0x80000, 0x20, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f00000002c0), r0) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x8e000, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRESDEC=0xee00, @ANYBLOB="2c571e9548b059ad0f000601000000000003000000000000000000"]) (async) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @default}, [@rose, @netrom, @remote, @bcast, @bcast, @netrom, @netrom, @rose]}, &(0x7f0000000200)=0x48, 0x100000) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), r1) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000500)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r5, 0x20, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4040090) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="20002cbd7000ffdbdf250100000014000200776732000000000000000000000000008e134fe70ef3fe8305e97bdc2df611917b6bc7aa41006018ecdc6dc1297ae900"/78], 0x28}, 0x1, 0x0, 0x0, 0x24048040}, 0x811) (async) ioctl$SIOCAX25DELUID(r3, 0x89e2, &(0x7f0000000280)={0x3, @bcast}) [ 1835.045622][T20971] FAULT_INJECTION: forcing a failure. [ 1835.045622][T20971] name failslab, interval 1, probability 0, space 0, times 0 13:04:21 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) [ 1835.136227][T20971] CPU: 0 PID: 20971 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1835.146209][T20971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 13:04:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0x7}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:21 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) mount$binderfs(0xfffffffffffffffd, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000000c0)={[{@stats}, {@stats}, {@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x5}}], [{@subj_type={'subj_type', 0x3d, '\''}}, {@subj_user={'subj_user', 0x3d, '!%'}}, {@fsmagic={'fsmagic', 0x3d, 0xc1}}, {@smackfshat={'smackfshat', 0x3d, '($!\xcd+]\xbd\v]\x06&'}}]}) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x110, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x48, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}]}, @NL802154_ATTR_SEC_DEVICE={0x3c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0x5013efc6c3bdd59f}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44}, 0x4000801) [ 1835.146231][T20971] Call Trace: [ 1835.146240][T20971] [ 1835.146251][T20971] dump_stack_lvl+0xd1/0x138 [ 1835.146288][T20971] should_fail_ex.cold+0x5/0xa 13:04:21 executing program 4: unshare(0x20000) (fail_nth: 89) 13:04:21 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x44}}, 0x4040850) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x200060, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x1}}, {@stats}, {@max={'max', 0x3d, 0xfa}}, {@max={'max', 0x3d, 0x7fffffff}}, {@max={'max', 0x3d, 0x7fff}}, {@stats}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) 13:04:21 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x0) (async) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) (async) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) (async) 13:04:21 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async, rerun: 32) mount$binderfs(0xfffffffffffffffd, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000000c0)={[{@stats}, {@stats}, {@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x5}}], [{@subj_type={'subj_type', 0x3d, '\''}}, {@subj_user={'subj_user', 0x3d, '!%'}}, {@fsmagic={'fsmagic', 0x3d, 0xc1}}, {@smackfshat={'smackfshat', 0x3d, '($!\xcd+]\xbd\v]\x06&'}}]}) (rerun: 32) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x110, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x48, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}]}, @NL802154_ATTR_SEC_DEVICE={0x3c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0x5013efc6c3bdd59f}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44}, 0x4000801) 13:04:21 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0x9}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1835.146328][T20971] ? alloc_vfsmnt+0x23/0x6b0 [ 1835.146358][T20971] should_failslab+0x9/0x20 [ 1835.146394][T20971] kmem_cache_alloc+0x5a/0x430 [ 1835.146424][T20971] alloc_vfsmnt+0x23/0x6b0 [ 1835.146454][T20971] clone_mnt+0x6c/0x1040 [ 1835.146491][T20971] copy_tree+0x3b1/0xae0 [ 1835.146534][T20971] copy_mnt_ns+0x1af/0xb30 [ 1835.146569][T20971] ? trace_kmem_cache_alloc+0x35/0x100 [ 1835.146607][T20971] ? kmem_cache_alloc+0x234/0x430 [ 1835.146637][T20971] create_new_namespaces+0xd6/0xb20 [ 1835.146677][T20971] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1835.146713][T20971] ksys_unshare+0x449/0x920 [ 1835.146743][T20971] ? unshare_fd+0x1c0/0x1c0 [ 1835.146781][T20971] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1835.146824][T20971] __x64_sys_unshare+0x31/0x40 [ 1835.146854][T20971] do_syscall_64+0x39/0xb0 [ 1835.146883][T20971] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1835.146921][T20971] RIP: 0033:0x7f51e048c0d9 [ 1835.146943][T20971] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1835.146968][T20971] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1835.146995][T20971] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1835.147014][T20971] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1835.147030][T20971] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1835.147047][T20971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1835.147064][T20971] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1835.147104][T20971] [ 1835.250980][T20993] binder: Bad value for 'stats' [ 1835.314740][T20996] binder: Bad value for 'stats' [ 1835.315333][T20996] binder: Bad value for 'stats' [ 1835.315685][T20996] binder: Bad value for 'stats' [ 1835.319817][T20996] binder: Bad value for 'stats' [ 1835.320191][T20996] binder: Bad value for 'stats' [ 1835.341749][T20996] binder: Bad value for 'stats' [ 1835.342142][T20996] binder: Bad value for 'stats' [ 1835.342487][T20996] binder: Bad value for 'stats' [ 1835.347921][T20996] binder: Bad value for 'stats' [ 1835.348284][T20996] binder: Bad value for 'stats' [ 1835.353217][T20996] binder: Bad value for 'stats' [ 1835.360441][T20996] binder: Bad value for 'stats' [ 1835.360855][T20996] binder: Bad value for 'stats' [ 1835.361223][T20996] binder: Bad value for 'stats' [ 1835.366874][T20996] binder: Bad value for 'stats' [ 1835.367346][T20996] binder: Bad value for 'stats' [ 1835.371597][T20996] binder: Bad value for 'stats' [ 1835.374447][T20996] binder: Bad value for 'stats' [ 1835.374836][T20996] binder: Bad value for 'stats' [ 1835.375161][T20996] binder: Bad value for 'stats' [ 1835.394111][T21006] FAULT_INJECTION: forcing a failure. [ 1835.394111][T21006] name failslab, interval 1, probability 0, space 0, times 0 13:04:22 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x400201, 0x0) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000040)={0x6, 0x2}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000000)=0x7) 13:04:22 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) (async) ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) 13:04:22 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x44}}, 0x4040850) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x200060, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x1}}, {@stats}, {@max={'max', 0x3d, 0xfa}}, {@max={'max', 0x3d, 0x7fffffff}}, {@max={'max', 0x3d, 0x7fff}}, {@stats}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) 13:04:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0xf}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1835.426487][T20996] binder: Bad value for 'stats' [ 1835.441888][T21006] CPU: 0 PID: 21006 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1835.476383][T20996] binder: Bad value for 'stats' [ 1835.480231][T21006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1835.480251][T21006] Call Trace: [ 1835.480261][T21006] [ 1835.480272][T21006] dump_stack_lvl+0xd1/0x138 [ 1835.489534][T20996] binder: Bad value for 'stats' [ 1835.496230][T21006] should_fail_ex.cold+0x5/0xa 13:04:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0xf0}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1835.496280][T21006] ? alloc_vfsmnt+0x23/0x6b0 [ 1835.496312][T21006] should_failslab+0x9/0x20 [ 1835.496347][T21006] kmem_cache_alloc+0x5a/0x430 [ 1835.496380][T21006] alloc_vfsmnt+0x23/0x6b0 [ 1835.496415][T21006] clone_mnt+0x6c/0x1040 [ 1835.496459][T21006] copy_tree+0x3b1/0xae0 [ 1835.496511][T21006] copy_mnt_ns+0x1af/0xb30 [ 1835.496552][T21006] ? trace_kmem_cache_alloc+0x35/0x100 [ 1835.496593][T21006] ? kmem_cache_alloc+0x234/0x430 [ 1835.514685][T20996] binder: Bad value for 'stats' [ 1835.517290][T21006] create_new_namespaces+0xd6/0xb20 13:04:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0x300}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1835.517344][T21006] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1835.517386][T21006] ksys_unshare+0x449/0x920 [ 1835.522756][T20996] binder: Bad value for 'stats' [ 1835.527059][T21006] ? unshare_fd+0x1c0/0x1c0 [ 1835.527111][T21006] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1835.527158][T21006] __x64_sys_unshare+0x31/0x40 [ 1835.533384][T20996] binder: Bad value for 'stats' [ 1835.536928][T21006] do_syscall_64+0x39/0xb0 [ 1835.536969][T21006] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1835.542839][T20996] binder: Bad value for 'stats' [ 1835.546683][T21006] RIP: 0033:0x7f51e048c0d9 [ 1835.546711][T21006] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1835.546740][T21006] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1835.546768][T21006] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1835.546788][T21006] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 13:04:22 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r4, 0x4b6b, 0x0) ioctl$TIOCNOTTY(r4, 0x5422) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r5, 0x4b6b, 0x0) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) [ 1835.546804][T21006] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1835.546822][T21006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1835.546840][T21006] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1835.546880][T21006] 13:04:22 executing program 4: unshare(0x20000) (fail_nth: 90) 13:04:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0x500}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:22 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x44}}, 0x4040850) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x200060, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x1}}, {@stats}, {@max={'max', 0x3d, 0xfa}}, {@max={'max', 0x3d, 0x7fffffff}}, {@max={'max', 0x3d, 0x7fff}}, {@stats}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x44, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x44}}, 0x4040850) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x200060, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x1}}, {@stats}, {@max={'max', 0x3d, 0xfa}}, {@max={'max', 0x3d, 0x7fffffff}}, {@max={'max', 0x3d, 0x7fff}}, {@stats}], [{@mask={'mask', 0x3d, 'MAY_WRITE'}}]}) (async) [ 1835.898315][T20996] binder: Bad value for 'stats' [ 1835.904063][T20996] binder: Bad value for 'stats' [ 1835.909375][T20996] binder: Bad value for 'stats' [ 1835.922139][T20996] binder: Bad value for 'stats' [ 1835.968728][T20996] binder: Bad value for 'stats' 13:04:22 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) mount$binderfs(0xfffffffffffffffd, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000000c0)={[{@stats}, {@stats}, {@max={'max', 0x3d, 0x2}}, {@max={'max', 0x3d, 0x5}}], [{@subj_type={'subj_type', 0x3d, '\''}}, {@subj_user={'subj_user', 0x3d, '!%'}}, {@fsmagic={'fsmagic', 0x3d, 0xc1}}, {@smackfshat={'smackfshat', 0x3d, '($!\xcd+]\xbd\v]\x06&'}}]}) (async) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x110, r0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVICE={0x48, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x4}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x2}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x28, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xfffe}]}, @NL802154_ATTR_SEC_DEVICE={0x3c, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0x5013efc6c3bdd59f}}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8}, @NL802154_DEV_ATTR_SECLEVEL_EXEMPT={0x5, 0x5, 0x1}]}, @NL802154_ATTR_SEC_DEVICE={0x30, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x3}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xffff}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0x1}, @NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0202}}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x44}, 0x4000801) 13:04:22 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x400201, 0x0) (async) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETSHIFTSTATE(r1, 0x541c, &(0x7f0000000040)={0x6, 0x2}) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000000)=0x7) 13:04:22 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, 0x0) (async, rerun: 64) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 64) ioctl$GIO_FONTX(r4, 0x4b6b, 0x0) (async) ioctl$TIOCNOTTY(r4, 0x5422) (async, rerun: 32) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) (async, rerun: 32) ioctl$TIOCNOTTY(r0, 0x5422) (async, rerun: 64) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 64) ioctl$GIO_FONTX(r5, 0x4b6b, 0x0) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) 13:04:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0x600}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:22 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2860438, 0x0) [ 1836.004106][T20996] binder: Bad value for 'stats' [ 1836.007710][T21033] FAULT_INJECTION: forcing a failure. [ 1836.007710][T21033] name failslab, interval 1, probability 0, space 0, times 0 [ 1836.025515][T21033] CPU: 1 PID: 21033 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1836.035454][T21033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1836.045645][T21033] Call Trace: [ 1836.048965][T21033] [ 1836.051925][T21033] dump_stack_lvl+0xd1/0x138 [ 1836.056564][T21033] should_fail_ex.cold+0x5/0xa [ 1836.061392][T21033] ? alloc_vfsmnt+0x23/0x6b0 [ 1836.066043][T21033] should_failslab+0x9/0x20 [ 1836.070612][T21033] kmem_cache_alloc+0x5a/0x430 [ 1836.075429][T21033] alloc_vfsmnt+0x23/0x6b0 [ 1836.079905][T21033] clone_mnt+0x6c/0x1040 [ 1836.084211][T21033] copy_tree+0x3b1/0xae0 [ 1836.088526][T21033] copy_mnt_ns+0x1af/0xb30 [ 1836.093012][T21033] ? trace_kmem_cache_alloc+0x35/0x100 [ 1836.098529][T21033] ? kmem_cache_alloc+0x234/0x430 [ 1836.103605][T21033] create_new_namespaces+0xd6/0xb20 [ 1836.108864][T21033] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1836.114560][T21033] ksys_unshare+0x449/0x920 [ 1836.116296][T21039] binder: Bad value for 'stats' [ 1836.119090][T21033] ? unshare_fd+0x1c0/0x1c0 [ 1836.119143][T21033] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1836.119195][T21033] __x64_sys_unshare+0x31/0x40 [ 1836.139424][T21033] do_syscall_64+0x39/0xb0 [ 1836.143898][T21033] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1836.149856][T21033] RIP: 0033:0x7f51e048c0d9 13:04:22 executing program 2: socket$igmp(0x2, 0x3, 0x2) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r1 = accept4$ax25(r0, &(0x7f0000000180)={{0x3, @netrom}, [@bcast, @bcast, @default, @null, @rose, @default, @rose, @default]}, &(0x7f0000000200)=0x48, 0x0) recvfrom$ax25(r1, &(0x7f00000002c0)=""/124, 0x7c, 0x2, &(0x7f0000000340)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'}) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x0, {0x1}}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r4, 0x3, {0x0, 0x1, 0x4}, 0x1}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) [ 1836.154312][T21033] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1836.173974][T21033] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1836.182456][T21033] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1836.190475][T21033] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1836.198497][T21033] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 13:04:22 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2860438, 0x0) 13:04:22 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0x700}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:22 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000000)=0xff) [ 1836.206602][T21033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1836.214615][T21033] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1836.222765][T21033] [ 1836.291347][T21051] binder: Bad value for 'stats' 13:04:23 executing program 4: unshare(0x20000) (fail_nth: 91) 13:04:23 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000000)=0xff) 13:04:23 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2860438, 0x0) 13:04:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0x900}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:23 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, 0x0) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r3, 0x4b6b, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r4, 0x4b6b, 0x0) ioctl$TIOCNOTTY(r4, 0x5422) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) (async) ioctl$TIOCNOTTY(r0, 0x5422) (async) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r5, 0x4b6b, 0x0) (async) ioctl$GIO_UNIMAP(r5, 0x4b66, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{}]}) 13:04:23 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) ioctl$SW_SYNC_IOC_INC(0xffffffffffffffff, 0x40045701, &(0x7f0000000000)=0xff) [ 1836.427266][T21066] FAULT_INJECTION: forcing a failure. [ 1836.427266][T21066] name failslab, interval 1, probability 0, space 0, times 0 13:04:23 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x2189c52, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x420000) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 13:04:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0xf00}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1836.517249][T21066] CPU: 1 PID: 21066 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1836.527226][T21066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1836.537329][T21066] Call Trace: [ 1836.540643][T21066] [ 1836.543607][T21066] dump_stack_lvl+0xd1/0x138 [ 1836.548245][T21066] should_fail_ex.cold+0x5/0xa [ 1836.553072][T21066] ? alloc_vfsmnt+0x23/0x6b0 [ 1836.557723][T21066] should_failslab+0x9/0x20 [ 1836.562284][T21066] kmem_cache_alloc+0x5a/0x430 [ 1836.567098][T21066] alloc_vfsmnt+0x23/0x6b0 [ 1836.571915][T21066] clone_mnt+0x6c/0x1040 [ 1836.576228][T21066] copy_tree+0x3b1/0xae0 [ 1836.580549][T21066] copy_mnt_ns+0x1af/0xb30 [ 1836.585023][T21066] ? trace_kmem_cache_alloc+0x35/0x100 [ 1836.590543][T21066] ? kmem_cache_alloc+0x234/0x430 [ 1836.595625][T21066] create_new_namespaces+0xd6/0xb20 [ 1836.600887][T21066] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1836.606585][T21066] ksys_unshare+0x449/0x920 [ 1836.611138][T21066] ? unshare_fd+0x1c0/0x1c0 13:04:23 executing program 2: socket$igmp(0x2, 0x3, 0x2) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) r1 = accept4$ax25(r0, &(0x7f0000000180)={{0x3, @netrom}, [@bcast, @bcast, @default, @null, @rose, @default, @rose, @default]}, &(0x7f0000000200)=0x48, 0x0) recvfrom$ax25(r1, &(0x7f00000002c0)=""/124, 0x7c, 0x2, &(0x7f0000000340)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'}) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x0, {0x1}}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r4, 0x3, {0x0, 0x1, 0x4}, 0x1}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) 13:04:23 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2140080, 0x0) 13:04:23 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x400201, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000180)) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000100)) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x10641, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000140)={0x0, 0x0, 0xac, 0x8001, @vifc_lcl_addr=@multicast2, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) ioctl$VT_ACTIVATE(r2, 0x5606, 0x9) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x5fb540, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000080)) 13:04:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0x2659}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1836.615824][T21066] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1836.621788][T21066] __x64_sys_unshare+0x31/0x40 [ 1836.626613][T21066] do_syscall_64+0x39/0xb0 [ 1836.631080][T21066] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1836.637040][T21066] RIP: 0033:0x7f51e048c0d9 [ 1836.641497][T21066] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1836.661241][T21066] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1836.669718][T21066] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1836.677741][T21066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1836.685759][T21066] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1836.693773][T21066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1836.701786][T21066] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1836.709822][T21066] [ 1836.737819][T21090] binder: Bad value for 'stats' 13:04:23 executing program 4: unshare(0x20000) (fail_nth: 92) 13:04:23 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x400201, 0x0) (async, rerun: 64) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 64) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000180)) (async) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) (async, rerun: 32) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000100)) (async, rerun: 32) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x10641, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000140)={0x0, 0x0, 0xac, 0x8001, @vifc_lcl_addr=@multicast2, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) ioctl$VT_ACTIVATE(r2, 0x5606, 0x9) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x5fb540, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000080)) 13:04:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0x3f00}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:23 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2140080, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2140080, 0x0) (async) 13:04:23 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x2189c52, 0x0) (async) r0 = syz_open_pts(0xffffffffffffffff, 0x420000) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 13:04:23 executing program 2: socket$igmp(0x2, 0x3, 0x2) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) r1 = accept4$ax25(r0, &(0x7f0000000180)={{0x3, @netrom}, [@bcast, @bcast, @default, @null, @rose, @default, @rose, @default]}, &(0x7f0000000200)=0x48, 0x0) recvfrom$ax25(r1, &(0x7f00000002c0)=""/124, 0x7c, 0x2, &(0x7f0000000340)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg1\x00'}) (async) r2 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000040)={0x1d, r4, 0x0, {0x1}}, 0x18) connect$can_j1939(r2, &(0x7f0000000080)={0x1d, r4, 0x3, {0x0, 0x1, 0x4}, 0x1}, 0x18) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vxcan1\x00'}) 13:04:23 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x2140080, 0x0) 13:04:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0x5926}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) [ 1836.822043][T21103] binder: Bad value for 'stats' 13:04:23 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x2189c52, 0x0) r0 = syz_open_pts(0xffffffffffffffff, 0x420000) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) 13:04:23 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) 13:04:23 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x400201, 0x0) (async, rerun: 64) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 64) ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000180)) (async) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) (async, rerun: 32) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) (async) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000100)) (async) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x10641, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000140)={0x0, 0x0, 0xac, 0x8001, @vifc_lcl_addr=@multicast2, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10) (async) ioctl$VT_ACTIVATE(r2, 0x5606, 0x9) (async) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x5fb540, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000080)) [ 1836.878113][T21108] FAULT_INJECTION: forcing a failure. [ 1836.878113][T21108] name failslab, interval 1, probability 0, space 0, times 0 [ 1836.960456][T21108] CPU: 0 PID: 21108 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1836.970437][T21108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1836.980537][T21108] Call Trace: [ 1836.983858][T21108] [ 1836.986824][T21108] dump_stack_lvl+0xd1/0x138 [ 1836.991465][T21108] should_fail_ex.cold+0x5/0xa [ 1836.996295][T21108] ? alloc_vfsmnt+0x23/0x6b0 [ 1837.000965][T21108] should_failslab+0x9/0x20 [ 1837.005532][T21108] kmem_cache_alloc+0x5a/0x430 [ 1837.010361][T21108] alloc_vfsmnt+0x23/0x6b0 [ 1837.014834][T21108] clone_mnt+0x6c/0x1040 [ 1837.019145][T21108] copy_tree+0x3b1/0xae0 [ 1837.023455][T21108] copy_mnt_ns+0x1af/0xb30 [ 1837.027936][T21108] ? trace_kmem_cache_alloc+0x35/0x100 [ 1837.033460][T21108] ? kmem_cache_alloc+0x234/0x430 [ 1837.038533][T21108] create_new_namespaces+0xd6/0xb20 [ 1837.043793][T21108] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1837.049481][T21108] ksys_unshare+0x449/0x920 [ 1837.054046][T21108] ? unshare_fd+0x1c0/0x1c0 [ 1837.058609][T21108] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1837.064572][T21108] __x64_sys_unshare+0x31/0x40 [ 1837.069389][T21108] do_syscall_64+0x39/0xb0 [ 1837.073957][T21108] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1837.079909][T21108] RIP: 0033:0x7f51e048c0d9 [ 1837.084365][T21108] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 13:04:23 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x1021, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x80}}], [{@smackfsdef}, {@subj_type}, {@uid_lt={'uid<', 0xee01}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000015c0)={&(0x7f00000001c0)={0x13c4, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xe34, 0x8, 0x0, 0x1, [{0x164, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @empty, 0x3}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}]}, {0x6a8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7ff9767f87d1d18bc798f384db3a43172ead1080602ec5604851d649071de7e7"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x194, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x140}, @WGPEER_A_ALLOWEDIPS={0x4b8, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x8}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}, {0x410, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x3bc, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x8}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x154, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "70ea4ca52df1ebcd2534b9b85c8f7ebfd0f81502c57f7efb7cc63e5519a61d49"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0xd8, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @remote, 0x2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010102}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6d7}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x510, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4252b240, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7e}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x464, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0x3e4, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x81}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9b8f}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5f237096a51e23addfb724f3a8a59e8bd72a88329c02a58007833b8646c58200"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x13c4}, 0x1, 0x0, 0x0, 0x20000084}, 0x1000) [ 1837.104030][T21108] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1837.112494][T21108] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1837.120510][T21108] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1837.128524][T21108] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1837.136534][T21108] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1837.144554][T21108] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1837.152591][T21108] 13:04:23 executing program 4: unshare(0x20000) (fail_nth: 93) 13:04:23 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x1021, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x80}}], [{@smackfsdef}, {@subj_type}, {@uid_lt={'uid<', 0xee01}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000015c0)={&(0x7f00000001c0)={0x13c4, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xe34, 0x8, 0x0, 0x1, [{0x164, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @empty, 0x3}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}]}, {0x6a8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7ff9767f87d1d18bc798f384db3a43172ead1080602ec5604851d649071de7e7"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x194, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x140}, @WGPEER_A_ALLOWEDIPS={0x4b8, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x8}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}, {0x410, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x3bc, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x8}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x154, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "70ea4ca52df1ebcd2534b9b85c8f7ebfd0f81502c57f7efb7cc63e5519a61d49"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0xd8, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @remote, 0x2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010102}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6d7}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x510, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4252b240, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7e}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x464, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0x3e4, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x81}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9b8f}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5f237096a51e23addfb724f3a8a59e8bd72a88329c02a58007833b8646c58200"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x13c4}, 0x1, 0x0, 0x0, 0x20000084}, 0x1000) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x1021, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x80}}], [{@smackfsdef}, {@subj_type}, {@uid_lt={'uid<', 0xee01}}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000015c0)={&(0x7f00000001c0)={0x13c4, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xe34, 0x8, 0x0, 0x1, [{0x164, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @empty, 0x3}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}]}, {0x6a8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7ff9767f87d1d18bc798f384db3a43172ead1080602ec5604851d649071de7e7"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x194, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x140}, @WGPEER_A_ALLOWEDIPS={0x4b8, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x8}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}, {0x410, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x3bc, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x8}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x154, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "70ea4ca52df1ebcd2534b9b85c8f7ebfd0f81502c57f7efb7cc63e5519a61d49"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0xd8, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @remote, 0x2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010102}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6d7}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x510, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4252b240, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7e}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x464, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0x3e4, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x81}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9b8f}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5f237096a51e23addfb724f3a8a59e8bd72a88329c02a58007833b8646c58200"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x13c4}, 0x1, 0x0, 0x0, 0x20000084}, 0x1000) (async) 13:04:23 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) 13:04:23 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x42000, 0x0) 13:04:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0xf000}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:23 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80202, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) ioctl$I2C_TENBIT(r0, 0x704, 0x1) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x5d, 0x0, 0xc3, &(0x7f0000000080)="4e68cace87aaf3b001c60e3945789b7ad74fc1efff4df10801c07e5ee81366980a7dcd491ae9121ef553532d625a8e2a96e97570567f6518a4345c176f95d480026d50ebd4539f99d706969a51e2832597085ab22151f5533f17052326b6773da9ded4910810853c05bc1b21b97d9761422967ed27d4b5e54b8d81c88c081846ac28eeb8be2cfde1262de2570b12bda836f2ce2be78231c1bcea71aced36fc4098db2cb3002662ec3038a3b543c1bcdbf5255b0c2edb738348a0b19d594a80c0f636fb"}, {0x4d, 0x2200}], 0x2}) [ 1837.188380][T21129] binder: Bad value for 'stats' 13:04:23 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {0x13, 0x0, 0xffff}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:23 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80202, 0x0) (async) r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) ioctl$I2C_TENBIT(r0, 0x704, 0x1) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x5d, 0x0, 0xc3, &(0x7f0000000080)="4e68cace87aaf3b001c60e3945789b7ad74fc1efff4df10801c07e5ee81366980a7dcd491ae9121ef553532d625a8e2a96e97570567f6518a4345c176f95d480026d50ebd4539f99d706969a51e2832597085ab22151f5533f17052326b6773da9ded4910810853c05bc1b21b97d9761422967ed27d4b5e54b8d81c88c081846ac28eeb8be2cfde1262de2570b12bda836f2ce2be78231c1bcea71aced36fc4098db2cb3002662ec3038a3b543c1bcdbf5255b0c2edb738348a0b19d594a80c0f636fb"}, {0x4d, 0x2200}], 0x2}) 13:04:23 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x42000, 0x0) 13:04:23 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x1021, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x80}}], [{@smackfsdef}, {@subj_type}, {@uid_lt={'uid<', 0xee01}}]}) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000015c0)={&(0x7f00000001c0)={0x13c4, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xe34, 0x8, 0x0, 0x1, [{0x164, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @empty, 0x3}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}]}, {0x6a8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7ff9767f87d1d18bc798f384db3a43172ead1080602ec5604851d649071de7e7"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x194, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x140}, @WGPEER_A_ALLOWEDIPS={0x4b8, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x8}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}, {0x410, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x3bc, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x8}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x154, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "70ea4ca52df1ebcd2534b9b85c8f7ebfd0f81502c57f7efb7cc63e5519a61d49"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0xd8, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @remote, 0x2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010102}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6d7}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x510, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4252b240, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7e}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x464, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0x3e4, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x81}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9b8f}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5f237096a51e23addfb724f3a8a59e8bd72a88329c02a58007833b8646c58200"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x13c4}, 0x1, 0x0, 0x0, 0x20000084}, 0x1000) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x1021, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x80}}], [{@smackfsdef}, {@subj_type}, {@uid_lt={'uid<', 0xee01}}]}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000001600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000015c0)={&(0x7f00000001c0)={0x13c4, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_PEERS={0xe34, 0x8, 0x0, 0x1, [{0x164, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @empty, 0x3}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}]}, {0x6a8, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "7ff9767f87d1d18bc798f384db3a43172ead1080602ec5604851d649071de7e7"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ALLOWEDIPS={0x194, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x140}, @WGPEER_A_ALLOWEDIPS={0x4b8, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x8}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}]}]}, {0x410, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x3bc, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x8}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x40}}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x154, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "70ea4ca52df1ebcd2534b9b85c8f7ebfd0f81502c57f7efb7cc63e5519a61d49"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_ALLOWEDIPS={0xd8, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}]}, {0x7c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1, @remote, 0x2}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @broadcast}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @remote}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @rand_addr=0x64010102}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6d7}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}]}, {0x30, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @loopback}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x510, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4252b240, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x7e}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}]}, {0x464, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_ALLOWEDIPS={0x3e4, 0x9, 0x0, 0x1, [{0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x16}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x81}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @private=0xa010101}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9b8f}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "5f237096a51e23addfb724f3a8a59e8bd72a88329c02a58007833b8646c58200"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x13c4}, 0x1, 0x0, 0x0, 0x20000084}, 0x1000) (async) 13:04:24 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) [ 1837.307485][T21144] binder: Bad value for 'stats' [ 1837.316326][T21143] FAULT_INJECTION: forcing a failure. [ 1837.316326][T21143] name failslab, interval 1, probability 0, space 0, times 0 13:04:24 executing program 1: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000040)=0x1, 0x4) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x1a88c55, 0x0) [ 1837.379513][T21143] CPU: 0 PID: 21143 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1837.389492][T21143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1837.399589][T21143] Call Trace: [ 1837.402900][T21143] [ 1837.405862][T21143] dump_stack_lvl+0xd1/0x138 [ 1837.410522][T21143] should_fail_ex.cold+0x5/0xa [ 1837.415359][T21143] ? alloc_vfsmnt+0x23/0x6b0 [ 1837.420000][T21143] should_failslab+0x9/0x20 [ 1837.424561][T21143] kmem_cache_alloc+0x5a/0x430 [ 1837.429385][T21143] alloc_vfsmnt+0x23/0x6b0 [ 1837.433886][T21143] clone_mnt+0x6c/0x1040 [ 1837.438192][T21143] copy_tree+0x3b1/0xae0 [ 1837.442491][T21143] copy_mnt_ns+0x1af/0xb30 [ 1837.446952][T21143] ? trace_kmem_cache_alloc+0x35/0x100 [ 1837.452444][T21143] ? kmem_cache_alloc+0x234/0x430 [ 1837.457491][T21143] create_new_namespaces+0xd6/0xb20 [ 1837.462727][T21143] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1837.468405][T21143] ksys_unshare+0x449/0x920 [ 1837.472938][T21143] ? unshare_fd+0x1c0/0x1c0 [ 1837.477474][T21143] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1837.483416][T21143] __x64_sys_unshare+0x31/0x40 [ 1837.488222][T21143] do_syscall_64+0x39/0xb0 [ 1837.492665][T21143] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1837.498593][T21143] RIP: 0033:0x7f51e048c0d9 [ 