efae0240999e532b207e0f1ab08d862751c21233c510a28f62aec19bd24074503734a9feb3d979c504efa5d6297027f9d8c36e5f6d4bd80544251cff15095c1bc997e85c521f9dc20fc36dcc4cf24b615bf78aa584df2043f1ee6e7b5262d6194ad9afa20eeca21e68e85cd5068e2d1ddaa9f0ca8077a802a6721ffac4008195282c36a0c21c8aaa70edeb132adaeca8f9edbad31885b15a2e3d1f4433172fd3f77a4847f5a"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002ac0)={0x0, r5, "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", "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"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004040)={0x90, 0x0, &(0x7f0000003ec0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000003c80)={@ptr={0x70742a85, 0x8000, &(0x7f0000001740)=""/183, 0xb7, 0x2, 0x20}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000001a40)={0x0, 0x28, 0x40}}, 0x1000}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003e00)={@fda={0x66646185, 0x8, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x2, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000003d00)=""/214, 0xd6, 0x1, 0x15}}, &(0x7f0000003e80)={0x0, 0x20, 0x40}}}], 0x21, 0x0, &(0x7f0000004000)="bc7a8d1a562470d72b35a96805c96e55dd2c43a9a1f6dacfd1b68df573b29e9d46"}) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)) 05:25:12 executing program 1: socketpair(0x2b, 0x0, 0x0, &(0x7f0000001a80)) 05:25:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, 0x0) 05:25:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000015c0)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004080}, 0x40084) [ 412.207952][T22744] binder: 22740:22744 ioctl d000943e 20001ac0 returned -22 [ 412.220583][T22746] binder: 22741:22746 ioctl d000943e 20001ac0 returned -22 [ 412.245374][T22751] binder: 22749:22751 ioctl d000943e 20001ac0 returned -22 05:25:12 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001ac0)={0x0, 0x0, "895ac6ce4a8c34d01f5c17a97a4dcbeca28cd5bea05d31ea5b860afd39365ef4d2e006e23c474d9d3b20358ff4f4a10eff3290ed3d3abb17a3e182b01fdc3e47d42d4f7446ae21d62720b549699372c9a2c4568d3344f9586f06c29cae5cf3462f7d85e9bd058797fecb27a516cce22e433a6b8dc366d3c003935923f8f6a5d95c06f6278ccda9463fef175aeda44d335297f38030af4cdef7b424fde76e794838fb5cf0631ff6ff9ac3ffc2a061d91d0567a4fb6b73492666d0e7a731d8cde407fc29a8495925d469e6e6ec41e9b92515e516904dac0c60d6cce23cc2e7c6fbd3e892a5c0d8947b6a7f3ff324139b6c1192be0aeabc8524388189e2d9a6ad25", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002ac0)={0x0, r5, "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", "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"}) 05:25:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000015c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x40084) 05:25:12 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001ac0)={0x0, 0x0, "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", "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"}) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)) 05:25:12 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001ac0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002ac0)={0x0, r5, "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", "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"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004040)={0x90, 0x0, &(0x7f0000003ec0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000003c80)={@ptr={0x70742a85, 0x8000, &(0x7f0000001740)=""/183, 0xb7, 0x2, 0x20}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000001a40)={0x0, 0x28, 0x40}}, 0x1000}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003e00)={@fda={0x66646185, 0x8, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x2, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000003d00)=""/214, 0xd6, 0x1, 0x15}}, &(0x7f0000003e80)={0x0, 0x20, 0x40}}}], 0x21, 0x0, &(0x7f0000004000)="bc7a8d1a562470d72b35a96805c96e55dd2c43a9a1f6dacfd1b68df573b29e9d46"}) 05:25:12 executing program 1: socketpair(0x2b, 0x0, 0x0, 0x0) [ 412.285223][T22755] binder: 22753:22755 ioctl d000943e 0 returned -22 05:25:12 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000015c0)={0x14, 0x0, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x40084) 05:25:13 executing program 1: socketpair(0x2b, 0x0, 0x0, 0x0) 05:25:13 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000015c0)={0x1c, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x40084) 05:25:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001ac0)={0x0, 0x0, "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", "7c4be1c510d389b18cb1f5786e6e09feba0b10f1c2f6ed823866d0423cb575f627a2ec264e657f86e319991d76c5d80f298fa5e6e1ca1d1d1fd9dd978f67156e6fd423fd9a53f936603a9c76b4c4d2cd1a66eb121396a89751142a60270b474dfde5f4af53aa1ed24db0f1b74294fbf5b6f67795fd8a3efbf7d428b37d0ce17f8287f2c45a6e6f9bfca001d3a51f2c8d421cff9ca6114be949bda4e55527d633da2aa2eca4a7a4df4d0d07af2dcb7af5120faa4c357cd4f2e2e7fc7e1bef23e25d647442d1593fdc62ea3a8ab22707dca1926dd0092d34313be70f6ae0c09e901779619fc74ccf8c3f73c0f8cbcc7891a6afa7a28a0799fe106c10c3766ffa16a8e619d443374579e804c5130b2cb6eb55fd1eb3b222f1dee734b2c8139215198f99abb15b9c1ab8e7e58f325dc88d87a858a5e7f379ada224cfc6354ec523225060af44a84bb2abbf02cf1a5ad37bf7a3025fba3723a522c4edfc3bff0f8ba117a69abc3170ad52129fe01703b3e006ed5b