1837.503021][T21143] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1837.522650][T21143] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1837.531092][T21143] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1837.539082][T21143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1837.547156][T21143] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1837.555140][T21143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1837.563125][T21143] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1837.571300][T21143] 13:04:24 executing program 4: unshare(0x20000) (fail_nth: 94) 13:04:24 executing program 1: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000040)=0x1, 0x4) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x1a88c55, 0x0) 13:04:24 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x80202, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) ioctl$I2C_TENBIT(r0, 0x704, 0x1) (async) ioctl$I2C_RDWR(r0, 0x707, &(0x7f00000001c0)={&(0x7f0000000180)=[{0x5d, 0x0, 0xc3, &(0x7f0000000080)="4e68cace87aaf3b001c60e3945789b7ad74fc1efff4df10801c07e5ee81366980a7dcd491ae9121ef553532d625a8e2a96e97570567f6518a4345c176f95d480026d50ebd4539f99d706969a51e2832597085ab22151f5533f17052326b6773da9ded4910810853c05bc1b21b97d9761422967ed27d4b5e54b8d81c88c081846ac28eeb8be2cfde1262de2570b12bda836f2ce2be78231c1bcea71aced36fc4098db2cb3002662ec3038a3b543c1bcdbf5255b0c2edb738348a0b19d594a80c0f636fb"}, {0x4d, 0x2200}], 0x2}) 13:04:24 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x42000, 0x0) 13:04:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0x3, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:24 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r0]) [ 1837.603849][T21155] binder: Bad value for 'stats' 13:04:24 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000000)={0x0, 0xea60}, 0x10) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) 13:04:24 executing program 1: setsockopt$SO_J1939_PROMISC(0xffffffffffffffff, 0x6b, 0x2, &(0x7f0000000040)=0x1, 0x4) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x1a88c55, 0x0) [ 1837.676105][T21169] binder: Unknown parameter '' [ 1837.687965][T21167] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 13:04:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0x13, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:24 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) 13:04:24 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r0]) [ 1837.729613][T21174] FAULT_INJECTION: forcing a failure. [ 1837.729613][T21174] name failslab, interval 1, probability 0, space 0, times 0 13:04:24 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000000)={0x0, 0xea60}, 0x10) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) [ 1837.775909][T21174] CPU: 0 PID: 21174 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1837.776474][T21181] binder: Unknown parameter '' [ 1837.785842][T21174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1837.785861][T21174] Call Trace: [ 1837.785871][T21174] [ 1837.785882][T21174] dump_stack_lvl+0xd1/0x138 [ 1837.811858][T21174] should_fail_ex.cold+0x5/0xa [ 1837.816687][T21174] ? alloc_vfsmnt+0x23/0x6b0 [ 1837.821090][T21184] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1837.821304][T21174] should_failslab+0x9/0x20 [ 1837.835115][T21174] kmem_cache_alloc+0x5a/0x430 [ 1837.839924][T21174] alloc_vfsmnt+0x23/0x6b0 [ 1837.844368][T21174] clone_mnt+0x6c/0x1040 [ 1837.848646][T21174] copy_tree+0x3b1/0xae0 [ 1837.852925][T21174] copy_mnt_ns+0x1af/0xb30 [ 1837.857372][T21174] ? trace_kmem_cache_alloc+0x35/0x100 [ 1837.862869][T21174] ? kmem_cache_alloc+0x234/0x430 [ 1837.867916][T21174] create_new_namespaces+0xd6/0xb20 [ 1837.873172][T21174] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1837.878831][T21174] ksys_unshare+0x449/0x920 [ 1837.883359][T21174] ? unshare_fd+0x1c0/0x1c0 [ 1837.887897][T21174] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1837.893828][T21174] __x64_sys_unshare+0x31/0x40 [ 1837.898620][T21174] do_syscall_64+0x39/0xb0 [ 1837.903065][T21174] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1837.908989][T21174] RIP: 0033:0x7f51e048c0d9 [ 1837.913421][T21174] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1837.933051][T21174] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1837.941492][T21174] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1837.949485][T21174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1837.957468][T21174] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1837.965450][T21174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1837.973438][T21174] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1837.981441][T21174] 13:04:24 executing program 4: unshare(0x20000) (fail_nth: 95) 13:04:24 executing program 1: setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x200000, 0x0) 13:04:24 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0x1d, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:24 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r0]) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYRES8=r0, @ANYRES16=r0]) (async) 13:04:24 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) 13:04:24 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000000)={0x0, 0xea60}, 0x10) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) [ 1838.093263][T21195] FAULT_INJECTION: forcing a failure. [ 1838.093263][T21195] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.117365][T21194] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1838.118241][T21198] binder: Unknown parameter '' [ 1838.130752][T21195] CPU: 1 PID: 21195 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1838.142470][T21195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1838.153518][T21195] Call Trace: [ 1838.156840][T21195] [ 1838.159804][T21195] dump_stack_lvl+0xd1/0x138 [ 1838.164446][T21195] should_fail_ex.cold+0x5/0xa [ 1838.169353][T21195] ? alloc_vfsmnt+0x23/0x6b0 [ 1838.174008][T21195] should_failslab+0x9/0x20 [ 1838.178574][T21195] kmem_cache_alloc+0x5a/0x430 [ 1838.183402][T21195] alloc_vfsmnt+0x23/0x6b0 [ 1838.187886][T21195] clone_mnt+0x6c/0x1040 13:04:24 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c3f7ef65b03b2c41de283c82f5373746174733d676c6f6261ff2c73746174733d676c6f62cef31673f39b74616c2c73746174733dbac54c7a2cc4094be7df2ed45740123280694217f26af767181a912328a2af98347132be95df66a5d73fb86710827ba95589b1573b92e33da62dc30677e3787cc9347736642c58d72bb83fbb20fc4f14d4aa037ec2811eed43105cb7b94375880d36a497b3605ed443c8e1fdba044ac8e3eb75865f5fc03af30f2088ec15a6da57fd94fd9210bbe92b71ea19eaa2"]) mount$binderfs(&(0x7f0000000000), &(0x7f0000000140)='./binderfs2\x00', &(0x7f0000000180), 0x3ab9b3648ce01551, &(0x7f00000002c0)={[{@max={'max', 0x3d, 0xab}}, {@max={'max', 0x3d, 0x8}}, {@stats}, {@max={'max', 0x3d, 0x100000001}}], [{@fsname}, {@pcr={'pcr', 0x3d, 0x34}}, {@euid_gt}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@dont_appraise}, {@uid_lt}]}) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f00000001c0)={@null, @default}) [ 1838.192213][T21195] copy_tree+0x3b1/0xae0 [ 1838.196526][T21195] copy_mnt_ns+0x1af/0xb30 [ 1838.201003][T21195] ? trace_kmem_cache_alloc+0x35/0x100 [ 1838.206534][T21195] ? kmem_cache_alloc+0x234/0x430 [ 1838.211616][T21195] create_new_namespaces+0xd6/0xb20 [ 1838.216882][T21195] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1838.222586][T21195] ksys_unshare+0x449/0x920 [ 1838.227144][T21195] ? unshare_fd+0x1c0/0x1c0 [ 1838.231699][T21195] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1838.237661][T21195] __x64_sys_unshare+0x31/0x40 [ 1838.242475][T21195] do_syscall_64+0x39/0xb0 [ 1838.246948][T21195] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1838.252907][T21195] RIP: 0033:0x7f51e048c0d9 [ 1838.257356][T21195] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1838.277006][T21195] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1838.285448][T21195] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 13:04:24 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) 13:04:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0x28, 0x6, 0x100000001}]}, 0x20}}, 0x0) 13:04:25 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) socketpair(0x28, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000040)={0x100}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000100)={0x6}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x3) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) accept$ax25(r3, &(0x7f0000000140)={{0x3, @bcast}, [@remote, @remote, @remote, @bcast, @remote, @remote, @netrom, @null]}, &(0x7f00000001c0)=0x48) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000080)={0x22, 0x6, 0x7, 0x80}, 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000200)=0x81) 13:04:25 executing program 1: setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x200000, 0x0) [ 1838.293436][T21195] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1838.301439][T21195] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.309446][T21195] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1838.317435][T21195] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1838.325442][T21195] 13:04:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x10c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x25}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f142cc7cd33874c2e4d2febff984e735"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "abae773b998cb13acf011ea318eee875dd538357964d3edcfdd64d50e7620500"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9798b6806a1d151f91e022a8a41b0691"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "30b2dac8b53a7cf06fbfd6bc1ebb2725"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1e}, @NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x10002}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x85}, 0x40000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x400c0) [ 1838.387170][T21208] binder: Unknown parameter '?~ö[²ÄâƒÈ/Sstats' [ 1838.411376][T21213] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.5'. 13:04:25 executing program 4: unshare(0x20000) (fail_nth: 96) 13:04:25 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) socketpair(0x28, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000040)={0x100}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000100)={0x6}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x3) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) accept$ax25(r3, &(0x7f0000000140)={{0x3, @bcast}, [@remote, @remote, @remote, @bcast, @remote, @remote, @netrom, @null]}, &(0x7f00000001c0)=0x48) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000080)={0x22, 0x6, 0x7, 0x80}, 0x6) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000200)=0x81) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) socketpair(0x28, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000040)={0x100}) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$GIO_FONTX(r2, 0x4b6b, 0x0) (async) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000100)={0x6}) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x3) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) accept$ax25(r3, &(0x7f0000000140)={{0x3, @bcast}, [@remote, @remote, @remote, @bcast, @remote, @remote, @netrom, @null]}, &(0x7f00000001c0)=0x48) (async) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000080)={0x22, 0x6, 0x7, 0x80}, 0x6) (async) syz_open_dev$tty1(0xc, 0x4, 0x4) (async) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000200)=0x81) (async) 13:04:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x1d, 0x100000001}]}, 0x20}}, 0x0) 13:04:25 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c3f7ef65b03b2c41de283c82f5373746174733d676c6f6261ff2c73746174733d676c6f62cef31673f39b74616c2c73746174733dbac54c7a2cc4094be7df2ed45740123280694217f26af767181a912328a2af98347132be95df66a5d73fb86710827ba95589b1573b92e33da62dc30677e3787cc9347736642c58d72bb83fbb20fc4f14d4aa037ec2811eed43105cb7b94375880d36a497b3605ed443c8e1fdba044ac8e3eb75865f5fc03af30f2088ec15a6da57fd94fd9210bbe92b71ea19eaa2"]) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000140)='./binderfs2\x00', &(0x7f0000000180), 0x3ab9b3648ce01551, &(0x7f00000002c0)={[{@max={'max', 0x3d, 0xab}}, {@max={'max', 0x3d, 0x8}}, {@stats}, {@max={'max', 0x3d, 0x100000001}}], [{@fsname}, {@pcr={'pcr', 0x3d, 0x34}}, {@euid_gt}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@dont_appraise}, {@uid_lt}]}) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f00000001c0)={@null, @default}) 13:04:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x10c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x25}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f142cc7cd33874c2e4d2febff984e735"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "abae773b998cb13acf011ea318eee875dd538357964d3edcfdd64d50e7620500"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9798b6806a1d151f91e022a8a41b0691"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "30b2dac8b53a7cf06fbfd6bc1ebb2725"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1e}, @NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x10002}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x85}, 0x40000) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x400c0) 13:04:25 executing program 1: setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x200000, 0x0) setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x200000, 0x0) (async) [ 1838.571352][T21226] binder: Unknown parameter '?~ö[²ÄâƒÈ/Sstats' [ 1838.586534][T21225] netlink: 'syz-executor.5': attribute type 29 has an invalid length. 13:04:25 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x10c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0x44, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x25}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "f142cc7cd33874c2e4d2febff984e735"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "abae773b998cb13acf011ea318eee875dd538357964d3edcfdd64d50e7620500"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x7c, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "9798b6806a1d151f91e022a8a41b0691"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "30b2dac8b53a7cf06fbfd6bc1ebb2725"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1e}, @NL802154_KEY_ATTR_ID={0x48, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x10002}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x85}, 0x40000) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x101000, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x44, 0x0, 0x800, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x400c0) 13:04:25 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c3f7ef65b03b2c41de283c82f5373746174733d676c6f6261ff2c73746174733d676c6f62cef31673f39b74616c2c73746174733dbac54c7a2cc4094be7df2ed45740123280694217f26af767181a912328a2af98347132be95df66a5d73fb86710827ba95589b1573b92e33da62dc30677e3787cc9347736642c58d72bb83fbb20fc4f14d4aa037ec2811eed43105cb7b94375880d36a497b3605ed443c8e1fdba044ac8e3eb75865f5fc03af30f2088ec15a6da57fd94fd9210bbe92b71ea19eaa2"]) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000140)='./binderfs2\x00', &(0x7f0000000180), 0x3ab9b3648ce01551, &(0x7f00000002c0)={[{@max={'max', 0x3d, 0xab}}, {@max={'max', 0x3d, 0x8}}, {@stats}, {@max={'max', 0x3d, 0x100000001}}], [{@fsname}, {@pcr={'pcr', 0x3d, 0x34}}, {@euid_gt}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@dont_appraise}, {@uid_lt}]}) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f00000001c0)={@null, @default}) 13:04:25 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) socketpair(0x28, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000040)={0x100}) (async, rerun: 64) r2 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 64) ioctl$GIO_FONTX(r2, 0x4b6b, 0x0) (async) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000100)={0x6}) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f00000000c0)=0x3) (async) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r3, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) accept$ax25(r3, &(0x7f0000000140)={{0x3, @bcast}, [@remote, @remote, @remote, @bcast, @remote, @remote, @netrom, @null]}, &(0x7f00000001c0)=0x48) (async, rerun: 64) bind$isdn_base(0xffffffffffffffff, &(0x7f0000000080)={0x22, 0x6, 0x7, 0x80}, 0x6) (async, rerun: 64) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSSOFTCAR(r4, 0x541a, &(0x7f0000000200)=0x81) [ 1838.618071][T21239] FAULT_INJECTION: forcing a failure. [ 1838.618071][T21239] name failslab, interval 1, probability 0, space 0, times 0 13:04:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x25, 0x100000001}]}, 0x20}}, 0x0) 13:04:25 executing program 1: bind$isdn_base(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x1f, 0x5, 0x1, 0x4}, 0x6) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', 0x0, 0xa8014, 0x0) [ 1838.710705][T21253] binder: Unknown parameter '?~ö[²ÄâƒÈ/Sstats' [ 1838.731329][T21239] CPU: 0 PID: 21239 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1838.741293][T21239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1838.751484][T21239] Call Trace: [ 1838.754793][T21239] 13:04:25 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@rand_addr=0x64010101, @remote}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000003}, 0x8c0) [ 1838.757763][T21239] dump_stack_lvl+0xd1/0x138 [ 1838.762408][T21239] should_fail_ex.cold+0x5/0xa [ 1838.767494][T21239] ? alloc_vfsmnt+0x23/0x6b0 [ 1838.772227][T21239] should_failslab+0x9/0x20 [ 1838.776794][T21239] kmem_cache_alloc+0x5a/0x430 [ 1838.781628][T21239] alloc_vfsmnt+0x23/0x6b0 [ 1838.786103][T21239] clone_mnt+0x6c/0x1040 [ 1838.790397][T21239] copy_tree+0x3b1/0xae0 [ 1838.794699][T21239] copy_mnt_ns+0x1af/0xb30 [ 1838.799201][T21239] ? trace_kmem_cache_alloc+0x35/0x100 [ 1838.804719][T21239] ? kmem_cache_alloc+0x234/0x430 [ 1838.809805][T21239] create_new_namespaces+0xd6/0xb20 [ 1838.815072][T21239] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1838.820771][T21239] ksys_unshare+0x449/0x920 [ 1838.825324][T21239] ? unshare_fd+0x1c0/0x1c0 [ 1838.829888][T21239] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1838.835843][T21239] __x64_sys_unshare+0x31/0x40 [ 1838.840661][T21239] do_syscall_64+0x39/0xb0 [ 1838.845116][T21239] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1838.851042][T21239] RIP: 0033:0x7f51e048c0d9 [ 1838.855470][T21239] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1838.875096][T21239] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1838.883539][T21239] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1838.891530][T21239] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1838.899514][T21239] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.907499][T21239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1838.915482][T21239] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1838.923482][T21239] 13:04:25 executing program 4: unshare(0x20000) (fail_nth: 97) 13:04:25 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) r0 = getuid() ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r0}) 13:04:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x20}}, 0x0) 13:04:25 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@rand_addr=0x64010101, @remote}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000003}, 0x8c0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@rand_addr=0x64010101, @remote}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000003}, 0x8c0) (async) 13:04:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000c00018008000700", @ANYRES32=0x0, @ANYBLOB="2a28e0a8ca64ee43de482f531b4a72027093284ae1506bfd565dadfc1b045f2446a12ae2a994242d39d4dc270aa702c69fdfd1867cede92b9d74ef8c64f0de6d1649817d77f84046539e960e3ca27db856eae5448514605c5c77afec8ba5e0d59751b759f95ac7bed00974fb2c34a3ed55143f7f8fde0e6af1ddd216e8a03963416c8fe01633ec14c4a50f9192c6f515bc6f58bfafaf5874959e3811461b7bbd8d3d842880816920d0e43af579140887020e612a4c72dd3eca205a5d8ed3335706e57cb4222226f3302a3d25af3f"], 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}}, 0x80) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x120, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0xc8, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "70ea28dca11327bfd238cb5fe2f3e05ca58425d3922ed7e83a9df0fb78d1fdd6"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0f5068f3ef52c9ca3963d1c1495654aa"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "aea7de2b69abb8665a49b4fa5582ec73"}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x3f1d0011c5d2e235}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6a0b70806893ceb1711c9466937138ed5bac84576fc48c6c199a3b9dfd94f894"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c48a5c1aa1324f9e4df31abe8774a395"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000780), r5) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r6, 0x301, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xc28321b496b73fa2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x20040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), r7) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000027bd7000fddbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000000000000c000600020000000200000008000b000700000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB="08000b0093ea00008fa740b7", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x85}, 0x4040011) bind$isdn_base(r2, &(0x7f0000000140)={0x22, 0x3, 0x7, 0xfe, 0x3f}, 0x6) 13:04:25 executing program 1: bind$isdn_base(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x1f, 0x5, 0x1, 0x4}, 0x6) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', 0x0, 0xa8014, 0x0) [ 1839.036160][T21270] binder: Bad value for 'stats' 13:04:25 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) r0 = getuid() ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r0}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) getuid() (async) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r0}) (async) 13:04:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000008}]}, 0x20}}, 0x0) 13:04:25 executing program 1: bind$isdn_base(0xffffffffffffffff, &(0x7f0000000000)={0x22, 0x1f, 0x5, 0x1, 0x4}, 0x6) (async, rerun: 32) mount$binderfs(0x0, &(0x7f0000000080)='./binderfs2\x00', 0x0, 0xa8014, 0x0) (rerun: 32) [ 1839.059944][T21272] FAULT_INJECTION: forcing a failure. [ 1839.059944][T21272] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.099703][T21272] CPU: 0 PID: 21272 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1839.109644][T21272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1839.109667][T21272] Call Trace: [ 1839.123061][T21272] [ 1839.126092][T21272] dump_stack_lvl+0xd1/0x138 [ 1839.130729][T21272] should_fail_ex.cold+0x5/0xa [ 1839.135558][T21272] ? alloc_vfsmnt+0x23/0x6b0 [ 1839.140213][T21272] should_failslab+0x9/0x20 [ 1839.144774][T21272] kmem_cache_alloc+0x5a/0x430 [ 1839.149590][T21272] alloc_vfsmnt+0x23/0x6b0 [ 1839.154055][T21272] clone_mnt+0x6c/0x1040 13:04:25 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000013}]}, 0x20}}, 0x0) 13:04:25 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) r0 = getuid() ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r0}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) getuid() (async) ioctl$SIOCAX25GETUID(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, r0}) (async) [ 1839.158364][T21272] copy_tree+0x3b1/0xae0 [ 1839.159486][T21285] binder: Bad value for 'stats' [ 1839.162648][T21272] copy_mnt_ns+0x1af/0xb30 [ 1839.162696][T21272] ? trace_kmem_cache_alloc+0x35/0x100 [ 1839.172025][T21285] binder: Bad value for 'stats' [ 1839.172720][T21272] ? kmem_cache_alloc+0x234/0x430 [ 1839.172763][T21272] create_new_namespaces+0xd6/0xb20 [ 1839.193343][T21272] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1839.199041][T21272] ksys_unshare+0x449/0x920 [ 1839.203596][T21272] ? unshare_fd+0x1c0/0x1c0 [ 1839.208155][T21272] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1839.214109][T21272] __x64_sys_unshare+0x31/0x40 [ 1839.218930][T21272] do_syscall_64+0x39/0xb0 [ 1839.223403][T21272] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1839.229363][T21272] RIP: 0033:0x7f51e048c0d9 [ 1839.233907][T21272] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1839.243275][T21291] binder: Bad value for 'stats' [ 1839.253532][T21272] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1839.253565][T21272] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1839.253585][T21272] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1839.253605][T21272] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1839.253624][T21272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1839.253641][T21272] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1839.253678][T21272] 13:04:25 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000c00018008000700", @ANYRES32=0x0, @ANYBLOB="2a28e0a8ca64ee43de482f531b4a72027093284ae1506bfd565dadfc1b045f2446a12ae2a994242d39d4dc270aa702c69fdfd1867cede92b9d74ef8c64f0de6d1649817d77f84046539e960e3ca27db856eae5448514605c5c77afec8ba5e0d59751b759f95ac7bed00974fb2c34a3ed55143f7f8fde0e6af1ddd216e8a03963416c8fe01633ec14c4a50f9192c6f515bc6f58bfafaf5874959e3811461b7bbd8d3d842880816920d0e43af579140887020e612a4c72dd3eca205a5d8ed3335706e57cb4222226f3302a3d25af3f"], 0x20}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}}, 0x80) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x120, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0xc8, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "70ea28dca11327bfd238cb5fe2f3e05ca58425d3922ed7e83a9df0fb78d1fdd6"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0f5068f3ef52c9ca3963d1c1495654aa"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "aea7de2b69abb8665a49b4fa5582ec73"}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x3f1d0011c5d2e235}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6a0b70806893ceb1711c9466937138ed5bac84576fc48c6c199a3b9dfd94f894"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c48a5c1aa1324f9e4df31abe8774a395"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000780), r5) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r6, 0x301, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xc28321b496b73fa2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x20040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), r7) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000027bd7000fddbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000000000000c000600020000000200000008000b000700000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB="08000b0093ea00008fa740b7", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x85}, 0x4040011) bind$isdn_base(r2, &(0x7f0000000140)={0x22, 0x3, 0x7, 0xfe, 0x3f}, 0x6) 13:04:26 executing program 4: unshare(0x20000) (fail_nth: 98) 13:04:26 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) ioctl$SIOCGETSGCNT(r0, 0x89e1, &(0x7f0000000000)={@rand_addr=0x64010101, @remote}) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x5c, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x42}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000003}, 0x8c0) 13:04:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x10000001d}]}, 0x20}}, 0x0) [ 1839.363238][T21291] binder: Bad value for 'stats' 13:04:26 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000c00018008000700", @ANYRES32=0x0, @ANYBLOB="2a28e0a8ca64ee43de482f531b4a72027093284ae1506bfd565dadfc1b045f2446a12ae2a994242d39d4dc270aa702c69fdfd1867cede92b9d74ef8c64f0de6d1649817d77f84046539e960e3ca27db856eae5448514605c5c77afec8ba5e0d59751b759f95ac7bed00974fb2c34a3ed55143f7f8fde0e6af1ddd216e8a03963416c8fe01633ec14c4a50f9192c6f515bc6f58bfafaf5874959e3811461b7bbd8d3d842880816920d0e43af579140887020e612a4c72dd3eca205a5d8ed3335706e57cb4222226f3302a3d25af3f"], 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}}, 0x80) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x120, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0xc8, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "70ea28dca11327bfd238cb5fe2f3e05ca58425d3922ed7e83a9df0fb78d1fdd6"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0f5068f3ef52c9ca3963d1c1495654aa"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "aea7de2b69abb8665a49b4fa5582ec73"}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x3f1d0011c5d2e235}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6a0b70806893ceb1711c9466937138ed5bac84576fc48c6c199a3b9dfd94f894"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c48a5c1aa1324f9e4df31abe8774a395"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000780), r5) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r6, 0x301, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xc28321b496b73fa2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x20040000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), r7) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000027bd7000fddbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000000000000c000600020000000200000008000b000700000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB="08000b0093ea00008fa740b7", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x85}, 0x4040011) bind$isdn_base(r2, &(0x7f0000000140)={0x22, 0x3, 0x7, 0xfe, 0x3f}, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000040000000c00018008000700", @ANYRES32=0x0, @ANYBLOB="2a28e0a8ca64ee43de482f531b4a72027093284ae1506bfd565dadfc1b045f2446a12ae2a994242d39d4dc270aa702c69fdfd1867cede92b9d74ef8c64f0de6d1649817d77f84046539e960e3ca27db856eae5448514605c5c77afec8ba5e0d59751b759f95ac7bed00974fb2c34a3ed55143f7f8fde0e6af1ddd216e8a03963416c8fe01633ec14c4a50f9192c6f515bc6f58bfafaf5874959e3811461b7bbd8d3d842880816920d0e43af579140887020e612a4c72dd3eca205a5d8ed3335706e57cb4222226f3302a3d25af3f"], 0x20}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x1c}}, 0x80) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) socket$isdn_base(0x22, 0x3, 0x0) (async) ioctl$KDFONTOP_SET_DEF(r2, 0x4b72, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000006c0)={&(0x7f0000000580)={0x120, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_KEY={0xc8, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1f}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "70ea28dca11327bfd238cb5fe2f3e05ca58425d3922ed7e83a9df0fb78d1fdd6"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0f5068f3ef52c9ca3963d1c1495654aa"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "aea7de2b69abb8665a49b4fa5582ec73"}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x3f1d0011c5d2e235}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "6a0b70806893ceb1711c9466937138ed5bac84576fc48c6c199a3b9dfd94f894"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "c48a5c1aa1324f9e4df31abe8774a395"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x120}, 0x1, 0x0, 0x0, 0x1}, 0x84) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000780), r5) (async) sendmsg$NLBL_CALIPSO_C_LISTALL(r5, &(0x7f0000000880)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x3c, r6, 0x301, 0x70bd27, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0xc28321b496b73fa2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48004}, 0x20040000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000740), r7) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r8, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r9}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) (async) sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000027bd7000fddbdf250c00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00060002000000000000000c000600020000000200000008000b000700000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB="08000b0093ea00008fa740b7", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB], 0x64}, 0x1, 0x0, 0x0, 0x85}, 0x4040011) (async) bind$isdn_base(r2, &(0x7f0000000140)={0x22, 0x3, 0x7, 0xfe, 0x3f}, 0x6) (async) 13:04:26 executing program 1: sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040000}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x68, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="20002cbd7000fcdbdf25180000000c0006000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc800}, 0x200400c4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x0, {0x1}}, 0x18) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, r2, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x40880) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r8, 0x4b6b, 0x0) syz_open_pts(r8, 0x40) 13:04:26 executing program 2: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x1, 0x5, 0x2, 0x4, 0x4, "325cb8ebfc83980c"}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=globvl,stats=global,stats}global,stats=']) 13:04:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1ffffff1f}]}, 0x20}}, 0x0) 13:04:26 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x280a40, 0x0) 13:04:26 executing program 2: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x1, 0x5, 0x2, 0x4, 0x4, "325cb8ebfc83980c"}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=globvl,stats=global,stats}global,stats=']) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x1, 0x5, 0x2, 0x4, 0x4, "325cb8ebfc83980c"}) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=globvl,stats=global,stats}global,stats=']) (async) [ 1839.466759][T21311] binder: Bad value for 'stats' [ 1839.474841][T21304] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 13:04:26 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x9, 0x100) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0xff, 0x2, &(0x7f0000000080)={0x21, "2c563b8883b8885e4ca24b00f9a973699c15d6c7882061932487a5ab343848fe89"}}) ioctl$I2C_TENBIT(r0, 0x704, 0x1) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000000)=0x800) 13:04:26 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x280a40, 0x0) 13:04:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x9}}, 0x0) 13:04:26 executing program 4: unshare(0x20000) (fail_nth: 99) [ 1839.582918][T21324] binder: Bad value for 'stats' 13:04:26 executing program 1: sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040000}, 0x40) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x68, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="20002cbd7000fcdbdf25180000000c0006000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc800}, 0x200400c4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x0, {0x1}}, 0x18) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, r2, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x40880) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r8, 0x4b6b, 0x0) syz_open_pts(r8, 0x40) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040000}, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x68, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="20002cbd7000fcdbdf25180000000c0006000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc800}, 0x200400c4) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) (async) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x0, {0x1}}, 0x18) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, r2, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x40880) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$GIO_FONTX(r8, 0x4b6b, 0x0) (async) syz_open_pts(r8, 0x40) (async) [ 1839.615382][T21327] binder: Bad value for 'stats' 13:04:26 executing program 2: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x1, 0x5, 0x2, 0x4, 0x4, "325cb8ebfc83980c"}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=globvl,stats=global,stats}global,stats=']) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000040)={0x1, 0x5, 0x2, 0x4, 0x4, "325cb8ebfc83980c"}) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=globvl,stats=global,stats}global,stats=']) (async) 13:04:26 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x9, 0x100) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0xff, 0x2, &(0x7f0000000080)={0x21, "2c563b8883b8885e4ca24b00f9a973699c15d6c7882061932487a5ab343848fe89"}}) ioctl$I2C_TENBIT(r0, 0x704, 0x1) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000000)=0x800) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000040), 0x9, 0x100) (async) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0xff, 0x2, &(0x7f0000000080)={0x21, "2c563b8883b8885e4ca24b00f9a973699c15d6c7882061932487a5ab343848fe89"}}) (async) ioctl$I2C_TENBIT(r0, 0x704, 0x1) (async) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000000)=0x800) (async) 13:04:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xf}}, 0x0) 13:04:26 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x280a40, 0x0) [ 1839.681665][T21334] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1839.731596][T21335] FAULT_INJECTION: forcing a failure. [ 1839.731596][T21335] name failslab, interval 1, probability 0, space 0, times 0 [ 1839.745282][T21340] binder: Bad value for 'stats' 13:04:26 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)="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", 0x122}, 0x1, 0x0, 0x0, 0x40040}, 0xc4) 13:04:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x14}}, 0x0) [ 1839.780485][T21350] binder: Bad value for 'stats' [ 1839.794008][T21335] CPU: 1 PID: 21335 Comm: syz-executor.4 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1839.803965][T21335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1839.814058][T21335] Call Trace: [ 1839.817370][T21335] [ 1839.820338][T21335] dump_stack_lvl+0xd1/0x138 [ 1839.824979][T21335] should_fail_ex.cold+0x5/0xa 13:04:26 executing program 1: sendmsg$NL802154_CMD_NEW_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x22, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x38}, 0x1, 0x0, 0x0, 0x10040000}, 0x40) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x68, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r5, @ANYBLOB="20002cbd7000fcdbdf25180000000c0006000000000000000000"], 0x20}, 0x1, 0x0, 0x0, 0xc800}, 0x200400c4) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) (async) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000040)={0x1d, r7, 0x0, {0x1}}, 0x18) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xb8, r2, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20004000}, 0x40880) r8 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r8, 0x4b6b, 0x0) (async) syz_open_pts(r8, 0x40) 13:04:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xc0}}, 0x0) [ 1839.829816][T21335] ? alloc_vfsmnt+0x23/0x6b0 [ 1839.834458][T21335] should_failslab+0x9/0x20 [ 1839.839019][T21335] kmem_cache_alloc+0x5a/0x430 [ 1839.843837][T21335] alloc_vfsmnt+0x23/0x6b0 [ 1839.848303][T21335] clone_mnt+0x6c/0x1040 [ 1839.852608][T21335] copy_tree+0x3b1/0xae0 [ 1839.856921][T21335] copy_mnt_ns+0x1af/0xb30 [ 1839.861394][T21335] ? trace_kmem_cache_alloc+0x35/0x100 [ 1839.866915][T21335] ? kmem_cache_alloc+0x234/0x430 [ 1839.871995][T21335] create_new_namespaces+0xd6/0xb20 13:04:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xec0}}, 0x0) [ 1839.877258][T21335] unshare_nsproxy_namespaces+0xc5/0x1f0 [ 1839.882952][T21335] ksys_unshare+0x449/0x920 [ 1839.887509][T21335] ? unshare_fd+0x1c0/0x1c0 [ 1839.892078][T21335] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1839.898038][T21335] __x64_sys_unshare+0x31/0x40 [ 1839.902851][T21335] do_syscall_64+0x39/0xb0 [ 1839.907313][T21335] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1839.913265][T21335] RIP: 0033:0x7f51e048c0d9 13:04:26 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)="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", 0x122}, 0x1, 0x0, 0x0, 0x40040}, 0xc4) [ 1839.917720][T21335] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1839.937470][T21335] RSP: 002b:00007f51e11b1168 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1839.946023][T21335] RAX: ffffffffffffffda RBX: 00007f51e05abf80 RCX: 00007f51e048c0d9 [ 1839.954045][T21335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000020000 [ 1839.962060][T21335] RBP: 00007f51e11b11d0 R08: 0000000000000000 R09: 0000000000000000 [ 1839.970072][T21335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1839.978086][T21335] R13: 00007fffd5957e7f R14: 00007f51e11b1300 R15: 0000000000022000 [ 1839.986120][T21335] 13:04:26 executing program 4: unshare(0x20000) (fail_nth: 100) 13:04:26 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)="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", 0x122}, 0x1, 0x0, 0x0, 0x40040}, 0xc4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) sendmsg$can_j1939(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)="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", 0x122}, 0x1, 0x0, 0x0, 0x40040}, 0xc4) (async) 13:04:26 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x19c1820, 0x0) 13:04:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x33fe0}}, 0x0) 13:04:26 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x9, 0x100) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0xff, 0x2, &(0x7f0000000080)={0x21, "2c563b8883b8885e4ca24b00f9a973699c15d6c7882061932487a5ab343848fe89"}}) ioctl$I2C_TENBIT(r0, 0x704, 0x1) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000000)=0x800) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000040), 0x9, 0x100) (async) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000000c0)={0x0, 0xff, 0x2, &(0x7f0000000080)={0x21, "2c563b8883b8885e4ca24b00f9a973699c15d6c7882061932487a5ab343848fe89"}}) (async) ioctl$I2C_TENBIT(r0, 0x704, 0x1) (async) ioctl$I2C_FUNCS(r0, 0x705, &(0x7f0000000000)=0x800) (async) 13:04:26 executing program 2: r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@null, @netrom, @null, @netrom, @null, @null, @rose]}, &(0x7f0000000340)=0x48, 0x0) getsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) r1 = accept4$ax25(r0, &(0x7f0000000180)={{0x3, @rose}, [@netrom, @rose, @remote, @netrom, @null, @remote, @default]}, &(0x7f0000000200)=0x48, 0x0) bind$ax25(r1, &(0x7f00000002c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 13:04:26 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x19c1820, 0x0) 13:04:26 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x32a0859, 0x0) [ 1840.088872][T21378] binder: Bad value for 'stats' 13:04:26 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) sigaltstack(&(0x7f00000000c0)={&(0x7f0000000040)=""/92, 0x80000003, 0x5c}, &(0x7f0000000140)={&(0x7f0000000100)=""/43, 0x0, 0x2b}) 13:04:26 executing program 2: r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@null, @netrom, @null, @netrom, @null, @null, @rose]}, &(0x7f0000000340)=0x48, 0x0) getsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) r1 = accept4$ax25(r0, &(0x7f0000000180)={{0x3, @rose}, [@netrom, @rose, @remote, @netrom, @null, @remote, @default]}, &(0x7f0000000200)=0x48, 0x0) bind$ax25(r1, &(0x7f00000002c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@null, @netrom, @null, @netrom, @null, @null, @rose]}, &(0x7f0000000340)=0x48, 0x0) (async) getsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) accept4$ax25(r0, &(0x7f0000000180)={{0x3, @rose}, [@netrom, @rose, @remote, @netrom, @null, @remote, @default]}, &(0x7f0000000200)=0x48, 0x0) (async) bind$ax25(r1, &(0x7f00000002c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async) 13:04:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x7ffff000}}, 0x0) 13:04:26 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x19c1820, 0x0) 13:04:26 executing program 4: unshare(0x20000) 13:04:26 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x32a0859, 0x0) 13:04:26 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) (async) sigaltstack(&(0x7f00000000c0)={&(0x7f0000000040)=""/92, 0x80000003, 0x5c}, &(0x7f0000000140)={&(0x7f0000000100)=""/43, 0x0, 0x2b}) [ 1840.219221][T21397] binder: Bad value for 'stats' 13:04:26 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xfffffdef}}, 0x0) 13:04:26 executing program 2: r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@null, @netrom, @null, @netrom, @null, @null, @rose]}, &(0x7f0000000340)=0x48, 0x0) getsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) r1 = accept4$ax25(r0, &(0x7f0000000180)={{0x3, @rose}, [@netrom, @rose, @remote, @netrom, @null, @remote, @default]}, &(0x7f0000000200)=0x48, 0x0) bind$ax25(r1, &(0x7f00000002c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) accept4$ax25(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @default}, [@null, @netrom, @null, @netrom, @null, @null, @rose]}, &(0x7f0000000340)=0x48, 0x0) (async) getsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000100), &(0x7f0000000140)=0x4) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) accept4$ax25(r0, &(0x7f0000000180)={{0x3, @rose}, [@netrom, @rose, @remote, @netrom, @null, @remote, @default]}, &(0x7f0000000200)=0x48, 0x0) (async) bind$ax25(r1, &(0x7f00000002c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async) 13:04:26 executing program 1: setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0x1, 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) 13:04:26 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x32a0859, 0x0) 13:04:26 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0) (async, rerun: 32) sigaltstack(&(0x7f00000000c0)={&(0x7f0000000040)=""/92, 0x80000003, 0x5c}, &(0x7f0000000140)={&(0x7f0000000100)=""/43, 0x0, 0x2b}) (rerun: 32) 13:04:27 executing program 4: unshare(0x20002) 13:04:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x7ffffffff000}}, 0x0) 13:04:27 executing program 1: setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0x1, 0x4) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) [ 1840.368004][T21417] binder: Bad value for 'stats' 13:04:27 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) socketpair(0x3, 0x6, 0x48def5ff, &(0x7f0000000000)) 13:04:27 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xa0003, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0x5) [ 1840.423377][T21424] binder: Bad value for 'stats' 13:04:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x2}, 0x0) 13:04:27 executing program 4: unshare(0x20004) 13:04:27 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000180)={[{@stats}, {@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x9}}, {@max={'max', 0x3d, 0x3ff}}, {@stats}]}) 13:04:27 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) socketpair(0x3, 0x6, 0x48def5ff, &(0x7f0000000000)) 13:04:27 executing program 1: setsockopt$MRT_ASSERT(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0x1, 0x4) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) 13:04:27 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xa0003, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0x5) [ 1840.527530][T21440] binder: Bad value for 'stats' 13:04:27 executing program 4: unshare(0x2057f) 13:04:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x8}, 0x0) 13:04:27 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000180)={[{@stats}, {@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x9}}, {@max={'max', 0x3d, 0x3ff}}, {@stats}]}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000180)={[{@stats}, {@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x9}}, {@max={'max', 0x3d, 0x3ff}}, {@stats}]}) (async) 13:04:27 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) socketpair(0x3, 0x6, 0x48def5ff, &(0x7f0000000000)) 13:04:27 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) 13:04:27 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xa0003, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)=0x5) 13:04:27 executing program 4: unshare(0x2058a) [ 1840.658294][T21456] binder: Bad value for 'stats' 13:04:27 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) [ 1840.686886][T21456] binder: Bad value for 'stats' 13:04:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x13}, 0x0) 13:04:27 executing program 0: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000600)={0x14, r0, 0xc25c1bc23680d34b}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0x81, 0x4, 0x6, 0x22, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, @private2, 0x7, 0x8000, 0x101, 0x40}}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x5d8, r0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x20}, @WGDEVICE_A_PEERS={0x58c, 0x8, 0x0, 0x1, [{0x4}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cfb686303d88c80010ad8a4dfb3e196f723a79de5ab6946b765581fa5e776e19"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xe08, @loopback, 0x127400}}]}, {0x4b4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0x4a8, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @empty, 0x9}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ed429e3eeeeb195bb770e2451efe1f0892b89cbcb12c0a11815bde9f8f941a7a"}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_FWMARK={0x8}]}, 0x5d8}}, 0x8011) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) 13:04:27 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000180)={[{@stats}, {@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x9}}, {@max={'max', 0x3d, 0x3ff}}, {@stats}]}) 13:04:27 executing program 4: unshare(0x205f5) 13:04:27 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x6202, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x280041, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x102, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000780)={0x4, "0ad86b1a76f63146730f711660b81027f3695ed5fa6600", 0xffffffffffffffff}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000040)=0x2, 0x4) sendmsg$can_j1939(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x1d, 0x0, 0x80000000000001, {0x2, 0x1, 0x3}, 0x2}, 0x18, &(0x7f0000000240)={&(0x7f0000000200)="601c7300", 0x4}, 0x1, 0x0, 0x0, 0x4000800}, 0x10004840) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x3, "614936e046c2dad7bf648ea4770ec410414dce0646f8ba6b3cb59c895eb70617"}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"d0a09907d610b2c6ecbda379997be7894891991a451123f9666bb8a045e384ed", r3, 0xffffffffffffffff}) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000000c0)={0x5, "12a9011bbdbbb32984d5320a2706c1e5e7f57bc83d7f3ea9ff6e55209b86f19f", 0xffffffffffffffff}) recvfrom$ax25(r2, &(0x7f00000007c0)=""/62, 0x3e, 0x80, &(0x7f0000000800)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x48) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000880), &(0x7f00000008c0)=0x4) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000140)={"d3dc390d871501ed35a97bda859e5c5c2afede158b4072e0efc81a2e4348d5a3", r7}) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)={0x181, 0x12, &(0x7f0000000340)}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000300)={'wg0\x00'}) 13:04:27 executing program 0: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000600)={0x14, r0, 0xc25c1bc23680d34b}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0x81, 0x4, 0x6, 0x22, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, @private2, 0x7, 0x8000, 0x101, 0x40}}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x5d8, r0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x20}, @WGDEVICE_A_PEERS={0x58c, 0x8, 0x0, 0x1, [{0x4}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cfb686303d88c80010ad8a4dfb3e196f723a79de5ab6946b765581fa5e776e19"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xe08, @loopback, 0x127400}}]}, {0x4b4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0x4a8, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @empty, 0x9}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ed429e3eeeeb195bb770e2451efe1f0892b89cbcb12c0a11815bde9f8f941a7a"}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_FWMARK={0x8}]}, 0x5d8}}, 0x8011) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000600)={0x14, r0, 0xc25c1bc23680d34b}, 0x14}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0x81, 0x4, 0x6, 0x22, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, @private2, 0x7, 0x8000, 0x101, 0x40}}) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x5d8, r0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x20}, @WGDEVICE_A_PEERS={0x58c, 0x8, 0x0, 0x1, [{0x4}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cfb686303d88c80010ad8a4dfb3e196f723a79de5ab6946b765581fa5e776e19"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xe08, @loopback, 0x127400}}]}, {0x4b4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0x4a8, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @empty, 0x9}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ed429e3eeeeb195bb770e2451efe1f0892b89cbcb12c0a11815bde9f8f941a7a"}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_FWMARK={0x8}]}, 0x5d8}}, 0x8011) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) 13:04:27 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) 13:04:27 executing program 4: unshare(0x21f00) [ 1840.836293][T21478] binder: Bad value for 'stats' 13:04:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1d}, 0x0) 13:04:27 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d3fcc5a6daa3a18d42df899b70ab7cc1b5ddbc0b37b8d"]) getrusage(0x0, &(0x7f00000000c0)) 13:04:27 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x6202, 0x0) (async) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x280041, 0x0) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x102, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000780)={0x4, "0ad86b1a76f63146730f711660b81027f3695ed5fa6600", 0xffffffffffffffff}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000040)=0x2, 0x4) sendmsg$can_j1939(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x1d, 0x0, 0x80000000000001, {0x2, 0x1, 0x3}, 0x2}, 0x18, &(0x7f0000000240)={&(0x7f0000000200)="601c7300", 0x4}, 0x1, 0x0, 0x0, 0x4000800}, 0x10004840) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x3, "614936e046c2dad7bf648ea4770ec410414dce0646f8ba6b3cb59c895eb70617"}) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"d0a09907d610b2c6ecbda379997be7894891991a451123f9666bb8a045e384ed", r3, 0xffffffffffffffff}) (async) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000000c0)={0x5, "12a9011bbdbbb32984d5320a2706c1e5e7f57bc83d7f3ea9ff6e55209b86f19f", 0xffffffffffffffff}) recvfrom$ax25(r2, &(0x7f00000007c0)=""/62, 0x3e, 0x80, &(0x7f0000000800)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x48) (async) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000880), &(0x7f00000008c0)=0x4) (async) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000140)={"d3dc390d871501ed35a97bda859e5c5c2afede158b4072e0efc81a2e4348d5a3", r7}) (async) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)={0x181, 0x12, &(0x7f0000000340)}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000300)={'wg0\x00'}) 13:04:27 executing program 1: socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10) 13:04:27 executing program 4: unshare(0x23f00) [ 1840.951208][T21496] binder: Bad value for 'stats' 13:04:27 executing program 0: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000600)={0x14, r0, 0xc25c1bc23680d34b}, 0x14}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000040)={'syztnl1\x00', 0x0, 0x29, 0x81, 0x4, 0x6, 0x22, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xa}}, @private2, 0x7, 0x8000, 0x101, 0x40}}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000280)={0x5d8, r0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x20}, @WGDEVICE_A_PEERS={0x58c, 0x8, 0x0, 0x1, [{0x4}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "cfb686303d88c80010ad8a4dfb3e196f723a79de5ab6946b765581fa5e776e19"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0xe08, @loopback, 0x127400}}]}, {0x4b4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_ALLOWEDIPS={0x4a8, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5, 0x3, 0x2}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, {0x5, 0x3, 0x3}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}]}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x6, @empty, 0x9}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ed429e3eeeeb195bb770e2451efe1f0892b89cbcb12c0a11815bde9f8f941a7a"}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_FWMARK={0x8}]}, 0x5d8}}, 0x8011) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) 13:04:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0xffffff1f}, 0x0) 13:04:27 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d3fcc5a6daa3a18d42df899b70ab7cc1b5ddbc0b37b8d"]) getrusage(0x0, &(0x7f00000000c0)) 13:04:27 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x6202, 0x0) (async) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x280041, 0x0) (async) r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000002c0), 0x102, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000780)={0x4, "0ad86b1a76f63146730f711660b81027f3695ed5fa6600", 0xffffffffffffffff}) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r5, 0x6b, 0x3, &(0x7f0000000040)=0x2, 0x4) (async) sendmsg$can_j1939(r4, &(0x7f0000000280)={&(0x7f00000001c0)={0x1d, 0x0, 0x80000000000001, {0x2, 0x1, 0x3}, 0x2}, 0x18, &(0x7f0000000240)={&(0x7f0000000200)="601c7300", 0x4}, 0x1, 0x0, 0x0, 0x4000800}, 0x10004840) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000180)={0x3, "614936e046c2dad7bf648ea4770ec410414dce0646f8ba6b3cb59c895eb70617"}) (async) ioctl$SYNC_IOC_MERGE(r3, 0xc0303e03, &(0x7f0000000080)={"d0a09907d610b2c6ecbda379997be7894891991a451123f9666bb8a045e384ed", r3, 0xffffffffffffffff}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f00000000c0)={0x5, "12a9011bbdbbb32984d5320a2706c1e5e7f57bc83d7f3ea9ff6e55209b86f19f", 0xffffffffffffffff}) (async) recvfrom$ax25(r2, &(0x7f00000007c0)=""/62, 0x3e, 0x80, &(0x7f0000000800)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x6}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default]}, 0x48) (async) getsockopt$SO_J1939_ERRQUEUE(r4, 0x6b, 0x4, &(0x7f0000000880), &(0x7f00000008c0)=0x4) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000140)={"d3dc390d871501ed35a97bda859e5c5c2afede158b4072e0efc81a2e4348d5a3", r7}) (async) r8 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$GIO_FONTX(0xffffffffffffffff, 0x4b6b, &(0x7f0000000740)={0x181, 0x12, &(0x7f0000000340)}) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000000300)={'wg0\x00'}) [ 1841.033416][T21503] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 13:04:27 executing program 4: unshare(0x24000) 13:04:27 executing program 1: socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10) (async) 13:04:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x2}, 0x0) 13:04:27 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1406, 0x100, 0xee, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) [ 1841.111525][T21512] binder: Bad value for 'stats' 13:04:27 executing program 4: unshare(0x27f05) 13:04:27 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d3fcc5a6daa3a18d42df899b70ab7cc1b5ddbc0b37b8d"]) (async) getrusage(0x0, &(0x7f00000000c0)) [ 1841.182546][T21520] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 13:04:27 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x145780, 0x0) 13:04:27 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1406, 0x100, 0xee, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 13:04:27 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3}, 0x0) 13:04:27 executing program 4: unshare(0x28a05) [ 1841.238539][T21527] binder: Bad value for 'stats' 13:04:27 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x145780, 0x0) 13:04:27 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x148468, &(0x7f0000000100)={[{@max={'max', 0x3d, 0xdec1}}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x80000001}}, {@max={'max', 0x3d, 0x2}}], [{@dont_measure}, {@subj_user={'subj_user', 0x3d, './binderfs\x00'}}, {@fsname={'fsname', 0x3d, 'binder\x00'}}]}) 13:04:27 executing program 1: socket$nl_rdma(0x10, 0x3, 0x14) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x68, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @host}, 0x10) (async) 13:04:28 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1406, 0x100, 0xee, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) (async) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x1406, 0x100, 0xee, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) (async) 13:04:28 executing program 4: unshare(0x2f505) [ 1841.354585][T21548] binder: Bad value for 'stats' 13:04:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x4}, 0x0) 13:04:28 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x145780, 0x0) 13:04:28 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async, rerun: 64) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x148468, &(0x7f0000000100)={[{@max={'max', 0x3d, 0xdec1}}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x80000001}}, {@max={'max', 0x3d, 0x2}}], [{@dont_measure}, {@subj_user={'subj_user', 0x3d, './binderfs\x00'}}, {@fsname={'fsname', 0x3d, 'binder\x00'}}]}) (rerun: 64) [ 1841.389590][T21552] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 13:04:28 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x1406, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x20040010) 13:04:28 executing program 4: unshare(0x40000) [ 1841.448066][T21560] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 13:04:28 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x5c77, 0x6, 0x101, 0x400, 0x12, "f11774054bd0e65b"}) [ 1841.497520][T21569] binder: Bad value for 'stats' 13:04:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x5}, 0x0) 13:04:28 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x1406, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x20040010) 13:04:28 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0xb8415, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) 13:04:28 executing program 4: getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) unshare(0x20100) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0x3, @default}) ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x0) unshare(0x28050200) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x40401, 0x0) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000100)) 13:04:28 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x5c77, 0x6, 0x101, 0x400, 0x12, "f11774054bd0e65b"}) [ 1841.553941][T21569] binder: Bad value for 'stats' [ 1841.559253][T21569] binder: Bad value for 'stats' 13:04:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x6}, 0x0) 13:04:28 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0xb8415, 0x0) (async, rerun: 32) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) 13:04:28 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) sendmsg$RDMA_NLDEV_CMD_SYS_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x1406, 0x2, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x20040010) [ 1841.660793][T21569] binder: Bad value for 'stats' [ 1841.702826][T21569] binder: Bad value for 'stats' [ 1841.725984][T21569] binder: Bad value for 'stats' [ 1841.731297][T21569] binder: Bad value for 'stats' [ 1841.756127][T21569] binder: Bad value for 'stats' [ 1841.763001][T21569] binder: Bad value for 'stats' [ 1841.776622][T21569] binder: Bad value for 'stats' [ 1841.782797][T21569] binder: Bad value for 'stats' [ 1841.788461][T21569] binder: Bad value for 'stats' [ 1841.797543][T21569] binder: Bad value for 'stats' [ 1841.802848][T21569] binder: Bad value for 'stats' [ 1841.808463][T21569] binder: Bad value for 'stats' [ 1841.816109][T21569] binder: Bad value for 'stats' [ 1841.821517][T21569] binder: Bad value for 'stats' [ 1841.826968][T21569] binder: Bad value for 'stats' [ 1841.832162][T21569] binder: Bad value for 'stats' [ 1841.837555][T21569] binder: Bad value for 'stats' [ 1841.842728][T21569] binder: Bad value for 'stats' [ 1841.848161][T21569] binder: Bad value for 'stats' [ 1841.853927][T21569] binder: Bad value for 'stats' [ 1841.859132][T21569] binder: Bad value for 'stats' [ 1841.864397][T21569] binder: Bad value for 'stats' [ 1841.869562][T21569] binder: Bad value for 'stats' [ 1841.874970][T21569] binder: Bad value for 'stats' [ 1841.880143][T21569] binder: Bad value for 'stats' [ 1841.885528][T21569] binder: Bad value for 'stats' [ 1841.890703][T21569] binder: Bad value for 'stats' [ 1841.896029][T21569] binder: Bad value for 'stats' [ 1841.901207][T21569] binder: Bad value for 'stats' [ 1841.907419][T21569] binder: Bad value for 'stats' [ 1841.913342][T21569] binder: Bad value for 'stats' [ 1841.919241][T21569] binder: Bad value for 'stats' [ 1841.925426][T21569] binder: Bad value for 'stats' [ 1841.930615][T21569] binder: Bad value for 'stats' [ 1841.936017][T21569] binder: Bad value for 'stats' [ 1841.941272][T21569] binder: Bad value for 'stats' [ 1841.946691][T21569] binder: Bad value for 'stats' [ 1841.951945][T21569] binder: Bad value for 'stats' [ 1841.957346][T21569] binder: Bad value for 'stats' [ 1841.962517][T21569] binder: Bad value for 'stats' [ 1841.967852][T21569] binder: Bad value for 'stats' [ 1841.973014][T21569] binder: Bad value for 'stats' [ 1841.978331][T21569] binder: Bad value for 'stats' [ 1841.983485][T21569] binder: Bad value for 'stats' [ 1841.988906][T21569] binder: Bad value for 'stats' [ 1841.994341][T21569] binder: Bad value for 'stats' [ 1841.999557][T21569] binder: Bad value for 'stats' [ 1842.004957][T21569] binder: Bad value for 'stats' [ 1842.010160][T21569] binder: Bad value for 'stats' [ 1842.017053][T21569] binder: Bad value for 'stats' [ 1842.022322][T21569] binder: Bad value for 'stats' [ 1842.027794][T21569] binder: Bad value for 'stats' [ 1842.032994][T21569] binder: Bad value for 'stats' [ 1842.039086][T21569] binder: Bad value for 'stats' [ 1842.044556][T21569] binder: Bad value for 'stats' [ 1842.049749][T21569] binder: Bad value for 'stats' [ 1842.055124][T21569] binder: Bad value for 'stats' [ 1842.060299][T21569] binder: Bad value for 'stats' [ 1842.065681][T21569] binder: Bad value for 'stats' [ 1842.071054][T21569] binder: Bad value for 'stats' 13:04:28 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x148468, &(0x7f0000000100)={[{@max={'max', 0x3d, 0xdec1}}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x80000001}}, {@max={'max', 0x3d, 0x2}}], [{@dont_measure}, {@subj_user={'subj_user', 0x3d, './binderfs\x00'}}, {@fsname={'fsname', 0x3d, 'binder\x00'}}]}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x148468, &(0x7f0000000100)={[{@max={'max', 0x3d, 0xdec1}}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x80000001}}, {@max={'max', 0x3d, 0x2}}], [{@dont_measure}, {@subj_user={'subj_user', 0x3d, './binderfs\x00'}}, {@fsname={'fsname', 0x3d, 'binder\x00'}}]}) (async) 13:04:28 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async, rerun: 64) ioctl$TCSETAW(0xffffffffffffffff, 0x5407, &(0x7f0000000000)={0x5c77, 0x6, 0x101, 0x400, 0x12, "f11774054bd0e65b"}) (rerun: 64) 13:04:28 executing program 4: getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) unshare(0x20100) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0x3, @default}) ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x0) (async) unshare(0x28050200) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x40401, 0x0) (async) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000100)) 13:04:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x7}, 0x0) 13:04:28 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x190000, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x6}}, {@stats}], [{@obj_type={'obj_type', 0x3d, './binderfs\x00'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@dont_appraise}, {@uid_eq}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@appraise}]}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x80100, 0x0) 13:04:28 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0xb8415, 0x0) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0xb8415, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) (async) ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) (async) [ 1842.076516][T21569] binder: Bad value for 'stats' [ 1842.081702][T21569] binder: Bad value for 'stats' 13:04:28 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x190000, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x6}}, {@stats}], [{@obj_type={'obj_type', 0x3d, './binderfs\x00'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@dont_appraise}, {@uid_eq}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@appraise}]}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x80100, 0x0) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x190000, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x6}}, {@stats}], [{@obj_type={'obj_type', 0x3d, './binderfs\x00'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@dont_appraise}, {@uid_eq}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@appraise}]}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x80100, 0x0) (async) 13:04:28 executing program 4: getsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) unshare(0x20100) (async) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0x3, @default}) (async) ioctl$I2C_TENBIT(0xffffffffffffffff, 0x704, 0x0) (async) unshare(0x28050200) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x40401, 0x0) (async) ioctl$SIOCAX25GETINFOOLD(0xffffffffffffffff, 0x89e9, &(0x7f0000000100)) 13:04:28 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0xf7, 0x58600) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x40042) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0xe95, 0x80000) 13:04:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x9}, 0x0) 13:04:28 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x1d0, "db31e6e6fa718c607ca426f41936a4054138f02edce66f6b331ec3bdbb4cca2f"}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x8, "beb6bd4072b4b53bace33bea3d3463a61df3f0240cf3b420f5dec709bb255699"}) 13:04:28 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x190000, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x6}}, {@stats}], [{@obj_type={'obj_type', 0x3d, './binderfs\x00'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}, {@dont_appraise}, {@uid_eq}, {@euid_eq={'euid', 0x3d, 0xee00}}, {@appraise}]}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000180), 0x80100, 0x0) [ 1842.212954][T21615] binder: Bad value for 'stats' 13:04:28 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000040)=[{0xfffffffffffffffc, 0x1, {0x0, 0x1, 0x4}, {0x1, 0x0, 0x4}, 0x1, 0xfe}, {0x6, 0x2, {0x1, 0x0, 0x2}, {0x0, 0xff, 0x1}, 0x0, 0xfe}, {0x3, 0x0, {0x0, 0x0, 0x2}, {0x0, 0x1, 0x1}, 0xff, 0xff}, {0x0, 0x3, {0x0, 0x1}, {0x1, 0x1, 0x4}, 0x1}, {0x1, 0x40000000001, {0x1, 0xfe}, {0x0, 0x1, 0x3}, 0xfd, 0xfd}], 0xa0) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="73746174733d676c6f2b0b7f089c5f3ed7733d676c6f62616c2c73746074733d676c6f62616c2c73746174733d"]) [ 1842.242777][T21615] binder: Bad value for 'stats' 13:04:28 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0xf}, 0x0) 13:04:29 executing program 4: ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) unshare(0x20000) r0 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffe, 0xbe, 0x3, @buffer={0x0, 0xda, &(0x7f0000000040)=""/218}, &(0x7f0000000140)="5197cd632e824f657849296da67973edd6f647a7e8d43024a77d50cedb4debd415486ec268a907750ca613b4c896ec01817fe2d2e391b4bd7143e2ca1eff15615ee508cfb5cbb1e23a79802ad872960fda5674077cec97296e6aac95f1c2e2e7f375c64ba2b6648b933f1bb547c6d15d0b04b4b5089f588c9cc343eed5204faf5c331be0535accd494bbe341622c4407b815634e596731631ac861c826d9927239b7cbfa84032201e29776de0a80983aefeec1adde53d7123c58c998faa0", &(0x7f0000000200)=""/139, 0xca, 0x32, 0xffffffffffffffff, &(0x7f00000002c0)}) 13:04:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0xf7, 0x58600) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x40042) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0xe95, 0x80000) syz_open_dev$sg(&(0x7f0000000000), 0xf7, 0x58600) (async) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x40042) (async) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) (async) syz_open_dev$sg(&(0x7f0000000040), 0xe95, 0x80000) (async) 13:04:29 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x1d0, "db31e6e6fa718c607ca426f41936a4054138f02edce66f6b331ec3bdbb4cca2f"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x8, "beb6bd4072b4b53bace33bea3d3463a61df3f0240cf3b420f5dec709bb255699"}) 13:04:29 executing program 0: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x32a0859, 0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) ioprio_set$uid(0x0, 0xee01, 0x2000) 13:04:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0xf0}, 0x0) 13:04:29 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000040)={0x1d0, "db31e6e6fa718c607ca426f41936a4054138f02edce66f6b331ec3bdbb4cca2f"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x8, "beb6bd4072b4b53bace33bea3d3463a61df3f0240cf3b420f5dec709bb255699"}) 13:04:29 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0xf7, 0x58600) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x40042) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) syz_open_dev$sg(&(0x7f0000000040), 0xe95, 0x80000) syz_open_dev$sg(&(0x7f0000000000), 0xf7, 0x58600) (async) syz_open_dev$sg(&(0x7f0000000080), 0x4, 0x40042) (async) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) (async) syz_open_dev$sg(&(0x7f0000000040), 0xe95, 0x80000) (async) [ 1842.393127][T21631] binder: Bad value for 'stats' 13:04:29 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000040)=[{0xfffffffffffffffc, 0x1, {0x0, 0x1, 0x4}, {0x1, 0x0, 0x4}, 0x1, 0xfe}, {0x6, 0x2, {0x1, 0x0, 0x2}, {0x0, 0xff, 0x1}, 0x0, 0xfe}, {0x3, 0x0, {0x0, 0x0, 0x2}, {0x0, 0x1, 0x1}, 0xff, 0xff}, {0x0, 0x3, {0x0, 0x1}, {0x1, 0x1, 0x4}, 0x1}, {0x1, 0x40000000001, {0x1, 0xfe}, {0x0, 0x1, 0x3}, 0xfd, 0xfd}], 0xa0) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="73746174733d676c6f2b0b7f089c5f3ed7733d676c6f62616c2c73746074733d676c6f62616c2c73746174733d"]) socket$can_j1939(0x1d, 0x2, 0x7) (async) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000040)=[{0xfffffffffffffffc, 0x1, {0x0, 0x1, 0x4}, {0x1, 0x0, 0x4}, 0x1, 0xfe}, {0x6, 0x2, {0x1, 0x0, 0x2}, {0x0, 0xff, 0x1}, 0x0, 0xfe}, {0x3, 0x0, {0x0, 0x0, 0x2}, {0x0, 0x1, 0x1}, 0xff, 0xff}, {0x0, 0x3, {0x0, 0x1}, {0x1, 0x1, 0x4}, 0x1}, {0x1, 0x40000000001, {0x1, 0xfe}, {0x0, 0x1, 0x3}, 0xfd, 0xfd}], 0xa0) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="73746174733d676c6f2b0b7f089c5f3ed7733d676c6f62616c2c73746074733d676c6f62616c2c73746174733d"]) (async) 13:04:29 executing program 4: ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000000)) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) unshare(0x20000) (async) r0 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) (async) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffe, 0xbe, 0x3, @buffer={0x0, 0xda, &(0x7f0000000040)=""/218}, &(0x7f0000000140)="5197cd632e824f657849296da67973edd6f647a7e8d43024a77d50cedb4debd415486ec268a907750ca613b4c896ec01817fe2d2e391b4bd7143e2ca1eff15615ee508cfb5cbb1e23a79802ad872960fda5674077cec97296e6aac95f1c2e2e7f375c64ba2b6648b933f1bb547c6d15d0b04b4b5089f588c9cc343eed5204faf5c331be0535accd494bbe341622c4407b815634e596731631ac861c826d9927239b7cbfa84032201e29776de0a80983aefeec1adde53d7123c58c998faa0", &(0x7f0000000200)=""/139, 0xca, 0x32, 0xffffffffffffffff, &(0x7f00000002c0)}) 13:04:29 executing program 0: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x32a0859, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) (async) ioprio_set$uid(0x0, 0xee01, 0x2000) [ 1842.492167][T21650] binder: Bad value for 'stats' 13:04:29 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0x5, "62190b0a934f68e76247341ec3d52cab3eaef6fae6bc437960c031c116af9efa"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x90, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 13:04:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x300}, 0x0) [ 1842.519949][T21659] binder: Bad value for 'stats' 13:04:29 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0xa8014, 0x0) 13:04:29 executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000040)=[{0xfffffffffffffffc, 0x1, {0x0, 0x1, 0x4}, {0x1, 0x0, 0x4}, 0x1, 0xfe}, {0x6, 0x2, {0x1, 0x0, 0x2}, {0x0, 0xff, 0x1}, 0x0, 0xfe}, {0x3, 0x0, {0x0, 0x0, 0x2}, {0x0, 0x1, 0x1}, 0xff, 0xff}, {0x0, 0x3, {0x0, 0x1}, {0x1, 0x1, 0x4}, 0x1}, {0x1, 0x40000000001, {0x1, 0xfe}, {0x0, 0x1, 0x3}, 0xfd, 0xfd}], 0xa0) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="73746174733d676c6f2b0b7f089c5f3ed7733d676c6f62616c2c73746074733d676c6f62616c2c73746174733d"]) 13:04:29 executing program 0: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x32a0859, 0x0) (async) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x8100, 0x0) (async) ioprio_set$uid(0x0, 0xee01, 0x2000) 13:04:29 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0x5, "62190b0a934f68e76247341ec3d52cab3eaef6fae6bc437960c031c116af9efa"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r1) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x90, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) 13:04:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x500}, 0x0) 13:04:29 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0xa8014, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0xa8014, 0x0) (async) 13:04:29 executing program 4: ioctl$SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000400)={&(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x9}) (async) unshare(0x20000) (async) r0 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffe, 0xbe, 0x3, @buffer={0x0, 0xda, &(0x7f0000000040)=""/218}, &(0x7f0000000140)="5197cd632e824f657849296da67973edd6f647a7e8d43024a77d50cedb4debd415486ec268a907750ca613b4c896ec01817fe2d2e391b4bd7143e2ca1eff15615ee508cfb5cbb1e23a79802ad872960fda5674077cec97296e6aac95f1c2e2e7f375c64ba2b6648b933f1bb547c6d15d0b04b4b5089f588c9cc343eed5204faf5c331be0535accd494bbe341622c4407b815634e596731631ac861c826d9927239b7cbfa84032201e29776de0a80983aefeec1adde53d7123c58c998faa0", &(0x7f0000000200)=""/139, 0xca, 0x32, 0xffffffffffffffff, &(0x7f00000002c0)}) 13:04:29 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0xede22a26e357d284, 0x0) [ 1842.677653][T21678] binder: Bad value for 'stats' 13:04:29 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000040), 0xd437badb6322d11e, &(0x7f0000000080)=ANY=[@ANYBLOB="01c5160bdf20ff2fc4df2a9d823e39039aba5ce0477cdaf54b15bd7488d86d9b42d6b78f50092f30984cbe06d982bc9fdb1e0b7ff8f6a3225130918ffee94c588c2efdb496e181cb8de612a4e3e9ac06c8125e3c47aecfeaa244c30209728612d887b49814856bf4"]) 13:04:29 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0xa8014, 0x0) 13:04:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x600}, 0x0) 13:04:29 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0x5, "62190b0a934f68e76247341ec3d52cab3eaef6fae6bc437960c031c116af9efa"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x90, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000001c0)={0x5, "62190b0a934f68e76247341ec3d52cab3eaef6fae6bc437960c031c116af9efa"}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x90, r3, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x90}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) (async) 13:04:29 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0xede22a26e357d284, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) (async) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0xede22a26e357d284, 0x0) (async) 13:04:29 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000040), 0xd437badb6322d11e, &(0x7f0000000080)=ANY=[@ANYBLOB="01c5160bdf20ff2fc4df2a9d823e39039aba5ce0477cdaf54b15bd7488d86d9b42d6b78f50092f30984cbe06d982bc9fdb1e0b7ff8f6a3225130918ffee94c588c2efdb496e181cb8de612a4e3e9ac06c8125e3c47aecfeaa244c30209728612d887b49814856bf4"]) 13:04:29 executing program 4: unshare(0x20000) unshare(0x8000480) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000000)=""/129) 13:04:29 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair(0x6, 0x800, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000000)=0x1, 0x46) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x0, {0x1}}, 0x18) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r6, 0x29, 0x0, 0x4, 0x4, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @local}, 0x8, 0x40, 0x7, 0x7}}) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0xffffffffffffffff}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x4048010) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000040)={0x1d, r11, 0x0, {0x1}}, 0x18) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r9, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x44001) 13:04:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x700}, 0x0) 13:04:29 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x212b00, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0xb294) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x428801, 0x0) ioctl$TIOCEXCL(r1, 0x540c) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000040)="bd445b88f9c5152b6aceb559c2690e519c57d2b01fb2f55bb9c6a986b40fa7c1c25c2538144b1c0f4c59699612658b7a918e8c7a5bec5cd344d5d02fdb099ac70229b3c6b6b8479f8de560465514d8cbfb5a457e92a0a925f0f42f504d17aa2e2650c1b595a6003d35477b03f55bd839f1") ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000000c0)=0x2c5) 13:04:29 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000040), 0xd437badb6322d11e, &(0x7f0000000080)=ANY=[@ANYBLOB="01c5160bdf20ff2fc4df2a9d823e39039aba5ce0477cdaf54b15bd7488d86d9b42d6b78f50092f30984cbe06d982bc9fdb1e0b7ff8f6a3225130918ffee94c588c2efdb496e181cb8de612a4e3e9ac06c8125e3c47aecfeaa244c30209728612d887b49814856bf4"]) 13:04:29 executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0xede22a26e357d284, 0x0) 13:04:29 executing program 4: unshare(0x20000) unshare(0x8000480) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000000)=""/129) unshare(0x20000) (async) unshare(0x8000480) (async) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000000)=""/129) (async) 13:04:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x900}, 0x0) 13:04:29 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040)=0x4, 0x8) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000080), 0x4) socketpair(0x8, 0x80000, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000100), 0x4) 13:04:29 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x212b00, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0xb294) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x428801, 0x0) ioctl$TIOCEXCL(r1, 0x540c) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000040)="bd445b88f9c5152b6aceb559c2690e519c57d2b01fb2f55bb9c6a986b40fa7c1c25c2538144b1c0f4c59699612658b7a918e8c7a5bec5cd344d5d02fdb099ac70229b3c6b6b8479f8de560465514d8cbfb5a457e92a0a925f0f42f504d17aa2e2650c1b595a6003d35477b03f55bd839f1") ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000000c0)=0x2c5) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x212b00, 0x0) (async) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) (async) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0xb294) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x428801, 0x0) (async) ioctl$TIOCEXCL(r1, 0x540c) (async) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000040)="bd445b88f9c5152b6aceb559c2690e519c57d2b01fb2f55bb9c6a986b40fa7c1c25c2538144b1c0f4c59699612658b7a918e8c7a5bec5cd344d5d02fdb099ac70229b3c6b6b8479f8de560465514d8cbfb5a457e92a0a925f0f42f504d17aa2e2650c1b595a6003d35477b03f55bd839f1") (async) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000000c0)=0x2c5) (async) 13:04:29 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x26008040}, 0x4000008) 13:04:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0xf00}, 0x0) [ 1843.073376][T21734] binder: Bad value for 'stats' 13:04:29 executing program 4: unshare(0x20000) (async) unshare(0x8000480) (async) ioctl$GIO_FONT(0xffffffffffffffff, 0x4b60, &(0x7f0000000000)=""/129) 13:04:29 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) socketpair(0x6, 0x800, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000000)=0x1, 0x46) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x0, {0x1}}, 0x18) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r6, 0x29, 0x0, 0x4, 0x4, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @local}, 0x8, 0x40, 0x7, 0x7}}) (async) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0xffffffffffffffff}) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x4048010) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) (async) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000040)={0x1d, r11, 0x0, {0x1}}, 0x18) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r9, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x44001) 13:04:29 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040)=0x4, 0x8) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000080), 0x4) socketpair(0x8, 0x80000, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000100), 0x4) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040)=0x4, 0x8) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000080), 0x4) (async) socketpair(0x8, 0x80000, 0x9, &(0x7f00000000c0)) (async) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000100), 0x4) (async) 13:04:29 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x26008040}, 0x4000008) 13:04:29 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x212b00, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0xb294) (async) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x428801, 0x0) ioctl$TIOCEXCL(r1, 0x540c) (async, rerun: 32) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000040)="bd445b88f9c5152b6aceb559c2690e519c57d2b01fb2f55bb9c6a986b40fa7c1c25c2538144b1c0f4c59699612658b7a918e8c7a5bec5cd344d5d02fdb099ac70229b3c6b6b8479f8de560465514d8cbfb5a457e92a0a925f0f42f504d17aa2e2650c1b595a6003d35477b03f55bd839f1") (async, rerun: 32) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000000c0)=0x2c5) 13:04:29 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x2659}, 0x0) 13:04:29 executing program 4: unshare(0x30000980) [ 1843.299087][T21755] binder: Bad value for 'stats' 13:04:30 executing program 4: unshare(0x30000980) 13:04:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3f00}, 0x0) [ 1843.337879][T21755] binder: Bad value for 'stats' 13:04:30 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x26008040}, 0x4000008) 13:04:30 executing program 3: ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000000c0)="25d1caf033495581b0fe824c3187cd699d52b90881d0845fbe630a9c4b45c4a86800f0b3abbe37d304fbdfddb3f9c3f01ca239cfc75a67197b69888d420efe04c04e150417475f797879c281da67777e571122320d23946dd44cb2c84561ac305e27fbf394acaabf1b8d742d8eadafdfed1378b7fc1ef913d899a8ea5a52eb2aedeae1faf41789d1d439cbeca0466042f9353d4df45468c3c3ff1858aded86e603cc7eb760eca549b4215cb7d907b88a0bc75fd1bce8016fdf11427bc60e89e30cbec591d3de51b3664dd56e42aab6bac0f893756e06") openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) r2 = syz_open_pts(r1, 0x30800) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f00000001c0)) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x17) syz_open_dev$ptys(0xc, 0x3, 0x1) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @multicast2, 0x1, "3e9360e7807126720068052e70c37d3a7f4793fbdf22a8615491e999f94ba473", 0xdb, 0x2, 0xae40, 0x80}, 0x3c) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r5, 0x4b6b, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000240)="e5f6f78e488489d968f60c0c0db09322f9ca1658aa64bb73baa0ec6085e1d071fee3b9f9ced94b074c5d34639faca667ea4562253b8c32c1796b729a35cecdcf0612a91a0d54787cb15cb1992c042966ef4a45a0046ddbad7736c06f3b28fb857568cf4ccb86c603d2236166b0c3913e86f040d1f00bb9fca7b31fbe4cf754e4066febf7b9d5f7360aaeceb8b159") 13:04:30 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f0000000040)=0x4, 0x8) (async) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ASSERT(r0, 0x0, 0xcf, &(0x7f0000000080), 0x4) (async) socketpair(0x8, 0x80000, 0x9, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f0000000100), 0x4) 13:04:30 executing program 4: unshare(0x30000980) 13:04:30 executing program 1: socket$can_j1939(0x1d, 0x2, 0x7) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) socketpair(0x6, 0x800, 0x3, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000000000)=0x1, 0x46) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000040)={0x1d, r6, 0x0, {0x1}}, 0x18) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'ip6_vti0\x00', r6, 0x29, 0x0, 0x4, 0x4, 0xa, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @local}, 0x8, 0x40, 0x7, 0x7}}) (async) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000480)={0xffffffffffffffff}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r7, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x1401, 0x200, 0x70bd26, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x8840}, 0x4048010) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) r10 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000040)={0x1d, r11, 0x0, {0x1}}, 0x18) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r9, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r11}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008804}, 0x44001) 13:04:30 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1405, 0x10, 0x70bd29, 0x25dfdbff, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000080) 13:04:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x5926}, 0x0) [ 1843.492200][T21785] binder: Bad value for 'stats' 13:04:30 executing program 3: ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000000c0)="25d1caf033495581b0fe824c3187cd699d52b90881d0845fbe630a9c4b45c4a86800f0b3abbe37d304fbdfddb3f9c3f01ca239cfc75a67197b69888d420efe04c04e150417475f797879c281da67777e571122320d23946dd44cb2c84561ac305e27fbf394acaabf1b8d742d8eadafdfed1378b7fc1ef913d899a8ea5a52eb2aedeae1faf41789d1d439cbeca0466042f9353d4df45468c3c3ff1858aded86e603cc7eb760eca549b4215cb7d907b88a0bc75fd1bce8016fdf11427bc60e89e30cbec591d3de51b3664dd56e42aab6bac0f893756e06") (async, rerun: 32) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) (async, rerun: 32) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) r2 = syz_open_pts(r1, 0x30800) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f00000001c0)) r3 = socket$igmp(0x2, 0x3, 0x2) (async) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x17) syz_open_dev$ptys(0xc, 0x3, 0x1) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @multicast2, 0x1, "3e9360e7807126720068052e70c37d3a7f4793fbdf22a8615491e999f94ba473", 0xdb, 0x2, 0xae40, 0x80}, 0x3c) (async, rerun: 32) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r5, 0x4b6b, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000240)="e5f6f78e488489d968f60c0c0db09322f9ca1658aa64bb73baa0ec6085e1d071fee3b9f9ced94b074c5d34639faca667ea4562253b8c32c1796b729a35cecdcf0612a91a0d54787cb15cb1992c042966ef4a45a0046ddbad7736c06f3b28fb857568cf4ccb86c603d2236166b0c3913e86f040d1f00bb9fca7b31fbe4cf754e4066febf7b9d5f7360aaeceb8b159") 13:04:30 executing program 4: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1410, 0x400, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4014}, 0x10) unshare(0x20000) 13:04:30 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000040), 0x236c20, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stattats=\x00'/45]) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) 13:04:30 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async, rerun: 32) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async, rerun: 32) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1405, 0x10, 0x70bd29, 0x25dfdbff, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000080) 13:04:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0xf000}, 0x0) 13:04:30 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5}) (async) sendmsg$RDMA_NLDEV_CMD_PORT_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x1405, 0x10, 0x70bd29, 0x25dfdbff, "", [{{0x8}, {0x8, 0x3, 0x1}}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000811}, 0x4000080) [ 1843.686994][T21810] binder: Unknown parameter 'stattats' 13:04:30 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000040), 0x236c20, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stattats=\x00'/45]) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) 13:04:30 executing program 4: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1410, 0x400, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4014}, 0x10) unshare(0x20000) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1410, 0x400, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4014}, 0x10) (async) unshare(0x20000) (async) 13:04:30 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x29094, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="40c3ec000d14000225fc9fc1cc894837f721bf25bd7000fddbdf2508003e08030000000800030004000000080001001983834371407c63000008003e000000008008003ed00b028075768124b20fbd3f000400000083cbf102b588c9d98ff58fb70ec4cb2435288c9aaa2cd7f0bdb65505fe750c38b434fd3118011f8d4973babc74f2bddd3aaa1d574c163f99e51a842c3551cc59efb72a3cb8fa3eefca4b00009e1ea425dda2bef05e45342423cd25be126a8ebea9ed4625b7be80b4d0252c2c5ef32ec04c2e"], 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000001040)={0x400, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x661a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x153f748b}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf794}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3003}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7282c8c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec09}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd8f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x98a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78d80805}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x328f3e30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d289b8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8435}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ba6}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fa2cd1e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x423d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x150, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xadcb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe388}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cf4335}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xada0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b66}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25b38581}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a09ca1b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b3d9272}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dc7142c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a85264c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bf0e815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1278}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45e80c1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x45c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e42}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544ca626}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1509}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dbcaac8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8692}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3af8daba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3418c7a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9cab}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5285ce38}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6606455a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1fb3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc694}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4fb8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8da}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdcd87c1}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ce11398}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29d3ebb5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xb4, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47f0a08c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f36316b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57a11cf2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7422940c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xed4b1ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe79ae09}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x740c362d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4096d2e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x720e4822}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35646fbe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8cdc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xec4359f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe902}]}, {0x4}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc753}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb5ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa387}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21b2cd48}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x117eec71}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xe0, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ce7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x587c85ef}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x101da5d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb621}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x80df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b3d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x473a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca2c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc57b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x597c7137}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x766077ef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dcaabff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1507}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6aeb81e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe307}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fa07f96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x457f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe69b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x238d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x325fac6e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x742ec4ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b1e}]}]}]}, 0x400}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)={0x1cc, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6033aa5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33cd}]}, {0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x13c, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66fc2d14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64ee4d78}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x352958d}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a3d3fe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x669170ce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1263e7d0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bae5d53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x503a935e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e37c2af}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb5c}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38b78185}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25f8c548}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34812c3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47da4d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2894836c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20004840}, 0x40000) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x1412, 0x400, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004810}, 0x4040000) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 13:04:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x30000}, 0x0) 13:04:30 executing program 3: ioctl$PIO_SCRNMAP(0xffffffffffffffff, 0x4b41, &(0x7f00000000c0)="25d1caf033495581b0fe824c3187cd699d52b90881d0845fbe630a9c4b45c4a86800f0b3abbe37d304fbdfddb3f9c3f01ca239cfc75a67197b69888d420efe04c04e150417475f797879c281da67777e571122320d23946dd44cb2c84561ac305e27fbf394acaabf1b8d742d8eadafdfed1378b7fc1ef913d899a8ea5a52eb2aedeae1faf41789d1d439cbeca0466042f9353d4df45468c3c3ff1858aded86e603cc7eb760eca549b4215cb7d907b88a0bc75fd1bce8016fdf11427bc60e89e30cbec591d3de51b3664dd56e42aab6bac0f893756e06") openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x2003, 0x0) (async) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000040), 0x4) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000200), 0x4000, 0x0) r2 = syz_open_pts(r1, 0x30800) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f00000001c0)) (async) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0x17) (async, rerun: 32) syz_open_dev$ptys(0xc, 0x3, 0x1) (async, rerun: 32) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f0000000000)={@multicast1, @multicast2, 0x1, "3e9360e7807126720068052e70c37d3a7f4793fbdf22a8615491e999f94ba473", 0xdb, 0x2, 0xae40, 0x80}, 0x3c) (async) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async, rerun: 32) r5 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) ioctl$GIO_FONTX(r5, 0x4b6b, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000340), 0x40000, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) (async) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f0000000240)="e5f6f78e488489d968f60c0c0db09322f9ca1658aa64bb73baa0ec6085e1d071fee3b9f9ced94b074c5d34639faca667ea4562253b8c32c1796b729a35cecdcf0612a91a0d54787cb15cb1992c042966ef4a45a0046ddbad7736c06f3b28fb857568cf4ccb86c603d2236166b0c3913e86f040d1f00bb9fca7b31fbe4cf754e4066febf7b9d5f7360aaeceb8b159") 13:04:30 executing program 2: mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', &(0x7f0000000040), 0x236c20, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stattats=\x00'/45]) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) setsockopt$MRT_DONE(r1, 0x0, 0xc9, 0x0, 0x0) [ 1843.819104][T21818] binder: Unknown parameter 'stattats' 13:04:30 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x70043, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) 13:04:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x34000}, 0x0) 13:04:30 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x29094, 0x0) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="40c3ec000d14000225fc9fc1cc894837f721bf25bd7000fddbdf2508003e08030000000800030004000000080001001983834371407c63000008003e000000008008003ed00b028075768124b20fbd3f000400000083cbf102b588c9d98ff58fb70ec4cb2435288c9aaa2cd7f0bdb65505fe750c38b434fd3118011f8d4973babc74f2bddd3aaa1d574c163f99e51a842c3551cc59efb72a3cb8fa3eefca4b00009e1ea425dda2bef05e45342423cd25be126a8ebea9ed4625b7be80b4d0252c2c5ef32ec04c2e"], 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000001040)={0x400, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x661a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x153f748b}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf794}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3003}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7282c8c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec09}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd8f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x98a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78d80805}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x328f3e30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d289b8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8435}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ba6}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fa2cd1e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x423d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x150, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xadcb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe388}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cf4335}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xada0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b66}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25b38581}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a09ca1b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b3d9272}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dc7142c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a85264c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bf0e815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1278}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45e80c1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x45c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e42}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544ca626}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1509}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dbcaac8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8692}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3af8daba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3418c7a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9cab}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5285ce38}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6606455a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1fb3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc694}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4fb8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8da}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdcd87c1}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ce11398}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29d3ebb5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xb4, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47f0a08c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f36316b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57a11cf2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7422940c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xed4b1ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe79ae09}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x740c362d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4096d2e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x720e4822}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35646fbe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8cdc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xec4359f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe902}]}, {0x4}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc753}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb5ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa387}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21b2cd48}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x117eec71}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xe0, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ce7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x587c85ef}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x101da5d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb621}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x80df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b3d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x473a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca2c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc57b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x597c7137}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x766077ef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dcaabff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1507}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6aeb81e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe307}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fa07f96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x457f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe69b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x238d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x325fac6e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x742ec4ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b1e}]}]}]}, 0x400}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)={0x1cc, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6033aa5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33cd}]}, {0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x13c, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66fc2d14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64ee4d78}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x352958d}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a3d3fe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x669170ce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1263e7d0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bae5d53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x503a935e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e37c2af}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb5c}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38b78185}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25f8c548}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34812c3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47da4d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2894836c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20004840}, 0x40000) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x1412, 0x400, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004810}, 0x4040000) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) 13:04:30 executing program 4: sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x1410, 0x400, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4014}, 0x10) unshare(0x20000) [ 1843.921684][T21832] binder: Unknown parameter 'stattats' 13:04:30 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @rose}, [@rose, @netrom, @null, @default, @bcast, @netrom, @rose, @default]}, &(0x7f00000000c0)=0x48) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000100)={0x3, @null, 0xffffffffffffffff}) r1 = accept$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@netrom, @default, @netrom, @rose, @bcast, @null, @remote, @netrom]}, &(0x7f00000001c0)=0x48) sendto$ax25(r1, &(0x7f00000002c0)="b97ce29a72bde2a8b9ac9c7e389ab2b06a32f367c3a2cd41256d3cb1f9ceeec29168c181e030efe7809cd87f879e6a74651e45adf1925b1eae4276606229f1ac995f2b629066a19f8462298a79ba38dcb5d97489f9a30e793660ba3d6f77a3d0e37b681ab28e06724df91ea04bdd778de012ace598d9797a9c1a3f89e0b6db95e074fd2ed608e6c24924e67c3979155c4184fd5a863b728edb733b2e80320ae6f2a11d27750bd950814c24bb4ec7f02add372a37e192943014ab4068bca08e55c7dc65d4cfd3a7ea78a16ac5263ffc7e9bf6c7e01803b819f2b135cd16b51bf8ea2e7fd3df847a", 0xe7, 0x10, &(0x7f00000003c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) 13:04:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x400300}, 0x0) 13:04:30 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x70043, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) 13:04:30 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)) accept4$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @netrom}, [@remote, @null, @null, @default, @default, @netrom, @default, @default]}, &(0x7f00000000c0)=0x48, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000001c0)=0xfffffffffffffffe, 0x8) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0xe9c7) 13:04:30 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x29094, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="40c3ec000d14000225fc9fc1cc894837f721bf25bd7000fddbdf2508003e08030000000800030004000000080001001983834371407c63000008003e000000008008003ed00b028075768124b20fbd3f000400000083cbf102b588c9d98ff58fb70ec4cb2435288c9aaa2cd7f0bdb65505fe750c38b434fd3118011f8d4973babc74f2bddd3aaa1d574c163f99e51a842c3551cc59efb72a3cb8fa3eefca4b00009e1ea425dda2bef05e45342423cd25be126a8ebea9ed4625b7be80b4d0252c2c5ef32ec04c2e"], 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000001040)={0x400, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x661a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x153f748b}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf794}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3003}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7282c8c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec09}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd8f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x98a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78d80805}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x328f3e30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d289b8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8435}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ba6}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fa2cd1e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x423d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x150, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xadcb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe388}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cf4335}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xada0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b66}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25b38581}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a09ca1b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b3d9272}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dc7142c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a85264c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bf0e815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1278}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45e80c1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x45c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e42}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544ca626}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1509}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dbcaac8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8692}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3af8daba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3418c7a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9cab}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5285ce38}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6606455a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1fb3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc694}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4fb8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8da}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdcd87c1}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ce11398}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29d3ebb5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xb4, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47f0a08c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f36316b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57a11cf2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7422940c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xed4b1ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe79ae09}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x740c362d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4096d2e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x720e4822}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35646fbe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8cdc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xec4359f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe902}]}, {0x4}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc753}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb5ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa387}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21b2cd48}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x117eec71}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xe0, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ce7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x587c85ef}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x101da5d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb621}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x80df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b3d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x473a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca2c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc57b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x597c7137}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x766077ef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dcaabff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1507}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6aeb81e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe307}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fa07f96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x457f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe69b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x238d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x325fac6e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x742ec4ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b1e}]}]}]}, 0x400}, 0x1, 0x0, 0x0, 0x14}, 0x0) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)={0x1cc, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6033aa5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33cd}]}, {0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x13c, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66fc2d14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64ee4d78}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x352958d}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a3d3fe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x669170ce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1263e7d0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bae5d53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x503a935e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e37c2af}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb5c}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38b78185}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25f8c548}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34812c3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47da4d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2894836c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20004840}, 0x40000) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x1412, 0x400, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004810}, 0x4040000) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x29094, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) (async) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="40c3ec000d14000225fc9fc1cc894837f721bf25bd7000fddbdf2508003e08030000000800030004000000080001001983834371407c63000008003e000000008008003ed00b028075768124b20fbd3f000400000083cbf102b588c9d98ff58fb70ec4cb2435288c9aaa2cd7f0bdb65505fe750c38b434fd3118011f8d4973babc74f2bddd3aaa1d574c163f99e51a842c3551cc59efb72a3cb8fa3eefca4b00009e1ea425dda2bef05e45342423cd25be126a8ebea9ed4625b7be80b4d0252c2c5ef32ec04c2e"], 0x40}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000001040)={0x400, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x90, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x661a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x153f748b}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf794}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x3003}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7282c8c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xec09}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xd8f3}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x98a}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x78d80805}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x328f3e30}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2d289b8f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8435}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7ba6}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7fa2cd1e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x423d}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x34, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x5}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x150, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xadcb}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe388}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7cf4335}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xada0}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4b66}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x25b38581}]}, {0x3c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a09ca1b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6b3d9272}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1dc7142c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xde99}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1a85264c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5bf0e815}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1278}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x45e80c1b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x45c9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1e42}]}, {0x44, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x544ca626}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1509}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xbb4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dbcaac8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8692}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3af8daba}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x3418c7a9}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x9cab}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5285ce38}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6606455a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1fb3}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc694}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4fb8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8da}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xdcd87c1}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe0fb}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6ce11398}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x57ea}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc4c8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x29d3ebb5}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xb4, 0xc, 0x0, 0x1, [{0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x47f0a08c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x1f36316b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x57a11cf2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7422940c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xed4b1ff}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xe79ae09}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x740c362d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4096d2e4}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x720e4822}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x25ab}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x35646fbe}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x8cdc}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xec4359f}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe902}]}, {0x4}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfe21}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc753}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb5ac}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa387}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x21b2cd48}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x117eec71}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSCATLST={0xe0, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1ce7}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x587c85ef}]}, {0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x101da5d4}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb621}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x80df}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2b3d}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x473a}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xca2c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc57b}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x597c7137}]}, {0x4}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x766077ef}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7dcaabff}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x1507}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6aeb81e7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe307}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fa07f96}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xee06}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38c1}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x457f}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe69b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x238d}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x325fac6e}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x742ec4ee}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6b1e}]}]}]}, 0x400}, 0x1, 0x0, 0x0, 0x14}, 0x0) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r2, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000900)={0x1cc, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_MLSCATLST={0x1c, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6033aa5b}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x33cd}]}, {0x4}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}]}, @NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x6}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x2}, {0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x13c, 0x8, 0x0, 0x1, [{0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x66fc2d14}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x73}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x64ee4d78}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x352958d}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a3d3fe4}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf9}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6b}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9e}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xab}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x669170ce}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xac}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xb1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1263e7d0}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2bae5d53}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x20}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x503a935e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4e}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x65}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5e37c2af}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x1d}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe3}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xb5c}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38b78185}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xe}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbf}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25f8c548}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x34812c3b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x11}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47da4d7f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2894836c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc9}]}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x20004840}, 0x40000) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x1412, 0x400, 0x70bd29, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20004810}, 0x4040000) (async) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) (async) 13:04:30 executing program 4: unshare(0x64060c80) unshare(0x18010080) unshare(0x400) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc}) 13:04:30 executing program 0: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x70043, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) [ 1844.087692][T21852] binder: Bad value for 'stats' 13:04:30 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @rose}, [@rose, @netrom, @null, @default, @bcast, @netrom, @rose, @default]}, &(0x7f00000000c0)=0x48) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000100)={0x3, @null, 0xffffffffffffffff}) r1 = accept$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@netrom, @default, @netrom, @rose, @bcast, @null, @remote, @netrom]}, &(0x7f00000001c0)=0x48) sendto$ax25(r1, &(0x7f00000002c0)="b97ce29a72bde2a8b9ac9c7e389ab2b06a32f367c3a2cd41256d3cb1f9ceeec29168c181e030efe7809cd87f879e6a74651e45adf1925b1eae4276606229f1ac995f2b629066a19f8462298a79ba38dcb5d97489f9a30e793660ba3d6f77a3d0e37b681ab28e06724df91ea04bdd778de012ace598d9797a9c1a3f89e0b6db95e074fd2ed608e6c24924e67c3979155c4184fd5a863b728edb733b2e80320ae6f2a11d27750bd950814c24bb4ec7f02add372a37e192943014ab4068bca08e55c7dc65d4cfd3a7ea78a16ac5263ffc7e9bf6c7e01803b819f2b135cd16b51bf8ea2e7fd3df847a", 0xe7, 0x10, &(0x7f00000003c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) 13:04:30 executing program 4: unshare(0x64060c80) (async) unshare(0x18010080) (async) unshare(0x400) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc}) 13:04:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0xf0ffff}, 0x0) 13:04:30 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)) accept4$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @netrom}, [@remote, @null, @null, @default, @default, @netrom, @default, @default]}, &(0x7f00000000c0)=0x48, 0x800) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000001c0)=0xfffffffffffffffe, 0x8) (async) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0xe9c7) 13:04:30 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0x3, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000140)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x1, 0xc0040) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000100)) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) [ 1844.218862][T21871] binder: Bad value for 'stats' 13:04:30 executing program 4: unshare(0x64060c80) unshare(0x18010080) unshare(0x400) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc}) unshare(0x64060c80) (async) unshare(0x18010080) (async) unshare(0x400) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000000)={0xc}) (async) 13:04:30 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @rose}, [@rose, @netrom, @null, @default, @bcast, @netrom, @rose, @default]}, &(0x7f00000000c0)=0x48) ioctl$SIOCAX25GETUID(r0, 0x89e0, &(0x7f0000000100)={0x3, @null, 0xffffffffffffffff}) (async) r1 = accept$ax25(r0, &(0x7f0000000040)={{0x3, @default}, [@netrom, @default, @netrom, @rose, @bcast, @null, @remote, @netrom]}, &(0x7f00000001c0)=0x48) sendto$ax25(r1, &(0x7f00000002c0)="b97ce29a72bde2a8b9ac9c7e389ab2b06a32f367c3a2cd41256d3cb1f9ceeec29168c181e030efe7809cd87f879e6a74651e45adf1925b1eae4276606229f1ac995f2b629066a19f8462298a79ba38dcb5d97489f9a30e793660ba3d6f77a3d0e37b681ab28e06724df91ea04bdd778de012ace598d9797a9c1a3f89e0b6db95e074fd2ed608e6c24924e67c3979155c4184fd5a863b728edb733b2e80320ae6f2a11d27750bd950814c24bb4ec7f02add372a37e192943014ab4068bca08e55c7dc65d4cfd3a7ea78a16ac5263ffc7e9bf6c7e01803b819f2b135cd16b51bf8ea2e7fd3df847a", 0xe7, 0x10, &(0x7f00000003c0)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) 13:04:30 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async, rerun: 32) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 32) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000040)) accept4$ax25(0xffffffffffffffff, &(0x7f0000000140)={{0x3, @netrom}, [@remote, @null, @null, @default, @default, @netrom, @default, @default]}, &(0x7f00000000c0)=0x48, 0x800) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(0xffffffffffffffff, 0x28, 0x2, &(0x7f00000001c0)=0xfffffffffffffffe, 0x8) (async) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)=0xe9c7) 13:04:30 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x1000000}, 0x0) 13:04:30 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) 13:04:30 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0x3, 0x4) r0 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000140)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x1, 0xc0040) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000100)) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0x3, 0x4) (async) syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x0) (async) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000140)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async) syz_open_dev$sg(&(0x7f00000000c0), 0x1, 0xc0040) (async) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000100)) (async) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) (async) [ 1844.347971][T21887] binder: Bad value for 'stats' 13:04:31 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=globastats=global,stats=\x00'/45]) mount$binderfs(&(0x7f0000000080), &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000140)={[{}], [{@fsname={'fsname', 0x3d, '\xf7'}}]}) 13:04:31 executing program 4: unshare(0x20000) unshare(0x800) 13:04:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x2000000}, 0x0) 13:04:31 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB="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"]) (async) 13:04:31 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000000)=0x3, 0x4) (async) r0 = syz_open_dev$sg(&(0x7f0000000380), 0x0, 0x0) ioctl$SCSI_IOCTL_STOP_UNIT(r0, 0x6) (async) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000000140)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async, rerun: 32) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x1, 0xc0040) (rerun: 32) ioctl$SG_GET_LOW_DMA(r2, 0x227a, &(0x7f0000000100)) (async) ioctl$SG_EMULATED_HOST(r0, 0x2203, &(0x7f0000000080)) [ 1844.458826][T21905] binder: Bad value for 'stats' 13:04:31 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) 13:04:31 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x10000, &(0x7f0000000280)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030303433372c73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61783d30313737273737373737373737373737373737373737372c7065726db294e80bd8377a7674696f2c6d6561737572652c6f653d2e2f627ba611cf726673002c0000000000000093046988180c3672257cd00ebb237f2ecb3e22c98422a30a7f1bec61c7214b455fcef784916ebe45c0191e034284aca260929c473d66d26be1659b09e368bde17b26de02e2e94a1f91ec0f4b244b45b174155af3e23e3c15b99e78296e636ace12805fd306c1965e9bc18a9ba3cdc5dbaae8ef76e49bd025e21d2eb53c3e447474d9248d17f433ff"]) 13:04:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3000000}, 0x0) 13:04:31 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=globastats=global,stats=\x00'/45]) (async) mount$binderfs(&(0x7f0000000080), &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000140)={[{}], [{@fsname={'fsname', 0x3d, '\xf7'}}]}) 13:04:31 executing program 4: unshare(0x20000) unshare(0x800) 13:04:31 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) 13:04:31 executing program 0: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000000)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x821008, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000140)={0x0, 0x4, 0x3, 0x7, 0x1c0d, 0xda0, 0x7, 0x8, 0x7, 0x1, 0x0, 0x3}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140b, 0x8, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004041}, 0x24008050) 13:04:31 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x890080, 0x0) 13:04:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x4000000}, 0x0) [ 1844.595734][T21920] binder: Bad value for 'stats' 13:04:31 executing program 4: unshare(0x20000) unshare(0x800) unshare(0x20000) (async) unshare(0x800) (async) 13:04:31 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=globastats=global,stats=\x00'/45]) mount$binderfs(&(0x7f0000000080), &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000140)={[{}], [{@fsname={'fsname', 0x3d, '\xf7'}}]}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=globastats=global,stats=\x00'/45]) (async) mount$binderfs(&(0x7f0000000080), &(0x7f00000000c0)='./binderfs\x00', &(0x7f0000000100), 0x2000, &(0x7f0000000140)={[{}], [{@fsname={'fsname', 0x3d, '\xf7'}}]}) (async) 13:04:31 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x280, 0x0) (async) 13:04:31 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x890080, 0x0) 13:04:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x5000000}, 0x0) 13:04:31 executing program 0: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000000)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x821008, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000140)={0x0, 0x4, 0x3, 0x7, 0x1c0d, 0xda0, 0x7, 0x8, 0x7, 0x1, 0x0, 0x3}) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140b, 0x8, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004041}, 0x24008050) [ 1844.728348][T21939] binder: Bad value for 'stats' 13:04:31 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) 13:04:31 executing program 2: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs2\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x7fb}}, {@max={'max', 0x3d, 0x8}}, {@stats}, {@max={'max', 0x3d, 0x8}}, {@max={'max', 0x3d, 0xd7}}], [{@fsname}, {@permit_directio}, {@seclabel}]}) [ 1844.768941][T21939] binder: Bad value for 'stats' 13:04:31 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x890080, 0x0) 13:04:31 executing program 4: unshare(0x20000) unshare(0x10000100) 13:04:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x6000000}, 0x0) 13:04:31 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000600)={0x14, r1, 0xc25c1bc23680d34b}, 0x14}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x80) ioctl$KDDISABIO(r0, 0x4b37) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x8a882, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x40}}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x7}}], [{@pcr={'pcr', 0x3d, 0x3d}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}) 13:04:31 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) 13:04:31 executing program 0: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000000)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x821008, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000140)={0x0, 0x4, 0x3, 0x7, 0x1c0d, 0xda0, 0x7, 0x8, 0x7, 0x1, 0x0, 0x3}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140b, 0x8, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004041}, 0x24008050) socketpair(0x2a, 0x0, 0x0, &(0x7f0000000000)) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x821008, 0x0) (async) ioctl$DRM_IOCTL_MODE_SETPLANE(0xffffffffffffffff, 0xc03064b7, &(0x7f0000000140)={0x0, 0x4, 0x3, 0x7, 0x1c0d, 0xda0, 0x7, 0x8, 0x7, 0x1, 0x0, 0x3}) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x140b, 0x8, 0x70bd28, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004041}, 0x24008050) (async) 13:04:31 executing program 2: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs2\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x7fb}}, {@max={'max', 0x3d, 0x8}}, {@stats}, {@max={'max', 0x3d, 0x8}}, {@max={'max', 0x3d, 0xd7}}], [{@fsname}, {@permit_directio}, {@seclabel}]}) 13:04:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x7000000}, 0x0) 13:04:31 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) 13:04:31 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000600)={0x14, r1, 0xc25c1bc23680d34b}, 0x14}}, 0x0) (async) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x80) (async) ioctl$KDDISABIO(r0, 0x4b37) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x8a882, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x40}}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x7}}], [{@pcr={'pcr', 0x3d, 0x3d}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}) 13:04:31 executing program 4: unshare(0x20000) unshare(0x10000100) 13:04:31 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x689}}, {}, {@max={'max', 0x3d, 0x3f}}, {@stats}, {@max={'max', 0x3d, 0x400}}], [{@dont_appraise}, {@smackfsdef}, {@seclabel}, {@hash}, {@uid_eq}, {@smackfsroot={'smackfsroot', 0x3d, ','}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, './binderfs\x00'}}]}) 13:04:31 executing program 2: mount$binderfs(0x0, &(0x7f0000000200)='./binderfs2\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x7fb}}, {@max={'max', 0x3d, 0x8}}, {@stats}, {@max={'max', 0x3d, 0x8}}, {@max={'max', 0x3d, 0xd7}}], [{@fsname}, {@permit_directio}, {@seclabel}]}) 13:04:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x9000000}, 0x0) 13:04:31 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x248000, 0x0) 13:04:31 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000580), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000600)={0x14, r1, 0xc25c1bc23680d34b}, 0x14}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44}, 0x80) ioctl$KDDISABIO(r0, 0x4b37) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x8a882, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x40}}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x7}}], [{@pcr={'pcr', 0x3d, 0x3d}}, {@uid_eq={'uid', 0x3d, 0xee00}}]}) 13:04:31 executing program 4: unshare(0x20000) unshare(0x10000100) unshare(0x20000) (async) unshare(0x10000100) (async) 13:04:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0xf000000}, 0x0) 13:04:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0]) 13:04:31 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x689}}, {}, {@max={'max', 0x3d, 0x3f}}, {@stats}, {@max={'max', 0x3d, 0x400}}], [{@dont_appraise}, {@smackfsdef}, {@seclabel}, {@hash}, {@uid_eq}, {@smackfsroot={'smackfsroot', 0x3d, ','}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, './binderfs\x00'}}]}) 13:04:31 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x248000, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x248000, 0x0) (async) 13:04:31 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) 13:04:31 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x26590000}, 0x0) [ 1845.245846][T22001] binder: Unknown parameter '' 13:04:31 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x689}}, {}, {@max={'max', 0x3d, 0x3f}}, {@stats}, {@max={'max', 0x3d, 0x400}}], [{@dont_appraise}, {@smackfsdef}, {@seclabel}, {@hash}, {@uid_eq}, {@smackfsroot={'smackfsroot', 0x3d, ','}}, {@seclabel}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, './binderfs\x00'}}]}) 13:04:31 executing program 4: unshare(0x12020200) sigaltstack(&(0x7f00000000c0)={&(0x7f0000000000)=""/176, 0x80000001, 0xb0}, &(0x7f0000000140)={&(0x7f0000000100)=""/46, 0x0, 0x2e}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030626bd7000fcdbdf250c00000008000300", @ANYRES32, @ANYBLOB="080001"], 0x2c}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x1412, 0x800, 0x70bd25, 0x25dfdbdf, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x58}}, 0x24048104) 13:04:31 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) (async, rerun: 64) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0]) (rerun: 64) 13:04:31 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x248000, 0x0) 13:04:32 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) 13:04:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3f000000}, 0x0) [ 1845.380171][T22018] binder: Unknown parameter '' 13:04:32 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x18482, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x7ff}}, {@stats}, {@stats}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@fowner_eq}, {@obj_role={'obj_role', 0x3d, '\\+.'}}, {@smackfsroot={'smackfsroot', 0x3d, './binderfs\x00'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x31, 0x37, 0x31, 0x65, 0x2, 0x64, 0x35], 0x2d, [0x63, 0x62, 0x32, 0x33], 0x2d, [0x61, 0x31, 0x38, 0x65], 0x2d, [0x31, 0x36, 0x7, 0x66], 0x2d, [0x62, 0x31, 0x33, 0x35, 0x37, 0x61, 0x39, 0x61]}}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) [ 1845.410102][T22021] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1845.410938][T22018] binder: Unknown parameter '' 13:04:32 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) 13:04:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x9effffff}, 0x0) 13:04:32 executing program 3: ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000000)={0xc85, 0x8, 0x80, 0x3, 0x3}) 13:04:32 executing program 4: unshare(0x12020200) sigaltstack(&(0x7f00000000c0)={&(0x7f0000000000)=""/176, 0x80000001, 0xb0}, &(0x7f0000000140)={&(0x7f0000000100)=""/46, 0x0, 0x2e}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030626bd7000fcdbdf250c00000008000300", @ANYRES32, @ANYBLOB="080001"], 0x2c}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x1412, 0x800, 0x70bd25, 0x25dfdbdf, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x58}}, 0x24048104) unshare(0x12020200) (async) sigaltstack(&(0x7f00000000c0)={&(0x7f0000000000)=""/176, 0x80000001, 0xb0}, &(0x7f0000000140)={&(0x7f0000000100)=""/46, 0x0, 0x2e}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030626bd7000fcdbdf250c00000008000300", @ANYRES32, @ANYBLOB="080001"], 0x2c}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x1412, 0x800, 0x70bd25, 0x25dfdbdf, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x58}}, 0x24048104) (async) 13:04:32 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x18482, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x7ff}}, {@stats}, {@stats}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@fowner_eq}, {@obj_role={'obj_role', 0x3d, '\\+.'}}, {@smackfsroot={'smackfsroot', 0x3d, './binderfs\x00'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x31, 0x37, 0x31, 0x65, 0x2, 0x64, 0x35], 0x2d, [0x63, 0x62, 0x32, 0x33], 0x2d, [0x61, 0x31, 0x38, 0x65], 0x2d, [0x31, 0x36, 0x7, 0x66], 0x2d, [0x62, 0x31, 0x33, 0x35, 0x37, 0x61, 0x39, 0x61]}}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) [ 1845.455527][T22027] binder: Unknown parameter 'fsmagic' [ 1845.472064][T22018] binder: Unknown parameter '' [ 1845.492136][T22018] binder: Unknown parameter '' 13:04:32 executing program 3: ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000000)={0xc85, 0x8, 0x80, 0x3, 0x3}) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000000)={0xc85, 0x8, 0x80, 0x3, 0x3}) (async) [ 1845.545009][T22018] binder: Unknown parameter '' [ 1845.557690][T22018] binder: Unknown parameter '' [ 1845.569722][T22035] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1845.584877][T22018] binder: Unknown parameter '' 13:04:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) [ 1845.592573][T22018] binder: Unknown parameter '' [ 1845.607192][T22018] binder: Unknown parameter '' [ 1845.616324][T22039] binder: Unknown parameter 'fsmagic' [ 1845.634382][T22018] binder: Unknown parameter '' [ 1845.655048][T22018] binder: Unknown parameter '' [ 1845.684160][T22018] binder: Unknown parameter '' [ 1845.695674][T22018] binder: Unknown parameter '' [ 1845.711792][T22018] binder: Unknown parameter '' [ 1845.724056][T22018] binder: Unknown parameter '' [ 1845.729334][T22018] binder: Unknown parameter '' [ 1845.737781][T22018] binder: Unknown parameter '' [ 1845.743005][T22018] binder: Unknown parameter '' [ 1845.751123][T22018] binder: Unknown parameter '' [ 1845.756950][T22018] binder: Unknown parameter '' [ 1845.762168][T22018] binder: Unknown parameter '' [ 1845.767635][T22018] binder: Unknown parameter '' [ 1845.772771][T22018] binder: Unknown parameter '' [ 1845.778452][T22018] binder: Unknown parameter '' [ 1845.783789][T22018] binder: Unknown parameter '' [ 1845.788907][T22018] binder: Unknown parameter '' [ 1845.794387][T22018] binder: Unknown parameter '' [ 1845.799476][T22018] binder: Unknown parameter '' [ 1845.806726][T22018] binder: Unknown parameter '' [ 1845.811915][T22018] binder: Unknown parameter '' [ 1845.817646][T22018] binder: Unknown parameter '' [ 1845.822811][T22018] binder: Unknown parameter '' [ 1845.828786][T22018] binder: Unknown parameter '' [ 1845.834439][T22018] binder: Unknown parameter '' [ 1845.839726][T22018] binder: Unknown parameter '' [ 1845.845117][T22018] binder: Unknown parameter '' [ 1845.850245][T22018] binder: Unknown parameter '' [ 1845.855803][T22018] binder: Unknown parameter '' [ 1845.860892][T22018] binder: Unknown parameter '' [ 1845.868411][T22018] binder: Unknown parameter '' [ 1845.873546][T22018] binder: Unknown parameter '' [ 1845.878907][T22018] binder: Unknown parameter '' [ 1845.885129][T22018] binder: Unknown parameter '' [ 1845.890233][T22018] binder: Unknown parameter '' [ 1845.895860][T22018] binder: Unknown parameter '' [ 1845.900969][T22018] binder: Unknown parameter '' [ 1845.908087][T22018] binder: Unknown parameter '' [ 1845.913844][T22018] binder: Unknown parameter '' [ 1845.919361][T22018] binder: Unknown parameter '' [ 1845.924872][T22018] binder: Unknown parameter '' [ 1845.930009][T22018] binder: Unknown parameter '' [ 1845.935393][T22018] binder: Unknown parameter '' [ 1845.940512][T22018] binder: Unknown parameter '' [ 1845.946384][T22018] binder: Unknown parameter '' [ 1845.951850][T22018] binder: Unknown parameter '' [ 1845.957348][T22018] binder: Unknown parameter '' [ 1845.962613][T22018] binder: Unknown parameter '' [ 1845.968373][T22018] binder: Unknown parameter '' [ 1845.975421][T22018] binder: Unknown parameter '' [ 1845.980582][T22018] binder: Unknown parameter '' 13:04:32 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=r0]) 13:04:32 executing program 3: ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000000)={0xc85, 0x8, 0x80, 0x3, 0x3}) ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000000)={0xc85, 0x8, 0x80, 0x3, 0x3}) (async) 13:04:32 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x18482, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x7ff}}, {@stats}, {@stats}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@fowner_eq}, {@obj_role={'obj_role', 0x3d, '\\+.'}}, {@smackfsroot={'smackfsroot', 0x3d, './binderfs\x00'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x31, 0x37, 0x31, 0x65, 0x2, 0x64, 0x35], 0x2d, [0x63, 0x62, 0x32, 0x33], 0x2d, [0x61, 0x31, 0x38, 0x65], 0x2d, [0x31, 0x36, 0x7, 0x66], 0x2d, [0x62, 0x31, 0x33, 0x35, 0x37, 0x61, 0x39, 0x61]}}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0x18482, &(0x7f00000000c0)={[{@max={'max', 0x3d, 0x7ff}}, {@stats}, {@stats}], [{@fsmagic={'fsmagic', 0x3d, 0x5}}, {@fowner_eq}, {@obj_role={'obj_role', 0x3d, '\\+.'}}, {@smackfsroot={'smackfsroot', 0x3d, './binderfs\x00'}}, {@fowner_gt={'fowner>', 0xffffffffffffffff}}, {@fsuuid={'fsuuid', 0x3d, {[0x32, 0x31, 0x37, 0x31, 0x65, 0x2, 0x64, 0x35], 0x2d, [0x63, 0x62, 0x32, 0x33], 0x2d, [0x61, 0x31, 0x38, 0x65], 0x2d, [0x31, 0x36, 0x7, 0x66], 0x2d, [0x62, 0x31, 0x33, 0x35, 0x37, 0x61, 0x39, 0x61]}}}, {@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}]}) (async) 13:04:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0xfffff000}, 0x0) 13:04:32 executing program 4: unshare(0x12020200) sigaltstack(&(0x7f00000000c0)={&(0x7f0000000000)=""/176, 0x80000001, 0xb0}, &(0x7f0000000140)={&(0x7f0000000100)=""/46, 0x0, 0x2e}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030626bd7000fcdbdf250c00000008000300", @ANYRES32, @ANYBLOB="080001"], 0x2c}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x1412, 0x800, 0x70bd25, 0x25dfdbdf, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x58}}, 0x24048104) unshare(0x12020200) (async) sigaltstack(&(0x7f00000000c0)={&(0x7f0000000000)=""/176, 0x80000001, 0xb0}, &(0x7f0000000140)={&(0x7f0000000100)=""/46, 0x0, 0x2e}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_SET_TX_POWER(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030626bd7000fcdbdf250c00000008000300", @ANYRES32, @ANYBLOB="080001"], 0x2c}}, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, 0x1412, 0x800, 0x70bd25, 0x25dfdbdf, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}]}, 0x58}}, 0x24048104) (async) 13:04:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20000890) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x140a, 0xf20, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r3) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r5, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r6 = getuid() ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f00000005c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r6}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r4, @ANYBLOB="00012dbd7000fedbdf25010000000800070002000000a8000880840000802400020005ff778212dc9610f69092ce2120e0e98c74b169c9721400040002004e2300000000000000000000000006000500080000002400020042de38fa8a176b2cde1930f8158792ac03ec9c5ffe2ab7af203657225d892f7208000300010000001400040002004e21ac1414aa0000000000000000200000801400040002004e20ac141415000000000000000001000008000700020000001400020077673200000000000000000000000000060006004e240000060006004e240000060006004e2100"/242], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x4008080) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000ec0)={0xd08, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x674, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x4f, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f4c805d10c4d58cad1386fc31b38418c701361f4fd0f2d80f6ce2f0839971722"}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x310, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x30c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d3067af580f2e21c6b005893127839134666cce2c68b370973c7d1f71d30d32e"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0xd8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7f}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PEERS={0x620, 0x8, 0x0, 0x1, [{0x21c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "583b906191df113e4848cfec14b93ff1d76821e78986c709a8e401f4f59fa237"}, @WGPEER_A_ALLOWEDIPS={0x13c, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x4}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x400, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3b0, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x20}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @private1, 0xfffff800}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}]}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}]}]}]}, 0xd08}}, 0x20000001) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x408, 0x0) [ 1845.986039][T22018] binder: Unknown parameter '' [ 1845.991171][T22018] binder: Unknown parameter '' [ 1845.997122][T22018] binder: Unknown parameter '' [ 1846.003447][T22018] binder: Unknown parameter '' [ 1846.009377][T22018] binder: Unknown parameter '' 13:04:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000001c0)={@rand_addr=0x64010100, @remote, 0xffffffffffffffff, "1d370eb5a792ee6435231bc2d6918b1e070e6f28d99f191ed789ac50af311083", 0x1000, 0xf2, 0x0, 0x5e7e}, 0x3c) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xa0, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x800) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) 13:04:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0xffffff7f}, 0x0) [ 1846.060958][T22059] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1846.061308][T22058] binder: Unknown parameter 'fsmagic' 13:04:32 executing program 4: unshare(0x20000) syz_open_dev$tty1(0xc, 0x4, 0x2) [ 1846.115571][T22067] binder: Unknown parameter 'fsmagic' [ 1846.135314][T22074] binder: Unknown parameter '' 13:04:32 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x32a0859, 0x0) 13:04:32 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c29fc616c2c73746174733d676c6f62656c2c73746174733d"]) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x6}}, {@stats}, {@max={'max', 0x3d, 0xb2ad}}, {@max={'max', 0x3d, 0x7}}, {@max={'max', 0x3d, 0x8000000000000000}}], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000001c0)={0x8, 0xff, 0x0, 0x2, 0x1, "4a79c8870952cdf6"}) 13:04:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000001c0)={@rand_addr=0x64010100, @remote, 0xffffffffffffffff, "1d370eb5a792ee6435231bc2d6918b1e070e6f28d99f191ed789ac50af311083", 0x1000, 0xf2, 0x0, 0x5e7e}, 0x3c) (async, rerun: 64) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r2) (rerun: 64) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xa0, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x800) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) 13:04:32 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20000890) (async) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x140a, 0xf20, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r3) (async) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r5, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async, rerun: 64) r6 = getuid() (rerun: 64) ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f00000005c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r6}) (async) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r4, @ANYBLOB="00012dbd7000fedbdf25010000000800070002000000a8000880840000802400020005ff778212dc9610f69092ce2120e0e98c74b169c9721400040002004e2300000000000000000000000006000500080000002400020042de38fa8a176b2cde1930f8158792ac03ec9c5ffe2ab7af203657225d892f7208000300010000001400040002004e21ac1414aa0000000000000000200000801400040002004e20ac141415000000000000000001000008000700020000001400020077673200000000000000000000000000060006004e240000060006004e240000060006004e2100"/242], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x4008080) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000ec0)={0xd08, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x674, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x4f, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f4c805d10c4d58cad1386fc31b38418c701361f4fd0f2d80f6ce2f0839971722"}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x310, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x30c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d3067af580f2e21c6b005893127839134666cce2c68b370973c7d1f71d30d32e"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0xd8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7f}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PEERS={0x620, 0x8, 0x0, 0x1, [{0x21c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "583b906191df113e4848cfec14b93ff1d76821e78986c709a8e401f4f59fa237"}, @WGPEER_A_ALLOWEDIPS={0x13c, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x4}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x400, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3b0, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x20}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @private1, 0xfffff800}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}]}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}]}]}]}, 0xd08}}, 0x20000001) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x408, 0x0) 13:04:32 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) 13:04:32 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0xffffff9e}, 0x0) [ 1846.280909][T22084] binder: Bad value for 'stats' 13:04:32 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c29fc616c2c73746174733d676c6f62656c2c73746174733d"]) (async) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x6}}, {@stats}, {@max={'max', 0x3d, 0xb2ad}}, {@max={'max', 0x3d, 0x7}}, {@max={'max', 0x3d, 0x8000000000000000}}], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}) (async, rerun: 32) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (rerun: 32) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000001c0)={0x8, 0xff, 0x0, 0x2, 0x1, "4a79c8870952cdf6"}) 13:04:33 executing program 4: unshare(0x20000) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) 13:04:33 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x32a0859, 0x0) 13:04:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0xfffffff0}, 0x0) 13:04:33 executing program 4: unshare(0x20000) (async) syz_open_dev$tty1(0xc, 0x4, 0x2) 13:04:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000001c0)={@rand_addr=0x64010100, @remote, 0xffffffffffffffff, "1d370eb5a792ee6435231bc2d6918b1e070e6f28d99f191ed789ac50af311083", 0x1000, 0xf2, 0x0, 0x5e7e}, 0x3c) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r2) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xa0, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x800) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000001c0)={@rand_addr=0x64010100, @remote, 0xffffffffffffffff, "1d370eb5a792ee6435231bc2d6918b1e070e6f28d99f191ed789ac50af311083", 0x1000, 0xf2, 0x0, 0x5e7e}, 0x3c) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r2) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x20, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x20}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xa0, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x1b}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x800) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) [ 1846.424227][T22102] binder: Bad value for 'stats' 13:04:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3000000000000}, 0x0) 13:04:33 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c29fc616c2c73746174733d676c6f62656c2c73746174733d"]) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x6}}, {@stats}, {@max={'max', 0x3d, 0xb2ad}}, {@max={'max', 0x3d, 0x7}}, {@max={'max', 0x3d, 0x8000000000000000}}], [{@euid_eq={'euid', 0x3d, 0xee00}}, {@fowner_eq={'fowner', 0x3d, 0xffffffffffffffff}}]}) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000001c0)={0x8, 0xff, 0x0, 0x2, 0x1, "4a79c8870952cdf6"}) 13:04:33 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030303030342c73746174733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030303031312c6d61783530303030303030303030303030303030313336313730302c736d61636b66736861743d2c666f776e18723e", @ANYRESDEC=0xee01, @ANYBLOB="2c646f6e745f61707072616973652c726f6f74636f6e746578743d73797361646d5f752c706f73697861636c2c666f776e65723df04d57d0da310e54d10dae4ac657d645abe91b0723fb45cd5b58f1dbaa140bffbe772e3871288a14580dd7456c903f563206a71fda28225ce1bb07bdff31d428714fc8b859717b781b46e185d391e4782576a7618e00", @ANYRESDEC, @ANYBLOB=',fsmagic=0x0000000000000006,obj_role=./binderfs\x00,context=user_u,\x00']) 13:04:33 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20000890) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x140a, 0xf20, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r3) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r0) r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r5, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r6 = getuid() ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f00000005c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r6}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r4, @ANYBLOB="00012dbd7000fedbdf25010000000800070002000000a8000880840000802400020005ff778212dc9610f69092ce2120e0e98c74b169c9721400040002004e2300000000000000000000000006000500080000002400020042de38fa8a176b2cde1930f8158792ac03ec9c5ffe2ab7af203657225d892f7208000300010000001400040002004e21ac1414aa0000000000000000200000801400040002004e20ac141415000000000000000001000008000700020000001400020077673200000000000000000000000000060006004e240000060006004e240000060006004e2100"/242], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x4008080) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000ec0)={0xd08, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x674, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x4f, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f4c805d10c4d58cad1386fc31b38418c701361f4fd0f2d80f6ce2f0839971722"}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x310, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x30c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d3067af580f2e21c6b005893127839134666cce2c68b370973c7d1f71d30d32e"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0xd8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7f}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PEERS={0x620, 0x8, 0x0, 0x1, [{0x21c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "583b906191df113e4848cfec14b93ff1d76821e78986c709a8e401f4f59fa237"}, @WGPEER_A_ALLOWEDIPS={0x13c, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x4}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x400, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3b0, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x20}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @private1, 0xfffff800}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}]}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}]}]}]}, 0xd08}}, 0x20000001) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x408, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00'}) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x20000890) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), r0) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x140a, 0xf20, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x800) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r3) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), r0) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) ioctl$SIOCAX25DELFWD(r5, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) getuid() (async) ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f00000005c0)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r6}) (async) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000580)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r4, @ANYBLOB="00012dbd7000fedbdf25010000000800070002000000a8000880840000802400020005ff778212dc9610f69092ce2120e0e98c74b169c9721400040002004e2300000000000000000000000006000500080000002400020042de38fa8a176b2cde1930f8158792ac03ec9c5ffe2ab7af203657225d892f7208000300010000001400040002004e21ac1414aa0000000000000000200000801400040002004e20ac141415000000000000000001000008000700020000001400020077673200000000000000000000000000060006004e240000060006004e240000060006004e2100"/242], 0xf8}, 0x1, 0x0, 0x0, 0x10}, 0x4008080) (async) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000ec0)={0xd08, r2, 0x2, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_PEERS={0x674, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}]}, {0x1cc, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x138, 0x9, 0x0, 0x1, [{0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x4f, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_ALLOWEDIPS={0x6c, 0x9, 0x0, 0x1, [{0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f4c805d10c4d58cad1386fc31b38418c701361f4fd0f2d80f6ce2f0839971722"}]}, {0x14, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x310, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x30c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}, {0x130, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}]}, {0x80, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d3067af580f2e21c6b005893127839134666cce2c68b370973c7d1f71d30d32e"}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0xd8, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7f}, @WGPEER_A_ALLOWEDIPS={0x80, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x3}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}, @WGDEVICE_A_PEERS={0x620, 0x8, 0x0, 0x1, [{0x21c, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "583b906191df113e4848cfec14b93ff1d76821e78986c709a8e401f4f59fa237"}, @WGPEER_A_ALLOWEDIPS={0x13c, 0x9, 0x0, 0x1, [{0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ALLOWEDIPS={0x9c, 0x9, 0x0, 0x1, [{0x4}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}, {0x400, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x3b0, 0x9, 0x0, 0x1, [{0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x20}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x18}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x26}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @local}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @private1, 0xfffff800}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}]}, @WGDEVICE_A_PEERS={0x34, 0x8, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x40}]}]}]}, 0xd08}}, 0x20000001) (async) mount$binderfs(0x0, &(0x7f00000001c0)='./binderfs\x00', 0x0, 0x408, 0x0) (async) 13:04:33 executing program 4: socketpair(0x22, 0x0, 0x2, &(0x7f0000000000)) unshare(0x20000) clock_gettime(0x2, &(0x7f0000000040)) r0 = syz_open_pts(0xffffffffffffffff, 0x183400) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4) [ 1846.578850][T22123] binder: Bad value for 'stats' 13:04:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) 13:04:33 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$rfkill(r0, 0x0, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) 13:04:33 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030303030342c73746174733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030303031312c6d61783530303030303030303030303030303030313336313730302c736d61636b66736861743d2c666f776e18723e", @ANYRESDEC=0xee01, @ANYBLOB="2c646f6e745f61707072616973652c726f6f74636f6e746578743d73797361646d5f752c706f73697861636c2c666f776e65723df04d57d0da310e54d10dae4ac657d645abe91b0723fb45cd5b58f1dbaa140bffbe772e3871288a14580dd7456c903f563206a71fda28225ce1bb07bdff31d428714fc8b859717b781b46e185d391e4782576a7618e00", @ANYRESDEC, @ANYBLOB=',fsmagic=0x0000000000000006,obj_role=./binderfs\x00,context=user_u,\x00']) 13:04:33 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0x35}, 0x0, "78883d133371410efc7ef3aa6af63d961d95a1261059daf226c43e7e5677db1e", 0x47, 0x40, 0x5, 0x4}, 0x3c) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, 0x0) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=0x0]) 13:04:33 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="73746174733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030303030342c73746174733d676c6f62616c2c73746174733d676c6f62616c2c73746174733d676c6f62616c2c6d61783d30303030303030303030303030303030303030303031312c6d61783530303030303030303030303030303030313336313730302c736d61636b66736861743d2c666f776e18723e", @ANYRESDEC=0xee01, @ANYBLOB="2c646f6e745f61707072616973652c726f6f74636f6e746578743d73797361646d5f752c706f73697861636c2c666f776e65723df04d57d0da310e54d10dae4ac657d645abe91b0723fb45cd5b58f1dbaa140bffbe772e3871288a14580dd7456c903f563206a71fda28225ce1bb07bdff31d428714fc8b859717b781b46e185d391e4782576a7618e00", @ANYRESDEC, @ANYBLOB=',fsmagic=0x0000000000000006,obj_role=./binderfs\x00,context=user_u,\x00']) 13:04:33 executing program 4: socketpair(0x22, 0x0, 0x2, &(0x7f0000000000)) unshare(0x20000) clock_gettime(0x2, &(0x7f0000000040)) r0 = syz_open_pts(0xffffffffffffffff, 0x183400) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4) socketpair(0x22, 0x0, 0x2, &(0x7f0000000000)) (async) unshare(0x20000) (async) clock_gettime(0x2, &(0x7f0000000040)) (async) syz_open_pts(0xffffffffffffffff, 0x183400) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4) (async) 13:04:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0xf0ffffffffffff}, 0x0) 13:04:33 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$rfkill(r0, 0x0, 0x0) read$rfkill(r0, &(0x7f0000000000), 0x8) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async) write$rfkill(r0, 0x0, 0x0) (async) read$rfkill(r0, &(0x7f0000000000), 0x8) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) 13:04:33 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0x35}, 0x0, "78883d133371410efc7ef3aa6af63d961d95a1261059daf226c43e7e5677db1e", 0x47, 0x40, 0x5, 0x4}, 0x3c) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=0x0]) 13:04:33 executing program 1: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4811}, 0x8090) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) 13:04:33 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x20a5082, 0x0) 13:04:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x100000000000000}, 0x0) 13:04:33 executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000040)={@multicast2, @dev={0xac, 0x14, 0x14, 0x35}, 0x0, "78883d133371410efc7ef3aa6af63d961d95a1261059daf226c43e7e5677db1e", 0x47, 0x40, 0x5, 0x4}, 0x3c) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, 0x0) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=0x0]) 13:04:33 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) write$rfkill(r0, 0x0, 0x0) (async) read$rfkill(r0, &(0x7f0000000000), 0x8) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) 13:04:33 executing program 4: socketpair(0x22, 0x0, 0x2, &(0x7f0000000000)) (async) unshare(0x20000) (async, rerun: 64) clock_gettime(0x2, &(0x7f0000000040)) (rerun: 64) r0 = syz_open_pts(0xffffffffffffffff, 0x183400) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x4) 13:04:33 executing program 1: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4811}, 0x8090) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4811}, 0x8090) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) 13:04:33 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x20a5082, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x20a5082, 0x0) (async) 13:04:33 executing program 2: setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x3, 0x4) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) 13:04:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x200000000000000}, 0x0) 13:04:33 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) 13:04:33 executing program 1: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x4811}, 0x8090) (async, rerun: 64) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (rerun: 64) 13:04:33 executing program 0: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x20a5082, 0x0) 13:04:33 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x300000000000000}, 0x0) [ 1847.066662][T22188] binder: Bad value for 'stats' 13:04:33 executing program 2: setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x3, 0x4) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) 13:04:33 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) 13:04:33 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x40, 0x2, 0x3, 0x0, 0x1}, 0x8) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) ioctl$I2C_TENBIT(r1, 0x704, 0x1) ioctl$I2C_TENBIT(r1, 0x704, 0x0) [ 1847.199318][T22204] binder: Bad value for 'stats' 13:04:34 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x3f}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCCBRK(r0, 0x5428) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x1ca00, 0x0) unshare(0x20000) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000440)={0x11e, 0x1b, &(0x7f0000000040)="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"}) 13:04:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x400000000000000}, 0x0) 13:04:34 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x138430, 0x0) 13:04:34 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) ioctl$TIOCNOTTY(0xffffffffffffffff, 0x5422) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000000)) (async) 13:04:34 executing program 2: setsockopt$MRT_PIM(0xffffffffffffffff, 0x0, 0xcf, &(0x7f0000000040)=0x3, 0x4) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) 13:04:34 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x40, 0x2, 0x3, 0x0, 0x1}, 0x8) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) ioctl$I2C_TENBIT(r1, 0x704, 0x1) (async) ioctl$I2C_TENBIT(r1, 0x704, 0x0) 13:04:34 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x138430, 0x0) [ 1847.632202][T22213] binder: Bad value for 'stats' 13:04:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x500000000000000}, 0x0) 13:04:34 executing program 2: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x0, 0x8, 0x5, 0x83, 0x3a, @local, @mcast2, 0x1, 0x8000, 0x56b, 0x200}}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xf60, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0xf10, 0x8, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f7d1e62ad0b6cf774c172767c02d0fb40d1d0d98e249f96f8178389c2cad2f61"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ab8282565f68392c987495b9d13195e644946def4da3c12e9b84430cf7962e5c"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x55e0, @loopback, 0x1000}}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x288af166bbfa2994}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x228, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @empty, 0xfffffeff}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc8a8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1e}, @WGPEER_A_ALLOWEDIPS={0x1c8, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x81}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x2b0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @mcast2, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x8}, @WGPEER_A_ALLOWEDIPS={0x1dc, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3dd0, @private2}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x484, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x164, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x2c8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "95c2c6153640d08baf6c97e6b23794225e249f18c2c6b8aaff22dc50718dd970"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}}]}, {0x4ac, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x68}, @WGPEER_A_ALLOWEDIPS={0x480, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r0}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7f}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}]}, 0xf60}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) 13:04:34 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)) 13:04:34 executing program 0: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x40, 0x2, 0x3, 0x0, 0x1}, 0x8) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) ioctl$I2C_TENBIT(r1, 0x704, 0x1) ioctl$I2C_TENBIT(r1, 0x704, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) (async) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000040)) (async) write$rfkill(0xffffffffffffffff, &(0x7f0000000080)={0x40, 0x2, 0x3, 0x0, 0x1}, 0x8) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) syz_open_dev$I2C(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$I2C_TENBIT(r1, 0x704, 0x1) (async) ioctl$I2C_TENBIT(r1, 0x704, 0x0) (async) 13:04:34 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x138430, 0x0) 13:04:34 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x3f}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCCBRK(r0, 0x5428) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x1ca00, 0x0) unshare(0x20000) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000440)={0x11e, 0x1b, &(0x7f0000000040)="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"}) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x3f}) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) ioctl$TIOCCBRK(r0, 0x5428) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x1ca00, 0x0) (async) unshare(0x20000) (async) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000440)={0x11e, 0x1b, &(0x7f0000000040)="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"}) (async) 13:04:34 executing program 2: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x0, 0x8, 0x5, 0x83, 0x3a, @local, @mcast2, 0x1, 0x8000, 0x56b, 0x200}}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xf60, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0xf10, 0x8, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f7d1e62ad0b6cf774c172767c02d0fb40d1d0d98e249f96f8178389c2cad2f61"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ab8282565f68392c987495b9d13195e644946def4da3c12e9b84430cf7962e5c"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x55e0, @loopback, 0x1000}}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x288af166bbfa2994}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x228, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @empty, 0xfffffeff}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc8a8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1e}, @WGPEER_A_ALLOWEDIPS={0x1c8, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x81}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x2b0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @mcast2, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x8}, @WGPEER_A_ALLOWEDIPS={0x1dc, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3dd0, @private2}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x484, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x164, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x2c8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "95c2c6153640d08baf6c97e6b23794225e249f18c2c6b8aaff22dc50718dd970"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}}]}, {0x4ac, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x68}, @WGPEER_A_ALLOWEDIPS={0x480, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r0}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7f}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}]}, 0xf60}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) [ 1847.770081][T22227] binder: Bad value for 'stats' 13:04:34 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)) (async) 13:04:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x600000000000000}, 0x0) 13:04:34 executing program 1: r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x2aa4c1) ioctl$I2C_SLAVE(r0, 0x703, 0x3ec) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000540)={0x1b1, 0x1b, &(0x7f0000000140)}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r4, 0x4b6b, 0x0) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000000)={0x1f, 0x80, 0x3, 0x40, 0x704}) ioctl$GIO_FONTX(r3, 0x4b6b, 0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f00000000c0)) 13:04:34 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(&(0x7f0000000100), &(0x7f0000000140)='./binderfs2\x00', &(0x7f0000000180), 0x41, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x1}}, {@stats}, {@max={'max', 0x3d, 0xfffffffffffffff7}}, {@max={'max', 0x3d, 0x200}}, {@stats}, {@max={'max', 0x3d, 0x5}}], [{@smackfstransmute={'smackfstransmute', 0x3d, './binderfs\x00'}}, {@smackfshat}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}) select(0x40, &(0x7f0000000000)={0x6, 0x1f, 0x5, 0xfffffffeffffffff, 0x7, 0x0, 0x6, 0x27c2}, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x6, 0x0, 0x8000000000000000, 0x6, 0x3}, &(0x7f0000000080)={0x2b0e000, 0x6, 0x9b8f, 0xfffffffffffffffd, 0x9, 0x5, 0x4}, &(0x7f00000000c0)={0x0, 0xea60}) [ 1847.891861][T22246] binder: Bad value for 'stats' 13:04:34 executing program 2: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x0, 0x8, 0x5, 0x83, 0x3a, @local, @mcast2, 0x1, 0x8000, 0x56b, 0x200}}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xf60, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0xf10, 0x8, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f7d1e62ad0b6cf774c172767c02d0fb40d1d0d98e249f96f8178389c2cad2f61"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ab8282565f68392c987495b9d13195e644946def4da3c12e9b84430cf7962e5c"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x55e0, @loopback, 0x1000}}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x288af166bbfa2994}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x228, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @empty, 0xfffffeff}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc8a8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1e}, @WGPEER_A_ALLOWEDIPS={0x1c8, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x81}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x2b0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @mcast2, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x8}, @WGPEER_A_ALLOWEDIPS={0x1dc, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3dd0, @private2}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x484, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x164, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x2c8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "95c2c6153640d08baf6c97e6b23794225e249f18c2c6b8aaff22dc50718dd970"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}}]}, {0x4ac, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x68}, @WGPEER_A_ALLOWEDIPS={0x480, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r0}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7f}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}]}, 0xf60}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'}) (async) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x0, 0x8, 0x5, 0x83, 0x3a, @local, @mcast2, 0x1, 0x8000, 0x56b, 0x200}}) (async) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xf60, 0x0, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_PEERS={0xf10, 0x8, 0x0, 0x1, [{0xb4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast2}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f7d1e62ad0b6cf774c172767c02d0fb40d1d0d98e249f96f8178389c2cad2f61"}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ab8282565f68392c987495b9d13195e644946def4da3c12e9b84430cf7962e5c"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x55e0, @loopback, 0x1000}}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_FLAGS={0x8, 0x3, 0x288af166bbfa2994}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x228, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x0, @empty, 0xfffffeff}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xc8a8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1e}, @WGPEER_A_ALLOWEDIPS={0x1c8, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x81}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x34}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xf}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x14}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x5}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}]}, {0x2b0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x8, @mcast2, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @remote}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x8}, @WGPEER_A_ALLOWEDIPS={0x1dc, 0x9, 0x0, 0x1, [{0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1d}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x3dd0, @private2}}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x484, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x164, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ALLOWEDIPS={0x2c8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2c}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x44}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x23}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "95c2c6153640d08baf6c97e6b23794225e249f18c2c6b8aaff22dc50718dd970"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e20, 0x7, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6}}]}, {0x4ac, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x68}, @WGPEER_A_ALLOWEDIPS={0x480, 0x9, 0x0, 0x1, [{0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x20}}, {0x5, 0x3, 0x2}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}]}]}]}]}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r0}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7f}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r1}]}, 0xf60}, 0x1, 0x0, 0x0, 0xc0}, 0x20000010) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) 13:04:34 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000080)) 13:04:34 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(&(0x7f0000000100), &(0x7f0000000140)='./binderfs2\x00', &(0x7f0000000180), 0x41, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x1}}, {@stats}, {@max={'max', 0x3d, 0xfffffffffffffff7}}, {@max={'max', 0x3d, 0x200}}, {@stats}, {@max={'max', 0x3d, 0x5}}], [{@smackfstransmute={'smackfstransmute', 0x3d, './binderfs\x00'}}, {@smackfshat}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}) (async) select(0x40, &(0x7f0000000000)={0x6, 0x1f, 0x5, 0xfffffffeffffffff, 0x7, 0x0, 0x6, 0x27c2}, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x6, 0x0, 0x8000000000000000, 0x6, 0x3}, &(0x7f0000000080)={0x2b0e000, 0x6, 0x9b8f, 0xfffffffffffffffd, 0x9, 0x5, 0x4}, &(0x7f00000000c0)={0x0, 0xea60}) 13:04:34 executing program 4: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x6, 0x3f}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCCBRK(r0, 0x5428) (async, rerun: 64) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0x1ca00, 0x0) (rerun: 64) unshare(0x20000) ioctl$PIO_FONTX(0xffffffffffffffff, 0x4b6c, &(0x7f0000000440)={0x11e, 0x1b, &(0x7f0000000040)="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"}) 13:04:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x700000000000000}, 0x0) 13:04:34 executing program 1: r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x2aa4c1) ioctl$I2C_SLAVE(r0, 0x703, 0x3ec) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) (async) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000540)={0x1b1, 0x1b, &(0x7f0000000140)}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r4, 0x4b6b, 0x0) (async) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000000)={0x1f, 0x80, 0x3, 0x40, 0x704}) (async) ioctl$GIO_FONTX(r3, 0x4b6b, 0x0) (async) ioctl$TCGETS(r3, 0x5401, &(0x7f00000000c0)) [ 1848.021331][T22261] binder: Bad value for 'stats' 13:04:34 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(&(0x7f0000000100), &(0x7f0000000140)='./binderfs2\x00', &(0x7f0000000180), 0x41, &(0x7f0000000280)={[{@max={'max', 0x3d, 0x1}}, {@stats}, {@max={'max', 0x3d, 0xfffffffffffffff7}}, {@max={'max', 0x3d, 0x200}}, {@stats}, {@max={'max', 0x3d, 0x5}}], [{@smackfstransmute={'smackfstransmute', 0x3d, './binderfs\x00'}}, {@smackfshat}, {@fowner_eq={'fowner', 0x3d, 0xee01}}]}) select(0x40, &(0x7f0000000000)={0x6, 0x1f, 0x5, 0xfffffffeffffffff, 0x7, 0x0, 0x6, 0x27c2}, &(0x7f0000000040)={0x6, 0x4, 0x0, 0x6, 0x0, 0x8000000000000000, 0x6, 0x3}, &(0x7f0000000080)={0x2b0e000, 0x6, 0x9b8f, 0xfffffffffffffffd, 0x9, 0x5, 0x4}, &(0x7f00000000c0)={0x0, 0xea60}) 13:04:34 executing program 3: socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40600, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0xfffa, 0x7, 0xa01, 0x5, 0x9, "db03c9c886cd6866"}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) 13:04:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x900000000000000}, 0x0) 13:04:34 executing program 2: ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0]) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x7fffffff}}, {@max={'max', 0x3d, 0x7}}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@flag='async'}, {@hash}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000200)={0x6, 0xcc, 0x3, 0xf09, 0xfffd}) 13:04:34 executing program 1: r0 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x2aa4c1) ioctl$I2C_SLAVE(r0, 0x703, 0x3ec) syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000540)={0x1b1, 0x1b, &(0x7f0000000140)}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) r4 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r4, 0x4b6b, 0x0) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000000)={0x1f, 0x80, 0x3, 0x40, 0x704}) ioctl$GIO_FONTX(r3, 0x4b6b, 0x0) ioctl$TCGETS(r3, 0x5401, &(0x7f00000000c0)) syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x2aa4c1) (async) ioctl$I2C_SLAVE(r0, 0x703, 0x3ec) (async) syz_open_dev$tty20(0xc, 0x4, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) (async) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000080)) (async) syz_open_dev$ptys(0xc, 0x3, 0x0) (async) ioctl$GIO_FONTX(r2, 0x4b6b, &(0x7f0000000540)={0x1b1, 0x1b, &(0x7f0000000140)}) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$GIO_FONTX(r4, 0x4b6b, 0x0) (async) ioctl$VT_SETMODE(r4, 0x5602, &(0x7f0000000000)={0x1f, 0x80, 0x3, 0x40, 0x704}) (async) ioctl$GIO_FONTX(r3, 0x4b6b, 0x0) (async) ioctl$TCGETS(r3, 0x5401, &(0x7f00000000c0)) (async) 13:04:34 executing program 4: unshare(0x20000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf25180000000c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="b4002580140004004fdc6c851f619ad956a1d2f4b2be4cfc050002000900000005000200e000000014000400e9dab79f14143d69206f79c18e89c5b605000200040000002400030082c7f561f5a4565b0f6df982d69a752d0bd725943d2e6c1ea1f01187aa656140440001800c000500050000000000000034000380080002000300000008000200010000000600010000000000060001000200000008000200020000000800020003000000050002002000000008000300", @ANYRES32=r3, @ANYBLOB], 0x36c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) unshare(0x2000000) 13:04:34 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) 13:04:34 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0xf00000000000000}, 0x0) [ 1848.175889][T22285] binder: Unknown parameter '00000000000000000000' 13:04:34 executing program 3: socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40600, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0xfffa, 0x7, 0xa01, 0x5, 0x9, "db03c9c886cd6866"}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) [ 1848.227591][T22285] binder: Bad value for 'max' 13:04:34 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x20005, 0x0) 13:04:34 executing program 2: ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0]) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x7fffffff}}, {@max={'max', 0x3d, 0x7}}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@flag='async'}, {@hash}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) (async) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000200)={0x6, 0xcc, 0x3, 0xf09, 0xfffd}) 13:04:34 executing program 4: unshare(0x20000) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf25180000000c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="b4002580140004004fdc6c851f619ad956a1d2f4b2be4cfc050002000900000005000200e000000014000400e9dab79f14143d69206f79c18e89c5b605000200040000002400030082c7f561f5a4565b0f6df982d69a752d0bd725943d2e6c1ea1f01187aa656140440001800c000500050000000000000034000380080002000300000008000200010000000600010000000000060001000200000008000200020000000800020003000000050002002000000008000300", @ANYRES32=r3, @ANYBLOB], 0x36c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) unshare(0x2000000) 13:04:34 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) 13:04:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x2659000000000000}, 0x0) 13:04:35 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x20005, 0x0) 13:04:35 executing program 3: socket$vsock_stream(0x28, 0x1, 0x0) r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40600, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000040)={0xfffa, 0x7, 0xa01, 0x5, 0x9, "db03c9c886cd6866"}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) [ 1848.346110][T22307] binder: Unknown parameter '00000000000000000000' [ 1848.362631][T22306] binder: Bad value for 'max' 13:04:35 executing program 2: ioctl$TCGETS(0xffffffffffffffff, 0x5401, &(0x7f0000000180)) (async, rerun: 32) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0]) (async, rerun: 32) mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x7fffffff}}, {@max={'max', 0x3d, 0x7}}], [{@defcontext={'defcontext', 0x3d, 'sysadm_u'}}, {@flag='async'}, {@hash}, {@mask={'mask', 0x3d, '^MAY_READ'}}]}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000200)={0x6, 0xcc, 0x3, 0xf09, 0xfffd}) 13:04:35 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x20005, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x20005, 0x0) (async) 13:04:35 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) 13:04:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3f00000000000000}, 0x0) 13:04:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x24000095) 13:04:35 executing program 4: unshare(0x20000) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan0\x00', 0x0}) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="000127bd7000fcdbdf25180000000c000600000000000000000008000300", @ANYRES32=0x0, @ANYBLOB="0c0006000300000003000000f80125802400030033dd520c24308aaf475c546f61111c960519651d9caeaacc0a91625d453bb41c9c0001804c00038008000200030000000800020003000000080002000300000006000100000000000c0004000202aaaaaaaaaaaa0c000400000000000000000006000100ffff000006000300a3aa000008000100030000000c000500090000000000000008000100020000000c000500ff030000000000000800040006000000050002000300000005000200020000000c000500f9ffffffffffffff2400030063dd0e68c6e108081cb4a0c9238f0d691c080141de14acfc029a7161d940d750050002003f000000240003006e5dad20f434d977b5db9833fd9f42a3d28c45da483ad5824bcf34024f67478f24000300022dd044b0bdee01ca425c213e9bc2cb4b144ee213fcc9e66f6955bdc1553f77940001802400038008000200000000000800020003000000060001000300000006000300ffff00000c00050005000000000000004400038006000300a3aa000006000100020000000c0004000203aaaaaaaaaaaa0600010000000000080002000300000006000300ffff00000c0004000000000000000000100003800c0004000201aaaaaaaaaaaa0c00050008000000000000000500020005000000180001800c0005007f0000000000000008000100000000000c00018005000200020000007c002580200001800800040080226b1d08000400070000000c000500070000000000000014000400d229a50c89e969f2cdaaf8db5be5706b05000200070000003c00018008000100010000000c0005000002000000000000080004000000000005000200020000000c0005000700000000000000080004000100010008000300", @ANYRES32=r0, @ANYBLOB="b4002580140004004fdc6c851f619ad956a1d2f4b2be4cfc050002000900000005000200e000000014000400e9dab79f14143d69206f79c18e89c5b605000200040000002400030082c7f561f5a4565b0f6df982d69a752d0bd725943d2e6c1ea1f01187aa656140440001800c000500050000000000000034000380080002000300000008000200010000000600010000000000060001000200000008000200020000000800020003000000050002002000000008000300", @ANYRES32=r3, @ANYBLOB], 0x36c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) unshare(0x2000000) [ 1848.497486][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.525776][T22326] binder: Bad value for 'max' 13:04:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x268900) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0xfffffffffffffffb, 0x74, 0x5, @buffer={0x0, 0xe1, &(0x7f0000000080)=""/225}, &(0x7f0000000180)="c5fde2b279946fb4cd11c02f1e7e5b080605ee1ff1c8a051f9f8320a35694a3da90331e9534e3a720865c8391bf6e9d35220af9c7d2c32aa20855460900f5acc9e865b2664f92397cac9d1469b84574a50354a36f34dd24e28d6017bbfa8a3a5396905d018703ae2f2b7e3fbe871ba785d093f97", &(0x7f0000000200)=""/31, 0xcd54, 0x10020, 0x3, &(0x7f0000000240)}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) 13:04:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x9effffff00000000}, 0x0) [ 1848.546909][T22325] binder: Unknown parameter '00000000000000000000' 13:04:35 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = getuid() mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@stats}, {@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x6}}, {@stats}, {@max={'max', 0x3d, 0x80}}], [{@uid_gt}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '%'}}, {@euid_lt={'euid<', r0}}]}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) syz_init_net_socket$ax25(0x3, 0x5, 0x6) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @null, 0xee00}) 13:04:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x24000095) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'}) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x24000095) (async) 13:04:35 executing program 4: unshare(0x20000) socketpair(0xf, 0xa, 0xffff, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x1404, 0x2, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1404, 0x800, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x24040004) [ 1848.591991][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.616982][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.632294][T22325] binder: Unknown parameter '00000000000000000000' 13:04:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x268900) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0xfffffffffffffffb, 0x74, 0x5, @buffer={0x0, 0xe1, &(0x7f0000000080)=""/225}, &(0x7f0000000180)="c5fde2b279946fb4cd11c02f1e7e5b080605ee1ff1c8a051f9f8320a35694a3da90331e9534e3a720865c8391bf6e9d35220af9c7d2c32aa20855460900f5acc9e865b2664f92397cac9d1469b84574a50354a36f34dd24e28d6017bbfa8a3a5396905d018703ae2f2b7e3fbe871ba785d093f97", &(0x7f0000000200)=""/31, 0xcd54, 0x10020, 0x3, &(0x7f0000000240)}) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) [ 1848.659449][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.693377][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.716418][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.736599][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.751106][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.773136][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.792532][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.810330][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.834308][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.841181][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.849220][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.856418][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.863236][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.872422][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.879917][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.886961][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.893961][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.901121][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.908011][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.914910][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.921661][T22325] binder: Unknown parameter '00000000000000000000' 13:04:35 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) r0 = getuid() mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@stats}, {@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x6}}, {@stats}, {@max={'max', 0x3d, 0x80}}], [{@uid_gt}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '%'}}, {@euid_lt={'euid<', r0}}]}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async, rerun: 32) syz_init_net_socket$ax25(0x3, 0x5, 0x6) (async, rerun: 32) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @null, 0xee00}) 13:04:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0xf0ffffff00000000}, 0x0) 13:04:35 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1409, 0x2, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x280488c4}, 0x20000000) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) syz_open_dev$tty20(0xc, 0x4, 0x1) 13:04:35 executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x40, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x24000095) 13:04:35 executing program 4: unshare(0x20000) socketpair(0xf, 0xa, 0xffff, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x1404, 0x2, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1404, 0x800, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x24040004) 13:04:35 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x1, 0x268900) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000280)={0x53, 0xfffffffffffffffb, 0x74, 0x5, @buffer={0x0, 0xe1, &(0x7f0000000080)=""/225}, &(0x7f0000000180)="c5fde2b279946fb4cd11c02f1e7e5b080605ee1ff1c8a051f9f8320a35694a3da90331e9534e3a720865c8391bf6e9d35220af9c7d2c32aa20855460900f5acc9e865b2664f92397cac9d1469b84574a50354a36f34dd24e28d6017bbfa8a3a5396905d018703ae2f2b7e3fbe871ba785d093f97", &(0x7f0000000200)=""/31, 0xcd54, 0x10020, 0x3, &(0x7f0000000240)}) (async, rerun: 64) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (rerun: 64) [ 1848.928573][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.936100][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.942976][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.952910][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.959972][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.967264][T22325] binder: Unknown parameter '00000000000000000000' [ 1848.976028][T22325] binder: Unknown parameter '00000000000000000000' 13:04:35 executing program 4: unshare(0x20000) socketpair(0xf, 0xa, 0xffff, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x1404, 0x2, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_DELLINK(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x50, 0x1404, 0x800, 0x70bd27, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4010}, 0x24040004) 13:04:35 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"/296], 0x128}, 0x1, 0x0, 0x0, 0x98b954f7331114c3}, 0x880) socketpair(0xb, 0x800, 0x7f, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="10000000121400022bbd7000fbdbdf251b544b9628ea659ddd28585b8713a4dd1214f78cb1a0828a39803e30af5ac3d1c53b29dfd3760d61b12354a97d535039a9e2fe6a395b1dfbf14ae8402e9aba065a7b119dce6fa9c34c6c2277ae43a28779793503d3681510dd97dd6b8ecd3c6e460c54da7e48dda44b7e0a27e3fe76f1e48666f34f100819448eb4c750cc1d519ca782d4b4422a8fcbfda4f149ecc99e09b97575a77949c56aa3fb469a861c0f7a13360d2df10691565ac52451c31a002125d3879d005fe91400"/214], 0x10}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8060010}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001214100029bd7000fddbdf2508004f000100000008000100b90000000800150001000000080001e08382391dd112a04a2e992600000000000800030002000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x20, 0x1411, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 13:04:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0xffffff7f00000000}, 0x0) 13:04:35 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@loopback, @loopback, 0xffffffffffffffff, "7cec440f98acbaef286486d46ead7b4874a4ccaf2eed168e2864585b610209fe", 0x101, 0x4, 0x7ff, 0x6}, 0x3c) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r3 = accept$ax25(r2, 0x0, &(0x7f0000000080)) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000000)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000100)) [ 1849.104616][T22372] binder: Bad value for 'stats' 13:04:35 executing program 4: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0) unshare(0x2000400) 13:04:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0xfffffffffffff000}, 0x0) [ 1849.140008][T22378] wg1 speed is unknown, defaulting to 1000 [ 1849.159573][T22378] wg1 speed is unknown, defaulting to 1000 13:04:35 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) r0 = getuid() mount$binderfs(&(0x7f0000000040), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@stats}, {@stats}, {@stats}, {@stats}, {@max={'max', 0x3d, 0x6}}, {@stats}, {@max={'max', 0x3d, 0x80}}], [{@uid_gt}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x7}}, {@euid_lt={'euid<', 0xffffffffffffffff}}, {@obj_role={'obj_role', 0x3d, '%'}}, {@euid_lt={'euid<', r0}}]}) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) syz_init_net_socket$ax25(0x3, 0x5, 0x6) (async) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @null, 0xee00}) 13:04:35 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1409, 0x2, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x280488c4}, 0x20000000) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) 13:04:35 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@loopback, @loopback, 0xffffffffffffffff, "7cec440f98acbaef286486d46ead7b4874a4ccaf2eed168e2864585b610209fe", 0x101, 0x4, 0x7ff, 0x6}, 0x3c) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) r3 = accept$ax25(r2, 0x0, &(0x7f0000000080)) (async) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000000)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000100)) 13:04:35 executing program 4: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0) unshare(0x2000400) [ 1849.208277][T22378] wg1 speed is unknown, defaulting to 1000 13:04:35 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x2}, 0x0) [ 1849.274839][T22378] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1849.292906][T22388] binder: Bad value for 'stats' 13:04:36 executing program 4: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0) unshare(0x2000400) 13:04:36 executing program 1: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f00000000c0)={@loopback, @loopback, 0xffffffffffffffff, "7cec440f98acbaef286486d46ead7b4874a4ccaf2eed168e2864585b610209fe", 0x101, 0x4, 0x7ff, 0x6}, 0x3c) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r2, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) r3 = accept$ax25(r2, 0x0, &(0x7f0000000080)) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000000)) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) ioctl$SIOCAX25GETINFOOLD(r3, 0x89e9, &(0x7f0000000100)) [ 1849.329421][T22378] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 13:04:36 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"/296], 0x128}, 0x1, 0x0, 0x0, 0x98b954f7331114c3}, 0x880) socketpair(0xb, 0x800, 0x7f, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="10000000121400022bbd7000fbdbdf251b544b9628ea659ddd28585b8713a4dd1214f78cb1a0828a39803e30af5ac3d1c53b29dfd3760d61b12354a97d535039a9e2fe6a395b1dfbf14ae8402e9aba065a7b119dce6fa9c34c6c2277ae43a28779793503d3681510dd97dd6b8ecd3c6e460c54da7e48dda44b7e0a27e3fe76f1e48666f34f100819448eb4c750cc1d519ca782d4b4422a8fcbfda4f149ecc99e09b97575a77949c56aa3fb469a861c0f7a13360d2df10691565ac52451c31a002125d3879d005fe91400"/214], 0x10}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8060010}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001214100029bd7000fddbdf2508004f000100000008000100b90000000800150001000000080001e08382391dd112a04a2e992600000000000800030002000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x20, 0x1411, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="28010000031401002abd7000fcdbdf250900020073797a32000000000800410073697700140033006272696467655f736c6176655f3000000900020073797a300000000008004100727865001400330070696d367265670000000000000000000900020073797a3000000000080041007278650014003300776c616e3100000000000000000000000900020073797a300000000008004100736977001400330076657468315f6d6163767461700000000900020073797a320000000008004100727865001400330069703665727370656e300000000000000900020073797a3200000000080041007278650014003300697036677265300000000000000000000900020073797a320000000008004100736977001400330077673100"/296], 0x128}, 0x1, 0x0, 0x0, 0x98b954f7331114c3}, 0x880) (async) socketpair(0xb, 0x800, 0x7f, &(0x7f0000000340)) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="10000000121400022bbd7000fbdbdf251b544b9628ea659ddd28585b8713a4dd1214f78cb1a0828a39803e30af5ac3d1c53b29dfd3760d61b12354a97d535039a9e2fe6a395b1dfbf14ae8402e9aba065a7b119dce6fa9c34c6c2277ae43a28779793503d3681510dd97dd6b8ecd3c6e460c54da7e48dda44b7e0a27e3fe76f1e48666f34f100819448eb4c750cc1d519ca782d4b4422a8fcbfda4f149ecc99e09b97575a77949c56aa3fb469a861c0f7a13360d2df10691565ac52451c31a002125d3879d005fe91400"/214], 0x10}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8060010}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001214100029bd7000fddbdf2508004f000100000008000100b90000000800150001000000080001e08382391dd112a04a2e992600000000000800030002000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) (async) socket$nl_rdma(0x10, 0x3, 0x14) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x20, 0x1411, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) (async) 13:04:36 executing program 0: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000000)={0x6f9}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) sendto$ax25(0xffffffffffffffff, &(0x7f00000000c0)="2f1ba9ea7ae243aa1c988c57af16cb0846c2f10a98246d8c4c1f35edd8cc564713b755c8b8e2e2862fd74da935946efedfa6fe6dbe84d1adce23e78d7c75a10a110c0ccdcbdd226af6db54c397f1867bf2da6637bd814919a9dce3e7ad0ae76004907c3bc6914f6ca39c64f339518e9175a8211b900dc8dad6cf2bacd7be68ae770eaffd7487d3d82333eadbf7452216e56ab411ff1dc188c064b72f7b6d836a4c4fe0df2b2f2fb4285d7958eba8a2095ddceb4169", 0xb5, 0x40050, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) getitimer(0x2, &(0x7f0000000080)) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000280)=@can, 0x80, &(0x7f0000001900)=[{&(0x7f0000000300)=""/170, 0xaa}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/199, 0xc7}, {&(0x7f00000014c0)=""/92, 0x5c}, {&(0x7f0000001540)=""/74, 0x4a}, {&(0x7f00000015c0)=""/222, 0xde}, {&(0x7f00000016c0)=""/160, 0xa0}, {&(0x7f0000001780)=""/145, 0x91}, {&(0x7f0000001840)=""/186, 0xba}], 0xa, &(0x7f00000019c0)=""/174, 0xae}, 0x0) 13:04:36 executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), r1) (async) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x1409, 0x2, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x280488c4}, 0x20000000) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='stats=global,stats=global,stats=global,stats=']) syz_open_dev$tty20(0xc, 0x4, 0x1) 13:04:36 executing program 4: unshare(0x20000) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x140b, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004081) 13:04:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x3}, 0x0) 13:04:36 executing program 1: ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000040)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x62017, 0x0) [ 1849.447803][T22378] wg1 speed is unknown, defaulting to 1000 [ 1849.460389][T22378] wg1 speed is unknown, defaulting to 1000 [ 1849.468805][T22378] wg1 speed is unknown, defaulting to 1000 [ 1849.476572][T22378] wg1 speed is unknown, defaulting to 1000 [ 1849.483039][T22378] wg1 speed is unknown, defaulting to 1000 [ 1849.491666][T22378] wg1 speed is unknown, defaulting to 1000 13:04:36 executing program 0: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000000)={0x6f9}) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) sendto$ax25(0xffffffffffffffff, &(0x7f00000000c0)="2f1ba9ea7ae243aa1c988c57af16cb0846c2f10a98246d8c4c1f35edd8cc564713b755c8b8e2e2862fd74da935946efedfa6fe6dbe84d1adce23e78d7c75a10a110c0ccdcbdd226af6db54c397f1867bf2da6637bd814919a9dce3e7ad0ae76004907c3bc6914f6ca39c64f339518e9175a8211b900dc8dad6cf2bacd7be68ae770eaffd7487d3d82333eadbf7452216e56ab411ff1dc188c064b72f7b6d836a4c4fe0df2b2f2fb4285d7958eba8a2095ddceb4169", 0xb5, 0x40050, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) getitimer(0x2, &(0x7f0000000080)) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000280)=@can, 0x80, &(0x7f0000001900)=[{&(0x7f0000000300)=""/170, 0xaa}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/199, 0xc7}, {&(0x7f00000014c0)=""/92, 0x5c}, {&(0x7f0000001540)=""/74, 0x4a}, {&(0x7f00000015c0)=""/222, 0xde}, {&(0x7f00000016c0)=""/160, 0xa0}, {&(0x7f0000001780)=""/145, 0x91}, {&(0x7f0000001840)=""/186, 0xba}], 0xa, &(0x7f00000019c0)=""/174, 0xae}, 0x0) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000000)={0x6f9}) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) sendto$ax25(0xffffffffffffffff, &(0x7f00000000c0)="2f1ba9ea7ae243aa1c988c57af16cb0846c2f10a98246d8c4c1f35edd8cc564713b755c8b8e2e2862fd74da935946efedfa6fe6dbe84d1adce23e78d7c75a10a110c0ccdcbdd226af6db54c397f1867bf2da6637bd814919a9dce3e7ad0ae76004907c3bc6914f6ca39c64f339518e9175a8211b900dc8dad6cf2bacd7be68ae770eaffd7487d3d82333eadbf7452216e56ab411ff1dc188c064b72f7b6d836a4c4fe0df2b2f2fb4285d7958eba8a2095ddceb4169", 0xb5, 0x40050, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) getitimer(0x2, &(0x7f0000000080)) (async) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000280)=@can, 0x80, &(0x7f0000001900)=[{&(0x7f0000000300)=""/170, 0xaa}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/199, 0xc7}, {&(0x7f00000014c0)=""/92, 0x5c}, {&(0x7f0000001540)=""/74, 0x4a}, {&(0x7f00000015c0)=""/222, 0xde}, {&(0x7f00000016c0)=""/160, 0xa0}, {&(0x7f0000001780)=""/145, 0x91}, {&(0x7f0000001840)=""/186, 0xba}], 0xa, &(0x7f00000019c0)=""/174, 0xae}, 0x0) (async) 13:04:36 executing program 1: ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000040)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x62017, 0x0) ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000040)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x62017, 0x0) (async) 13:04:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x4}, 0x0) [ 1849.565037][T22416] binder: Bad value for 'stats' 13:04:36 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[]) 13:04:36 executing program 4: unshare(0x20000) (async) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x140b, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004081) 13:04:36 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"/296], 0x128}, 0x1, 0x0, 0x0, 0x98b954f7331114c3}, 0x880) (async) socketpair(0xb, 0x800, 0x7f, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="10000000121400022bbd7000fbdbdf251b544b9628ea659ddd28585b8713a4dd1214f78cb1a0828a39803e30af5ac3d1c53b29dfd3760d61b12354a97d535039a9e2fe6a395b1dfbf14ae8402e9aba065a7b119dce6fa9c34c6c2277ae43a28779793503d3681510dd97dd6b8ecd3c6e460c54da7e48dda44b7e0a27e3fe76f1e48666f34f100819448eb4c750cc1d519ca782d4b4422a8fcbfda4f149ecc99e09b97575a77949c56aa3fb469a861c0f7a13360d2df10691565ac52451c31a002125d3879d005fe91400"/214], 0x10}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) (async) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8060010}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001214100029bd7000fddbdf2508004f000100000008000100b90000000800150001000000080001e08382391dd112a04a2e992600000000000800030002000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x20, 0x1411, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 13:04:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x5}, 0x0) 13:04:36 executing program 1: ioctl$SIOCAX25ADDFWD(0xffffffffffffffff, 0x89ea, &(0x7f0000000040)={@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) (async) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs2\x00', 0x0, 0x62017, 0x0) 13:04:36 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[]) 13:04:36 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x541000, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x31b001, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x3, "a0f2688759962e670d58ae9bd800708c6566849f0f29ca31107f9d2fea4accb6"}) 13:04:36 executing program 0: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000000)={0x6f9}) (async, rerun: 32) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 32) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) sendto$ax25(0xffffffffffffffff, &(0x7f00000000c0)="2f1ba9ea7ae243aa1c988c57af16cb0846c2f10a98246d8c4c1f35edd8cc564713b755c8b8e2e2862fd74da935946efedfa6fe6dbe84d1adce23e78d7c75a10a110c0ccdcbdd226af6db54c397f1867bf2da6637bd814919a9dce3e7ad0ae76004907c3bc6914f6ca39c64f339518e9175a8211b900dc8dad6cf2bacd7be68ae770eaffd7487d3d82333eadbf7452216e56ab411ff1dc188c064b72f7b6d836a4c4fe0df2b2f2fb4285d7958eba8a2095ddceb4169", 0xb5, 0x40050, &(0x7f0000000180)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) (async) getitimer(0x2, &(0x7f0000000080)) recvmsg$can_j1939(0xffffffffffffffff, &(0x7f0000001a80)={&(0x7f0000000280)=@can, 0x80, &(0x7f0000001900)=[{&(0x7f0000000300)=""/170, 0xaa}, {&(0x7f0000000200)=""/7, 0x7}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/199, 0xc7}, {&(0x7f00000014c0)=""/92, 0x5c}, {&(0x7f0000001540)=""/74, 0x4a}, {&(0x7f00000015c0)=""/222, 0xde}, {&(0x7f00000016c0)=""/160, 0xa0}, {&(0x7f0000001780)=""/145, 0x91}, {&(0x7f0000001840)=""/186, 0xba}], 0xa, &(0x7f00000019c0)=""/174, 0xae}, 0x0) 13:04:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x6}, 0x0) 13:04:36 executing program 2: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[]) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', &(0x7f0000000280), 0x0, &(0x7f0000000000)=ANY=[]) (async) 13:04:36 executing program 4: unshare(0x20000) (async) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x140b, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) (async) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004081) 13:04:36 executing program 1: socketpair(0x10, 0x3, 0x10000, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000180)={@local, @broadcast, 0x1, "84a1bf957baeaac655338e3028b7a3f662ad63856229c3c09dc744e42834a957", 0x7ff, 0x8, 0x8001, 0x9}, 0x3c) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x30241c, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) socketpair(0x9, 0x80000, 0x3, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f00000004c0)) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000440), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000dc", @ANYRES16=r5, @ANYBLOB="01000000000000000000040000000c00018008000700", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r5, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x84) 13:04:36 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x541000, 0x0) (async) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x31b001, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x3, "a0f2688759962e670d58ae9bd800708c6566849f0f29ca31107f9d2fea4accb6"}) 13:04:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x7}, 0x0) 13:04:36 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x6}, 0x0) 13:04:36 executing program 1: socketpair(0x10, 0x3, 0x10000, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000180)={@local, @broadcast, 0x1, "84a1bf957baeaac655338e3028b7a3f662ad63856229c3c09dc744e42834a957", 0x7ff, 0x8, 0x8001, 0x9}, 0x3c) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x30241c, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) socketpair(0x9, 0x80000, 0x3, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f00000004c0)) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000440), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000dc", @ANYRES16=r5, @ANYBLOB="01000000000000000000040000000c00018008000700", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r5, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x84) socketpair(0x10, 0x3, 0x10000, &(0x7f0000000140)) (async) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000180)={@local, @broadcast, 0x1, "84a1bf957baeaac655338e3028b7a3f662ad63856229c3c09dc744e42834a957", 0x7ff, 0x8, 0x8001, 0x9}, 0x3c) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x30241c, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) socketpair(0x9, 0x80000, 0x3, &(0x7f0000000480)) (async) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f00000004c0)) (async) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000440), 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000dc", @ANYRES16=r5, @ANYBLOB="01000000000000000000040000000c00018008000700", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r5, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x84) (async) 13:04:36 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x12a0003, 0x0) 13:04:36 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x541000, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x31b001, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x3, "a0f2688759962e670d58ae9bd800708c6566849f0f29ca31107f9d2fea4accb6"}) 13:04:36 executing program 4: unshare(0x20000) unshare(0x20000000) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000200)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) unshare(0xbd814a4664c2ab8f) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38}) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x2, 0x4, 0xb1f, 0xa, 0x7, "7051127ad49d0c4b"}) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x42100, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000a14000428bd7000fbdbdf2500000300000000002f7b4491adf828e0d1513c0272dd8cda293742423f3826421e65b38d08d100000000000000943a43df9786be88d1c13224c734fbaa56a465ab976078249bf17622018721e5998f"], 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x44814) 13:04:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x9}, 0x0) 13:04:36 executing program 2: unshare(0x20000) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x140b, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004081) 13:04:36 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x12a0003, 0x0) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x12a0003, 0x0) (async) 13:04:36 executing program 1: socketpair(0x10, 0x3, 0x10000, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$MRT_DEL_MFC_PROXY(r0, 0x0, 0xd3, &(0x7f0000000180)={@local, @broadcast, 0x1, "84a1bf957baeaac655338e3028b7a3f662ad63856229c3c09dc744e42834a957", 0x7ff, 0x8, 0x8001, 0x9}, 0x3c) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs2\x00', &(0x7f00000000c0), 0x30241c, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"]) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000040), 0x4) (async) socketpair(0x9, 0x80000, 0x3, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f00000004c0)) setsockopt$MRT_ASSERT(r1, 0x0, 0xcf, &(0x7f0000000440), 0x4) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000dc", @ANYRES16=r5, @ANYBLOB="01000000000000000000040000000c00018008000700", @ANYRES32=0x0, @ANYBLOB], 0x20}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r5, 0x800, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000844}, 0x84) 13:04:36 executing program 3: sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140c, 0x4, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}]}, 0x18}}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004080}, 0x4004001) 13:04:36 executing program 4: unshare(0x20000) (async) unshare(0x20000000) (async) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000200)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) (async) unshare(0xbd814a4664c2ab8f) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) (async) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38}) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x2, 0x4, 0xb1f, 0xa, 0x7, "7051127ad49d0c4b"}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x42100, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000a14000428bd7000fbdbdf2500000300000000002f7b4491adf828e0d1513c0272dd8cda293742423f3826421e65b38d08d100000000000000943a43df9786be88d1c13224c734fbaa56a465ab976078249bf17622018721e5998f"], 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x44814) 13:04:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0xf}, 0x0) 13:04:36 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x12a0003, 0x0) 13:04:36 executing program 3: sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140c, 0x4, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}]}, 0x18}}, 0x10) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) (rerun: 64) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004080}, 0x4004001) 13:04:36 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) 13:04:36 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0xf0}, 0x0) 13:04:36 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$binderfs(&(0x7f00000001c0), &(0x7f0000000200)='./binderfs\x00', &(0x7f0000000280), 0x208400, &(0x7f00000002c0)={[{@stats}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x7}}, {@stats}, {@max={'max', 0x3d, 0x8}}, {@max={'max', 0x3d, 0xff}}, {}]}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r1, 0x101, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 13:04:36 executing program 2: unshare(0x20000) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x140b, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004081) 13:04:37 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) 13:04:37 executing program 4: unshare(0x20000) (async) unshare(0x20000000) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000200)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) (async) unshare(0xbd814a4664c2ab8f) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) (async) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38}) (async) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x2, 0x4, 0xb1f, 0xa, 0x7, "7051127ad49d0c4b"}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x42100, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000a14000428bd7000fbdbdf2500000300000000002f7b4491adf828e0d1513c0272dd8cda293742423f3826421e65b38d08d100000000000000943a43df9786be88d1c13224c734fbaa56a465ab976078249bf17622018721e5998f"], 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x44814) 13:04:37 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) mount$binderfs(&(0x7f00000001c0), &(0x7f0000000200)='./binderfs\x00', &(0x7f0000000280), 0x208400, &(0x7f00000002c0)={[{@stats}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x7}}, {@stats}, {@max={'max', 0x3d, 0x8}}, {@max={'max', 0x3d, 0xff}}, {}]}) (async) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) (async) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r1, 0x101, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 13:04:37 executing program 3: sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x140c, 0x4, 0x70bd2a, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}]}, 0x18}}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, 0x0, 0x800, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004080}, 0x4004001) 13:04:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x300}, 0x0) 13:04:37 executing program 2: unshare(0x20000) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r2, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x140b, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r0, 0x800, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x20004081) 13:04:37 executing program 4: unshare(0x20000) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x60}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x1412, 0x800, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0xc0802, 0x0) read$rfkill(r2, &(0x7f00000001c0), 0x8) 13:04:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x500}, 0x0) 13:04:37 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x400002, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) 13:04:37 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x290a01, 0x0) 13:04:37 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mount$binderfs(&(0x7f00000001c0), &(0x7f0000000200)='./binderfs\x00', &(0x7f0000000280), 0x208400, &(0x7f00000002c0)={[{@stats}, {@max={'max', 0x3d, 0x4}}, {@max={'max', 0x3d, 0x7}}, {@stats}, {@max={'max', 0x3d, 0x8}}, {@max={'max', 0x3d, 0xff}}, {}]}) syz_genetlink_get_family_id$wireguard(&(0x7f0000000e80), r0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xb0, r1, 0x101, 0x70bd2b, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x32}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfd}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) 13:04:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x600}, 0x0) 13:04:37 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x1) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x4}, 0x1}, 0x18) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) ioctl$TIOCEXCL(r1, 0x540c) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1ff, 0x400000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x811}, 0x4800) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x0, 0xff, 0x4, &(0x7f0000000080)={0x7, "c284747ad8f6d33ff2cfcada5739bf3ba0afcfbbb3f65020f537b03aed51d9a61b"}}) 13:04:37 executing program 2: unshare(0x20000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x140b, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) 13:04:37 executing program 4: unshare(0x20000) (async) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x60}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x1412, 0x800, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0xc0802, 0x0) read$rfkill(r2, &(0x7f00000001c0), 0x8) 13:04:37 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x290a01, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x290a01, 0x0) (async) 13:04:37 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1411, 0x300, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4e885}, 0x4000010) 13:04:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x700}, 0x0) 13:04:37 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x290a01, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x290a01, 0x0) (async) 13:04:37 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x1) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x4}, 0x1}, 0x18) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) ioctl$TIOCEXCL(r1, 0x540c) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1ff, 0x400000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x811}, 0x4800) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x0, 0xff, 0x4, &(0x7f0000000080)={0x7, "c284747ad8f6d33ff2cfcada5739bf3ba0afcfbbb3f65020f537b03aed51d9a61b"}}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x1) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x4}, 0x1}, 0x18) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) (async) ioctl$TIOCEXCL(r1, 0x540c) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1ff, 0x400000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x811}, 0x4800) (async) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x0, 0xff, 0x4, &(0x7f0000000080)={0x7, "c284747ad8f6d33ff2cfcada5739bf3ba0afcfbbb3f65020f537b03aed51d9a61b"}}) (async) 13:04:37 executing program 4: unshare(0x20000) (async) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x1f}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x60}, 0x1, 0x0, 0x0, 0x20020800}, 0x0) (async) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r1, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, 0x1412, 0x800, 0x70bd29, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0xc0802, 0x0) read$rfkill(r2, &(0x7f00000001c0), 0x8) 13:04:37 executing program 2: unshare(0x20000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x140b, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) 13:04:37 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1411, 0x300, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4e885}, 0x4000010) 13:04:37 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x599100, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000040)=0x5) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000140)=0x6) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x4, 0xff, 0x1000, 0x99, 0x16, "c42fbfb6f53d73c7"}) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x6, 0x143200) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) 13:04:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x900}, 0x0) 13:04:37 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x1411, 0x300, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4e885}, 0x4000010) 13:04:37 executing program 4: unshare(0x42020900) 13:04:37 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x1) r0 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x4}, 0x1}, 0x18) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) ioctl$TIOCEXCL(r1, 0x540c) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1ff, 0x400000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x811}, 0x4800) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x0, 0xff, 0x4, &(0x7f0000000080)={0x7, "c284747ad8f6d33ff2cfcada5739bf3ba0afcfbbb3f65020f537b03aed51d9a61b"}}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) ioctl$I2C_TIMEOUT(0xffffffffffffffff, 0x702, 0x1) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, 0x0, 0x2, {0x2, 0x0, 0x4}, 0x1}, 0x18) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) (async) ioctl$TIOCEXCL(r1, 0x540c) (async) syz_open_dev$I2C(&(0x7f0000000000), 0x1ff, 0x400000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r4, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x811}, 0x4800) (async) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f00000000c0)={0x0, 0xff, 0x4, &(0x7f0000000080)={0x7, "c284747ad8f6d33ff2cfcada5739bf3ba0afcfbbb3f65020f537b03aed51d9a61b"}}) (async) 13:04:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0xf00}, 0x0) 13:04:37 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x599100, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000040)=0x5) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000140)=0x6) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x4, 0xff, 0x1000, 0x99, 0x16, "c42fbfb6f53d73c7"}) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x6, 0x143200) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x599100, 0x0) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000040)=0x5) (async) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000140)=0x6) (async) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x4, 0xff, 0x1000, 0x99, 0x16, "c42fbfb6f53d73c7"}) (async) syz_open_dev$sg(&(0x7f00000000c0), 0x6, 0x143200) (async) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) (async) 13:04:37 executing program 2: unshare(0x20000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x140b, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) 13:04:37 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = getuid() mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x20802, &(0x7f00000000c0)={[{@stats}], [{@fsmagic={'fsmagic', 0x3d, 0xffffffffffffffff}}, {@audit}, {@uid_gt={'uid>', r0}}, {@context={'context', 0x3d, 'user_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '&'}}, {@subj_user={'subj_user', 0x3d, '[,\x06+)^@@\xde{{,.@::\xb4%:}{-/--{/!]'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@smackfstransmute={'smackfstransmute', 0x3d, './binderfs\x00'}}, {@euid_gt}]}) 13:04:37 executing program 4: unshare(0x42020900) 13:04:37 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x599100, 0x0) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SW_SYNC_IOC_INC(r1, 0x40045701, &(0x7f0000000040)=0x5) (async) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000140)=0x6) (async) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x4, 0xff, 0x1000, 0x99, 0x16, "c42fbfb6f53d73c7"}) r2 = syz_open_dev$sg(&(0x7f00000000c0), 0x6, 0x143200) ioctl$SCSI_IOCTL_SYNC(r2, 0x4) 13:04:37 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) r0 = getuid() mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x20802, &(0x7f00000000c0)={[{@stats}], [{@fsmagic={'fsmagic', 0x3d, 0xffffffffffffffff}}, {@audit}, {@uid_gt={'uid>', r0}}, {@context={'context', 0x3d, 'user_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '&'}}, {@subj_user={'subj_user', 0x3d, '[,\x06+)^@@\xde{{,.@::\xb4%:}{-/--{/!]'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@smackfstransmute={'smackfstransmute', 0x3d, './binderfs\x00'}}, {@euid_gt}]}) 13:04:37 executing program 2: unshare(0x20000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x140b, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) 13:04:37 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) r1 = getuid() ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r1}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) 13:04:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x2659}, 0x0) 13:04:37 executing program 4: unshare(0x42020900) 13:04:37 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) r0 = getuid() mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x20802, &(0x7f00000000c0)={[{@stats}], [{@fsmagic={'fsmagic', 0x3d, 0xffffffffffffffff}}, {@audit}, {@uid_gt={'uid>', r0}}, {@context={'context', 0x3d, 'user_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '&'}}, {@subj_user={'subj_user', 0x3d, '[,\x06+)^@@\xde{{,.@::\xb4%:}{-/--{/!]'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@smackfstransmute={'smackfstransmute', 0x3d, './binderfs\x00'}}, {@euid_gt}]}) 13:04:37 executing program 4: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000000)={0x2}) socketpair(0x26, 0x5, 0xa6a, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0x1, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) 13:04:37 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) (async) r1 = getuid() ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r1}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) 13:04:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x3f00}, 0x0) 13:04:37 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xe94, "15c582eb2d2a633c1d8445c64a52e4601e512788b7ea78f8e1956529991d24e0"}) 13:04:37 executing program 2: unshare(0x20000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) 13:04:38 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0x266c2e, 0x33dd2f}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x6, r1, 0x0, r2}) 13:04:38 executing program 4: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000000)={0x2}) socketpair(0x26, 0x5, 0xa6a, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0x1, 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000000)={0x2}) (async) socketpair(0x26, 0x5, 0xa6a, &(0x7f0000000040)) (async) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0x1, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) (async) 13:04:38 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xe94, "15c582eb2d2a633c1d8445c64a52e4601e512788b7ea78f8e1956529991d24e0"}) 13:04:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x5926}, 0x0) 13:04:38 executing program 1: r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) r1 = getuid() ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r1}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000080)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) (async) getuid() (async) ioctl$SIOCAX25DELUID(r0, 0x89e2, &(0x7f0000000000)={0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, r1}) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) 13:04:38 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0x266c2e, 0x33dd2f}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x6, r1, 0x0, r2}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r1}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0x266c2e, 0x33dd2f}) (async) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x6, r1, 0x0, r2}) (async) 13:04:38 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0xe94, "15c582eb2d2a633c1d8445c64a52e4601e512788b7ea78f8e1956529991d24e0"}) 13:04:38 executing program 4: ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000000)={0x2}) socketpair(0x26, 0x5, 0xa6a, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000080)=0x1, 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg2\x00'}) 13:04:38 executing program 2: unshare(0x20000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 13:04:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0xf000}, 0x0) 13:04:38 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x3a8055, 0x0) 13:04:38 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x22fc01, 0x0) 13:04:38 executing program 4: unshare(0x20000) unshare(0x100) 13:04:38 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r1}) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0x266c2e, 0x33dd2f}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x6, r1, 0x0, r2}) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000040)={0x38, 0x5, r1}) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000000)={0x38, 0x7, 0xffffffffffffffff, 0x0, 0x10001, 0x0, 0x1, 0x266c2e, 0x33dd2f}) (async) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000040)={0x38, 0x6, r1, 0x0, r2}) (async) 13:04:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x30000}, 0x0) 13:04:38 executing program 2: unshare(0x20000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) 13:04:38 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x3a8055, 0x0) 13:04:38 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x22fc01, 0x0) 13:04:38 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x140a, 0x400, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xfffffffe}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2bbda3d2b38ea155429504185f0bae4196377000fedbdf2508000100020000000800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x28040) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @bcast}, [@rose, @null, @rose, @null, @null, @default, @null, @null]}, &(0x7f0000000300)=0x48) 13:04:38 executing program 4: unshare(0x20000) (async, rerun: 32) unshare(0x100) (rerun: 32) 13:04:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x34000}, 0x0) 13:04:38 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x22fc01, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x22fc01, 0x0) (async) 13:04:38 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x3a8055, 0x0) 13:04:38 executing program 2: unshare(0x20000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) 13:04:38 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair(0x2a, 0x5, 0x800, &(0x7f00000001c0)={0xffffffffffffffff}) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9a) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000040)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0xb523, 0x6464, 0x9, 0xe7, 0xe, "11869a9aab6b266a"}) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000140)={0x2, &(0x7f0000000200)=[{}, {}]}) 13:04:38 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x140a, 0x400, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xfffffffe}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2bbda3d2b38ea155429504185f0bae4196377000fedbdf2508000100020000000800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x28040) (async) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @bcast}, [@rose, @null, @rose, @null, @null, @default, @null, @null]}, &(0x7f0000000300)=0x48) 13:04:38 executing program 1: ioctl$SG_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x1000020, 0x0) 13:04:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x400300}, 0x0) 13:04:38 executing program 2: unshare(0x20000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) 13:04:38 executing program 1: ioctl$SG_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x1000020, 0x0) 13:04:38 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) socketpair(0x2a, 0x5, 0x800, &(0x7f00000001c0)={0xffffffffffffffff}) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9a) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000040)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0xb523, 0x6464, 0x9, 0xe7, 0xe, "11869a9aab6b266a"}) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000140)={0x2, &(0x7f0000000200)=[{}, {}]}) syz_open_dev$ttys(0xc, 0x2, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async) socketpair(0x2a, 0x5, 0x800, &(0x7f00000001c0)) (async) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) (async) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) (async) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9a) (async) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000040)) (async) syz_open_dev$ptys(0xc, 0x3, 0x1) (async) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0xb523, 0x6464, 0x9, 0xe7, 0xe, "11869a9aab6b266a"}) (async) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000140)={0x2, &(0x7f0000000200)=[{}, {}]}) (async) 13:04:38 executing program 4: unshare(0x20000) unshare(0x100) unshare(0x20000) (async) unshare(0x100) (async) 13:04:38 executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x140a, 0x400, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x2}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0xfffffffe}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="2bbda3d2b38ea155429504185f0bae4196377000fedbdf2508000100020000000800010001000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x28040) (async) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @bcast}, [@rose, @null, @rose, @null, @null, @default, @null, @null]}, &(0x7f0000000300)=0x48) 13:04:38 executing program 1: ioctl$SG_BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0x1000020, 0x0) 13:04:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0xf0ffff}, 0x0) 13:04:38 executing program 2: unshare(0x20000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 13:04:38 executing program 3: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) socketpair(0x2a, 0x5, 0x800, &(0x7f00000001c0)={0xffffffffffffffff}) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) (async) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000000)) (async) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9a) ioctl$TIOCGDEV(r0, 0x80045432, &(0x7f0000000040)) r2 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0xb523, 0x6464, 0x9, 0xe7, 0xe, "11869a9aab6b266a"}) (async, rerun: 32) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000140)={0x2, &(0x7f0000000200)=[{}, {}]}) (rerun: 32) 13:04:38 executing program 0: sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000b14000425bd7000fddbdf2508003f000400000008003f000100000008000100010000000800010001000000f0a4904852ed7ea2b6525932f055b1be7ee139b83c11550d273836a5038d1edd2f1feaf6e80292e1e933d72fde0edea332d213887d772d42dd6dd820f36aff322bd02fc6af1bb273e917f3cd9c1dbb9d2b065eef9e0f9296299cf04dd49db688881513baf287bcced92e3da96eeac41ecdf1ce555c9ffb535d90ab07bc66ce262d4a7e47e8f23d4b7558292c0c8a30d56619f81464a06ced433f17639c3ebbc1d5a4a412172a"], 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x240040c4) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) 13:04:38 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x2088414, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x68, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r0, 0x2e2d96daf30e6e6c, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2fa1d5b9c1bf159d}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 13:04:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x1000000}, 0x0) 13:04:39 executing program 2: unshare(0x20000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) 13:04:39 executing program 3: syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), 0xffffffffffffffff) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x2a, 0x5, 0x400008, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x38}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000c00)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000c40)={0x38, 0x6, r2}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc090000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x9fc}, 0x1, 0x0, 0x0, 0x10}, 0x810) 13:04:39 executing program 4: unshare(0x20000) unshare(0x40400) [ 1852.416832][T22750] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 13:04:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x2000000}, 0x0) 13:04:39 executing program 0: sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000b14000425bd7000fddbdf2508003f000400000008003f000100000008000100010000000800010001000000f0a4904852ed7ea2b6525932f055b1be7ee139b83c11550d273836a5038d1edd2f1feaf6e80292e1e933d72fde0edea332d213887d772d42dd6dd820f36aff322bd02fc6af1bb273e917f3cd9c1dbb9d2b065eef9e0f9296299cf04dd49db688881513baf287bcced92e3da96eeac41ecdf1ce555c9ffb535d90ab07bc66ce262d4a7e47e8f23d4b7558292c0c8a30d56619f81464a06ced433f17639c3ebbc1d5a4a412172a"], 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x240040c4) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) 13:04:39 executing program 3: syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), 0xffffffffffffffff) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socketpair(0x2a, 0x5, 0x400008, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x38}) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000c00)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000c40)={0x38, 0x6, r2}) (async) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc090000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x9fc}, 0x1, 0x0, 0x0, 0x10}, 0x810) 13:04:39 executing program 2: unshare(0x20000) 13:04:39 executing program 4: unshare(0x20000) (async) unshare(0x40400) 13:04:39 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x2088414, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x68, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r0, 0x2e2d96daf30e6e6c, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2fa1d5b9c1bf159d}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x0) mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x2088414, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x68, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r0, 0x2e2d96daf30e6e6c, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2fa1d5b9c1bf159d}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x0) (async) 13:04:39 executing program 0: sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000000b14000425bd7000fddbdf2508003f000400000008003f000100000008000100010000000800010001000000f0a4904852ed7ea2b6525932f055b1be7ee139b83c11550d273836a5038d1edd2f1feaf6e80292e1e933d72fde0edea332d213887d772d42dd6dd820f36aff322bd02fc6af1bb273e917f3cd9c1dbb9d2b065eef9e0f9296299cf04dd49db688881513baf287bcced92e3da96eeac41ecdf1ce555c9ffb535d90ab07bc66ce262d4a7e47e8f23d4b7558292c0c8a30d56619f81464a06ced433f17639c3ebbc1d5a4a412172a"], 0x30}, 0x1, 0x0, 0x0, 0x4050}, 0x240040c4) (async) mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) 13:04:39 executing program 3: syz_genetlink_get_family_id$nl802154(&(0x7f0000000b00), 0xffffffffffffffff) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair(0x2a, 0x5, 0x400008, &(0x7f0000000b40)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_PROMISC(r0, 0x6b, 0x2, &(0x7f0000000b80), &(0x7f0000000bc0)=0x4) (async) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000400)={0x38}) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000c00)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000c40)={0x38, 0x6, r2}) (async) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[@ANYBLOB="fc090000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x9fc}, 0x1, 0x0, 0x0, 0x10}, 0x810) 13:04:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x3000000}, 0x0) 13:04:39 executing program 2: unshare(0x0) 13:04:39 executing program 4: unshare(0x20000) unshare(0x40400) unshare(0x20000) (async) unshare(0x40400) (async) 13:04:39 executing program 0: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x32a0859, 0x0) [ 1852.642640][T22776] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. 13:04:39 executing program 2: unshare(0x0) 13:04:39 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x309601, 0x0) 13:04:39 executing program 1: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x2088414, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x68, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) (async) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r0, 0x2e2d96daf30e6e6c, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2fa1d5b9c1bf159d}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 13:04:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x4000000}, 0x0) 13:04:39 executing program 0: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x32a0859, 0x0) 13:04:39 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x309601, 0x0) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x309601, 0x0) (async) 13:04:39 executing program 2: unshare(0x0) 13:04:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x5000000}, 0x0) 13:04:39 executing program 4: unshare(0x20000) unshare(0x0) 13:04:39 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f00000001c0)='./binderfs2\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={[{@stats}, {@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x29}}, {@stats}, {@max={'max', 0x3d, 0x2}}], [{@appraise}, {@subj_type={'subj_type', 0x3d, './binderfs\x00'}}, {@permit_directio}]}) 13:04:39 executing program 2: mount$binderfs(0x0, &(0x7f0000000000)='./binderfs\x00', 0x0, 0x2088414, 0x0) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_KEY(r2, &(0x7f0000000540)={&(0x7f0000000440), 0xc, &(0x7f0000000500)={&(0x7f00000007c0)={0x68, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x10, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3395bcff22de72261c78f45ee1d36c76"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}]}]}, 0x68}}, 0x0) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x30, r3, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4000000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r4, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, r0, 0x2e2d96daf30e6e6c, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2}, @NL802154_ATTR_PAN_ID={0x6, 0x9, 0x2fa1d5b9c1bf159d}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x38}, 0x1, 0x0, 0x0, 0xc1}, 0x0) 13:04:39 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x309601, 0x0) 13:04:39 executing program 0: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0x32a0859, 0x0) 13:04:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x6000000}, 0x0) [ 1852.945391][ T1210] ieee802154 phy0 wpan0: encryption failed: -22 13:04:39 executing program 4: unshare(0x20000) unshare(0x0) 13:04:39 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f00000001c0)='./binderfs2\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={[{@stats}, {@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x29}}, {@stats}, {@max={'max', 0x3d, 0x2}}], [{@appraise}, {@subj_type={'subj_type', 0x3d, './binderfs\x00'}}, {@permit_directio}]}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f00000001c0)='./binderfs2\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={[{@stats}, {@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x29}}, {@stats}, {@max={'max', 0x3d, 0x2}}], [{@appraise}, {@subj_type={'subj_type', 0x3d, './binderfs\x00'}}, {@permit_directio}]}) (async) 13:04:39 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r0 = getuid() r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r2 = getuid() ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r2}) ioprio_set$uid(0x0, r0, 0x2007) 13:04:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x7000000}, 0x0) [ 1853.048367][T22823] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. 13:04:39 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) 13:04:39 executing program 2: unshare(0x20000) unshare(0x0) 13:04:39 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f00000001c0)='./binderfs2\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000200)={[{@stats}, {@max={'max', 0x3d, 0x1}}, {@max={'max', 0x3d, 0x29}}, {@stats}, {@max={'max', 0x3d, 0x2}}], [{@appraise}, {@subj_type={'subj_type', 0x3d, './binderfs\x00'}}, {@permit_directio}]}) 13:04:39 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r0 = getuid() r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r2 = getuid() ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r2}) ioprio_set$uid(0x0, r0, 0x2007) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) getuid() (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) getuid() (async) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r2}) (async) ioprio_set$uid(0x0, r0, 0x2007) (async) 13:04:39 executing program 4: unshare(0x20000) unshare(0x0) unshare(0x20000) (async) unshare(0x0) (async) 13:04:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x9000000}, 0x0) 13:04:39 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) 13:04:39 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETAF(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1f0e191ecb9ee4a9"}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) 13:04:39 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r0 = getuid() r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) r2 = getuid() ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r2}) ioprio_set$uid(0x0, r0, 0x2007) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) getuid() (async) syz_init_net_socket$ax25(0x3, 0x3, 0x0) (async) ioctl$SIOCAX25DELFWD(r1, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) getuid() (async) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000000)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, r2}) (async) ioprio_set$uid(0x0, r0, 0x2007) (async) 13:04:39 executing program 2: unshare(0x20000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) 13:04:39 executing program 4: getpeername$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@netrom, @rose, @bcast, @bcast, @remote, @remote, @netrom, @rose]}, &(0x7f0000000080)=0x48) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) sendto$ax25(r0, &(0x7f00000000c0), 0x0, 0x4048080, &(0x7f0000000180)={{0x3, @null, 0x1}, [@null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) unshare(0x20000) 13:04:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0xf000000}, 0x0) 13:04:40 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) 13:04:40 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETAF(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1f0e191ecb9ee4a9"}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETAF(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1f0e191ecb9ee4a9"}) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) 13:04:40 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x10801, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000240)={0x2, "4b2cdb8740d54d684c0ce14fa8934ac80f14fab3f124d4278d7f719c4a3c4229"}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x40090}, 0xc080) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000000)=0x4) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @rose}, [@rose, @default, @default, @null, @netrom, @default, @rose, @null]}, &(0x7f0000000140)=0x48) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000040)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xc, 0x1, 0x3, [@default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) 13:04:40 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x80000) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x4}) 13:04:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x26590000}, 0x0) 13:04:40 executing program 4: getpeername$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@netrom, @rose, @bcast, @bcast, @remote, @remote, @netrom, @rose]}, &(0x7f0000000080)=0x48) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) (async) sendto$ax25(r0, &(0x7f00000000c0), 0x0, 0x4048080, &(0x7f0000000180)={{0x3, @null, 0x1}, [@null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) (async) unshare(0x20000) 13:04:40 executing program 2: unshare(0x20000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) 13:04:40 executing program 1: r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TCSETAF(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1f0e191ecb9ee4a9"}) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$TCSETAF(r0, 0x402c542c, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "1f0e191ecb9ee4a9"}) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async) 13:04:40 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x10801, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000240)={0x2, "4b2cdb8740d54d684c0ce14fa8934ac80f14fab3f124d4278d7f719c4a3c4229"}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x40090}, 0xc080) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000000)=0x4) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @rose}, [@rose, @default, @default, @null, @netrom, @default, @rose, @null]}, &(0x7f0000000140)=0x48) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000040)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xc, 0x1, 0x3, [@default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x10801, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000240)={0x2, "4b2cdb8740d54d684c0ce14fa8934ac80f14fab3f124d4278d7f719c4a3c4229"}) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x40090}, 0xc080) (async) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000000)=0x4) (async) accept$ax25(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @rose}, [@rose, @default, @default, @null, @netrom, @default, @rose, @null]}, &(0x7f0000000140)=0x48) (async) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000040)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xc, 0x1, 0x3, [@default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) (async) 13:04:40 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x80000) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x4}) 13:04:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x3f000000}, 0x0) 13:04:40 executing program 4: getpeername$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@netrom, @rose, @bcast, @bcast, @remote, @remote, @netrom, @rose]}, &(0x7f0000000080)=0x48) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) sendto$ax25(r0, &(0x7f00000000c0), 0x0, 0x4048080, &(0x7f0000000180)={{0x3, @null, 0x1}, [@null, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48) unshare(0x20000) 13:04:40 executing program 0: r0 = syz_open_pts(0xffffffffffffffff, 0x80000) ioctl$TIOCL_GETSHIFTSTATE(r0, 0x541c, &(0x7f0000000000)={0x6, 0x4}) 13:04:40 executing program 1: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0xa8014, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x842804, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x8}}], [{@uid_eq}, {@audit}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0x9}}]}) 13:04:40 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x10801, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000240)={0x2, "4b2cdb8740d54d684c0ce14fa8934ac80f14fab3f124d4278d7f719c4a3c4229"}) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x40090}, 0xc080) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000000)=0x4) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @rose}, [@rose, @default, @default, @null, @netrom, @default, @rose, @null]}, &(0x7f0000000140)=0x48) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000040)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xc, 0x1, 0x3, [@default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x10801, 0x0) (async) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f00000002c0)={&(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r1, 0xc0285700, &(0x7f0000000240)={0x2, "4b2cdb8740d54d684c0ce14fa8934ac80f14fab3f124d4278d7f719c4a3c4229"}) (async) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x18}, 0x1, 0x0, 0x0, 0x40090}, 0xc080) (async) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000000)=0x4) (async) accept$ax25(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @rose}, [@rose, @default, @default, @null, @netrom, @default, @rose, @null]}, &(0x7f0000000140)=0x48) (async) ioctl$SIOCAX25CTLCON(r2, 0x89e8, &(0x7f0000000040)={@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xc, 0x1, 0x3, [@default, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) (async) 13:04:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x9effffff}, 0x0) 13:04:40 executing program 2: unshare(0x20000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) 13:04:40 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) ioctl$I2C_SLAVE_FORCE(0xffffffffffffffff, 0x706, 0x386) 13:04:40 executing program 1: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0xa8014, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x842804, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x8}}], [{@uid_eq}, {@audit}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0x9}}]}) 13:04:40 executing program 4: unshare(0x10000) 13:04:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0xf0ffffff}, 0x0) 13:04:40 executing program 2: unshare(0x20000) unshare(0x100) 13:04:40 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) 13:04:40 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) (async) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) (async) ioctl$I2C_SLAVE_FORCE(0xffffffffffffffff, 0x706, 0x386) 13:04:40 executing program 1: ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0xa8014, 0x0) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x842804, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x8}}], [{@uid_eq}, {@audit}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0x9}}]}) ioctl$TIOCL_GETSHIFTSTATE(0xffffffffffffffff, 0x541c, &(0x7f0000000180)) (async) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs2\x00', 0x0, 0xa8014, 0x0) (async) mount$binderfs(&(0x7f0000000000), &(0x7f0000000080)='./binderfs\x00', &(0x7f00000000c0), 0x842804, &(0x7f0000000100)={[{@max={'max', 0x3d, 0x8}}], [{@uid_eq}, {@audit}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@dont_measure}, {@fsmagic={'fsmagic', 0x3d, 0x9}}]}) (async) 13:04:40 executing program 4: unshare(0x10000) unshare(0x10000) (async) 13:04:40 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) 13:04:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0xfffff000}, 0x0) 13:04:40 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x14140, 0x0) 13:04:40 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01}) (async, rerun: 64) ioctl$I2C_SLAVE_FORCE(0xffffffffffffffff, 0x706, 0x386) (rerun: 64) 13:04:40 executing program 4: unshare(0x10000) 13:04:40 executing program 2: unshare(0x20000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_rdma(0x10, 0x3, 0x14) 13:04:40 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101100, 0x0) 13:04:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0xffffff7f}, 0x0) 13:04:40 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x14140, 0x0) 13:04:40 executing program 4: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x1, 0x200, 0x6, 0xb5, 0xd, "fa9756ea917d4305"}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x22) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) unshare(0x20000) 13:04:40 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x14340, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x2b) 13:04:40 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x78, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x20, 0x0}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x44}, 0x20000800) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000000)=0xfffffffb) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) 13:04:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0xffffff9e}, 0x0) 13:04:40 executing program 2: unshare(0x20000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r3, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x140b, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) 13:04:40 executing program 1: mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xa8014, 0x0) (async, rerun: 32) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x14140, 0x0) (rerun: 32) 13:04:40 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x14340, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x2b) 13:04:40 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x78, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x20, 0x0}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x44}, 0x20000800) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000000)=0xfffffffb) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x78, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x20, 0x0}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x44}, 0x20000800) (async) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000000)=0xfffffffb) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) (async) 13:04:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0xfffffff0}, 0x0) 13:04:40 executing program 4: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x1, 0x200, 0x6, 0xb5, 0xd, "fa9756ea917d4305"}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x22) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) unshare(0x20000) ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x1, 0x200, 0x6, 0xb5, 0xd, "fa9756ea917d4305"}) (async) syz_open_dev$tty20(0xc, 0x4, 0x1) (async) syz_open_dev$ttys(0xc, 0x2, 0x0) (async) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x22) (async) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) (async) unshare(0x20000) (async) 13:04:40 executing program 1: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = getuid() mount$binderfs(&(0x7f0000000000), &(0x7f0000000040)='./binderfs2\x00', &(0x7f0000000080), 0x20802, &(0x7f00000000c0)={[{@stats}], [{@fsmagic={'fsmagic', 0x3d, 0xffffffffffffffff}}, {@audit}, {@uid_gt={'uid>', r0}}, {@context={'context', 0x3d, 'user_u'}}, {@smackfsroot={'smackfsroot', 0x3d, '&'}}, {@subj_user={'subj_user', 0x3d, '[,\x06+)^@@\xde{{,.@::\xb4%:}{-/--{/!]'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@smackfstransmute={'smackfstransmute', 0x3d, './binderfs\x00'}}, {@euid_gt}]}) 13:04:40 executing program 2: unshare(0x20000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x140b, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000480)={'wpan0\x00'}) 13:04:40 executing program 0: mount$binderfs(0x0, &(0x7f0000000240)='./binderfs\x00', 0x0, 0x32a0859, 0x0) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x14340, 0x0) ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000040)=0x2b) 13:04:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x3000000000000}, 0x0) 13:04:41 executing program 3: r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x78, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x20, 0x0}}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x44}, 0x20000800) ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000000)=0xfffffffb) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r1, &(0x7f0000001000)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r1) 13:04:41 executing program 1: unshare(0x20000) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r4, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, 0x140b, 0x800, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_RES_CM_IDN={0x8, 0x3f, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x20004080) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_KEY={0x18, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3802f052c3fcc7bcca9cf6354fed5c4d"}]}]}, 0x34}}, 0x0) 13:04:41 executing program 4: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x1, 0x200, 0x6, 0xb5, 0xd, "fa9756ea917d4305"}) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) (async) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x22) (async, rerun: 32) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000000)) (async, rerun: 32) unshare(0x20000) 13:04:41 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x300}, 0x0) 13:04:41 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x3ff) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0xc202, 0x0) 13:04:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x40030000000000}, 0x0) 13:04:41 executing program 2: unshare(0x20000) unshare(0x20000000) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000200)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) unshare(0xbd814a4664c2ab8f) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38}) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x2, 0x4, 0xb1f, 0xa, 0x7, "7051127ad49d0c4b"}) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x42100, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000a14000428bd7000fbdbdf2500000300000000002f7b4491adf828e0d1513c0272dd8cda293742423f3826421e65b38d08d100000000000000943a43df9786be88d1c13224c734fbaa56a465ab976078249bf17622018721e5998f"], 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x44814) 13:04:41 executing program 0: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"/296], 0x128}, 0x1, 0x0, 0x0, 0x98b954f7331114c3}, 0x880) socketpair(0xb, 0x800, 0x7f, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="10000000121400022bbd7000fbdbdf251b544b9628ea659ddd28585b8713a4dd1214f78cb1a0828a39803e30af5ac3d1c53b29dfd3760d61b12354a97d535039a9e2fe6a395b1dfbf14ae8402e9aba065a7b119dce6fa9c34c6c2277ae43a28779793503d3681510dd97dd6b8ecd3c6e460c54da7e48dda44b7e0a27e3fe76f1e48666f34f100819448eb4c750cc1d519ca782d4b4422a8fcbfda4f149ecc99e09b97575a77949c56aa3fb469a861c0f7a13360d2df10691565ac52451c31a002125d3879d005fe91400"/214], 0x10}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(r0, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8060010}, 0xc, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001214100029bd7000fddbdf2508004f000100000008000100b90000000800150001000000080001e08382391dd112a04a2e992600000000000800030002000000"], 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_GET(r2, &(0x7f00000008c0)={&(0x7f0000000800), 0xc, &(0x7f0000000880)={0x0}}, 0x88085) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r2, &(0x7f0000000640)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000600)={&(0x7f00000003c0)={0x20, 0x1411, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x40001}, 0x4000) 13:04:41 executing program 4: unshare(0x20000) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x5, 0x4, 0xffff0000, 0xc3, 0x1}) unshare(0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 13:04:41 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x3ff) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0xc202, 0x0) 13:04:41 executing program 1: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0) unshare(0x2000400) 13:04:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0xf0ffffffffffff}, 0x0) 13:04:41 executing program 2: unshare(0x20000) unshare(0x20000000) r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000001180)={@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) ioctl$SIOCAX25ADDFWD(r0, 0x89ea, &(0x7f0000000200)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}) unshare(0xbd814a4664c2ab8f) r1 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, 0x0) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(0xffffffffffffffff, 0x3ba0, &(0x7f0000000180)={0x38}) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x2, 0x4, 0xb1f, 0xa, 0x7, "7051127ad49d0c4b"}) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x42100, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000000a14000428bd7000fbdbdf2500000300000000002f7b4491adf828e0d1513c0272dd8cda293742423f3826421e65b38d08d100000000000000943a43df9786be88d1c13224c734fbaa56a465ab976078249bf17622018721e5998f"], 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x44814) [ 1854.626110][T23015] siw: device registration error -23 13:04:41 executing program 3: r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$VT_ACTIVATE(r0, 0x5606, 0x3ff) (async) openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000100), 0xc202, 0x0) 13:04:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x100000000000000}, 0x0) 13:04:41 executing program 1: r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0) unshare(0x2000400) 13:04:41 executing program 4: unshare(0x20000) (async) r0 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, 0x0) (async) ioctl$TIOCSISO7816(r0, 0xc0285443, &(0x7f0000000040)={0x5, 0x4, 0xffff0000, 0xc3, 0x1}) (async) unshare(0x0) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) [ 1854.646330][T23015] ------------[ cut here ]------------ [ 1854.678531][T23015] refcount_t: decrement hit 0; leaking memory. 13:04:41 executing program 3: openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0xfa000, 0x0) ioctl$SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, &(0x7f0000000040)) r0 = syz_open_dev$I2C(&(0x7f0000000080), 0x2, 0x0) ioctl$I2C_SLAVE_FORCE(r0, 0x706, 0x287) [ 1854.714383][T23015] WARNING: CPU: 1 PID: 23015 at lib/refcount.c:31 refcount_warn_saturate+0x1d7/0x1f0 13:04:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x20, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x200000000000000}, 0x0) [ 1854.771377][T23015] Modules linked in: [ 1854.783912][T23015] CPU: 1 PID: 23015 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1854.816284][T23015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1854.844020][T23015] RIP: 0010:refcount_warn_saturate+0x1d7/0x1f0 [ 1854.866196][T23015] Code: 05 5a 60 51 0a 01 e8 35 0a b5 05 0f 0b e9 d3 fe ff ff e8 6c 9b 75 fd 48 c7 c7 c0 6d a6 8a c6 05 37 60 51 0a 01 e8 16 0a b5 05 <0f> 0b e9 b4 fe ff ff 48 89 ef e8 5a b5 c3 fd e9 5c fe ff ff 0f 1f [ 1854.886328][T23015] RSP: 0018:ffffc9000578f0d8 EFLAGS: 00010286 [ 1854.892461][T23015] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1854.901166][T23015] RDX: 0000000000040000 RSI: ffffffff8166b1dc RDI: fffff52000af1e0d [ 1854.910789][T23015] RBP: ffff888060638600 R08: 0000000000000005 R09: 0000000000000000 [ 1854.920579][T23015] R10: 0000000080000000 R11: 0000000000000000 R12: 1ffff92000af1e20 [ 1854.930205][T23015] R13: 0000000000000000 R14: ffff888060638600 R15: ffffc9000578f608 [ 1854.938397][T23015] FS: 00007fa3961ca700(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 1854.947750][T23015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1854.955456][T23015] CR2: 00007f88513821b8 CR3: 000000005db27000 CR4: 00000000003506e0 [ 1854.963716][T23015] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1854.971715][T23015] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1854.979763][T23015] Call Trace: [ 1854.983067][T23015] [ 1854.986085][T23015] ref_tracker_free+0x539/0x6b0 [ 1854.990983][T23015] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 1854.996477][T23015] ? __up_read+0x192/0x720 [ 1855.000937][T23015] ? up_write+0x520/0x520 [ 1855.005389][T23015] nldev_newlink+0x360/0x5d0 [ 1855.010028][T23015] ? nldev_set_doit+0x490/0x490 [ 1855.016740][T23015] ? lock_release+0x810/0x810 [ 1855.022270][T23015] ? apparmor_capable+0x1dc/0x460 [ 1855.027543][T23015] ? ns_capable+0xdd/0x100 [ 1855.032010][T23015] ? nldev_set_doit+0x490/0x490 [ 1855.038138][T23015] rdma_nl_rcv_msg+0x371/0x6a0 [ 1855.043061][T23015] ? rdma_nl_multicast+0x320/0x320 [ 1855.049747][T23015] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1855.055911][T23015] rdma_nl_rcv_skb.constprop.0.isra.0+0x2fc/0x440 [ 1855.062408][T23015] ? rdma_nl_rcv_msg+0x6a0/0x6a0 [ 1855.067738][T23015] ? netlink_deliver_tap+0x1b1/0xc50 [ 1855.073144][T23015] netlink_unicast+0x547/0x7f0 [ 1855.078130][T23015] ? netlink_attachskb+0x890/0x890 [ 1855.083357][T23015] ? __virt_addr_valid+0x61/0x2e0 [ 1855.088571][T23015] netlink_sendmsg+0x91b/0xe10 [ 1855.093559][T23015] ? netlink_unicast+0x7f0/0x7f0 [ 1855.098664][T23015] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1855.104710][T23015] ? netlink_unicast+0x7f0/0x7f0 [ 1855.109989][T23015] sock_sendmsg+0xd3/0x120 [ 1855.114618][T23015] ____sys_sendmsg+0x712/0x8c0 [ 1855.119517][T23015] ? copy_msghdr_from_user+0xfc/0x150 [ 1855.127740][T23015] ? kernel_sendmsg+0x50/0x50 [ 1855.132556][T23015] ? futex_unqueue+0xb7/0x120 [ 1855.137553][T23015] ___sys_sendmsg+0x110/0x1b0 [ 1855.142347][T23015] ? do_recvmmsg+0x7b0/0x7b0 [ 1855.148787][T23015] ? __fget_files+0x248/0x440 [ 1855.153562][T23015] ? lock_downgrade+0x6e0/0x6e0 [ 1855.158566][T23015] ? __fget_files+0x26a/0x440 [ 1855.163315][T23015] ? __fget_light+0xe5/0x270 [ 1855.168178][T23015] __sys_sendmsg+0xf7/0x1c0 [ 1855.172872][T23015] ? __sys_sendmsg_sock+0x40/0x40 [ 1855.178092][T23015] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 1855.184673][T23015] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1855.190710][T23015] ? lockdep_hardirqs_on+0x7d/0x100 [ 1855.196140][T23015] do_syscall_64+0x39/0xb0 [ 1855.200760][T23015] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1855.206887][T23015] RIP: 0033:0x7fa39548c0d9 [ 1855.211422][T23015] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1855.232104][T23015] RSP: 002b:00007fa3961ca168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1855.241907][T23015] RAX: ffffffffffffffda RBX: 00007fa3955abf80 RCX: 00007fa39548c0d9 [ 1855.250099][T23015] RDX: 0000000000000880 RSI: 0000000020000300 RDI: 0000000000000004 [ 1855.259772][T23015] RBP: 00007fa3954e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1855.267942][T23015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1855.276009][T23015] R13: 00007ffc7ebf234f R14: 00007fa3961ca300 R15: 0000000000022000 [ 1855.284215][T23015] [ 1855.287269][T23015] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1855.294564][T23015] CPU: 1 PID: 23015 Comm: syz-executor.0 Not tainted 6.1.0-rc8-next-20221207-syzkaller #0 [ 1855.304653][T23015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/26/2022 [ 1855.314723][T23015] Call Trace: [ 1855.318012][T23015] [ 1855.320986][T23015] dump_stack_lvl+0xd1/0x138 [ 1855.325626][T23015] panic+0x2cc/0x626 [ 1855.329621][T23015] ? panic_print_sys_info.part.0+0x110/0x110 [ 1855.335668][T23015] ? refcount_warn_saturate+0x1d7/0x1f0 [ 1855.341265][T23015] check_panic_on_warn.cold+0x19/0x35 [ 1855.346677][T23015] __warn+0xf2/0x1a0 [ 1855.350604][T23015] ? refcount_warn_saturate+0x1d7/0x1f0 [ 1855.356190][T23015] report_bug+0x1c0/0x210 [ 1855.360560][T23015] handle_bug+0x3c/0x70 [ 1855.364741][T23015] exc_invalid_op+0x18/0x50 [ 1855.369271][T23015] asm_exc_invalid_op+0x1a/0x20 [ 1855.374155][T23015] RIP: 0010:refcount_warn_saturate+0x1d7/0x1f0 [ 1855.380342][T23015] Code: 05 5a 60 51 0a 01 e8 35 0a b5 05 0f 0b e9 d3 fe ff ff e8 6c 9b 75 fd 48 c7 c7 c0 6d a6 8a c6 05 37 60 51 0a 01 e8 16 0a b5 05 <0f> 0b e9 b4 fe ff ff 48 89 ef e8 5a b5 c3 fd e9 5c fe ff ff 0f 1f [ 1855.399980][T23015] RSP: 0018:ffffc9000578f0d8 EFLAGS: 00010286 [ 1855.406165][T23015] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 1855.414150][T23015] RDX: 0000000000040000 RSI: ffffffff8166b1dc RDI: fffff52000af1e0d [ 1855.422139][T23015] RBP: ffff888060638600 R08: 0000000000000005 R09: 0000000000000000 [ 1855.430127][T23015] R10: 0000000080000000 R11: 0000000000000000 R12: 1ffff92000af1e20 [ 1855.438204][T23015] R13: 0000000000000000 R14: ffff888060638600 R15: ffffc9000578f608 [ 1855.446202][T23015] ? vprintk+0x8c/0xa0 [ 1855.450304][T23015] ? refcount_warn_saturate+0x1d7/0x1f0 [ 1855.455885][T23015] ref_tracker_free+0x539/0x6b0 [ 1855.460856][T23015] ? ref_tracker_dir_exit+0x3e0/0x3e0 [ 1855.466265][T23015] ? __up_read+0x192/0x720 [ 1855.470804][T23015] ? up_write+0x520/0x520 [ 1855.475174][T23015] nldev_newlink+0x360/0x5d0 [ 1855.479796][T23015] ? nldev_set_doit+0x490/0x490 [ 1855.484746][T23015] ? lock_release+0x810/0x810 [ 1855.489454][T23015] ? apparmor_capable+0x1dc/0x460 [ 1855.494522][T23015] ? ns_capable+0xdd/0x100 [ 1855.498967][T23015] ? nldev_set_doit+0x490/0x490 [ 1855.503846][T23015] rdma_nl_rcv_msg+0x371/0x6a0 [ 1855.508638][T23015] ? rdma_nl_multicast+0x320/0x320 [ 1855.513900][T23015] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 1855.519913][T23015] rdma_nl_rcv_skb.constprop.0.isra.0+0x2fc/0x440 [ 1855.526365][T23015] ? rdma_nl_rcv_msg+0x6a0/0x6a0 [ 1855.531344][T23015] ? netlink_deliver_tap+0x1b1/0xc50 [ 1855.536671][T23015] netlink_unicast+0x547/0x7f0 [ 1855.541474][T23015] ? netlink_attachskb+0x890/0x890 [ 1855.546617][T23015] ? __virt_addr_valid+0x61/0x2e0 [ 1855.551687][T23015] netlink_sendmsg+0x91b/0xe10 [ 1855.556490][T23015] ? netlink_unicast+0x7f0/0x7f0 [ 1855.561463][T23015] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1855.566784][T23015] ? netlink_unicast+0x7f0/0x7f0 [ 1855.571755][T23015] sock_sendmsg+0xd3/0x120 [ 1855.576198][T23015] ____sys_sendmsg+0x712/0x8c0 [ 1855.580992][T23015] ? copy_msghdr_from_user+0xfc/0x150 [ 1855.586398][T23015] ? kernel_sendmsg+0x50/0x50 [ 1855.591104][T23015] ? futex_unqueue+0xb7/0x120 [ 1855.595815][T23015] ___sys_sendmsg+0x110/0x1b0 [ 1855.600521][T23015] ? do_recvmmsg+0x7b0/0x7b0 [ 1855.605146][T23015] ? __fget_files+0x248/0x440 [ 1855.609842][T23015] ? lock_downgrade+0x6e0/0x6e0 [ 1855.614728][T23015] ? __fget_files+0x26a/0x440 [ 1855.619433][T23015] ? __fget_light+0xe5/0x270 [ 1855.624050][T23015] __sys_sendmsg+0xf7/0x1c0 [ 1855.628591][T23015] ? __sys_sendmsg_sock+0x40/0x40 [ 1855.633656][T23015] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 1855.639597][T23015] ? syscall_enter_from_user_mode+0x26/0xb0 [ 1855.645615][T23015] ? lockdep_hardirqs_on+0x7d/0x100 [ 1855.650851][T23015] do_syscall_64+0x39/0xb0 [ 1855.655291][T23015] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1855.661215][T23015] RIP: 0033:0x7fa39548c0d9 [ 1855.665668][T23015] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 1855.685305][T23015] RSP: 002b:00007fa3961ca168 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1855.693741][T23015] RAX: ffffffffffffffda RBX: 00007fa3955abf80 RCX: 00007fa39548c0d9 [ 1855.701728][T23015] RDX: 0000000000000880 RSI: 0000000020000300 RDI: 0000000000000004 [ 1855.709713][T23015] RBP: 00007fa3954e7ae9 R08: 0000000000000000 R09: 0000000000000000 [ 1855.717700][T23015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1855.725689][T23015] R13: 00007ffc7ebf234f R14: 00007fa3961ca300 R15: 0000000000022000 [ 1855.733696][T23015] [ 1855.736934][T23015] Kernel Offset: disabled [ 1855.741419][T23015] Rebooting in 86400 seconds..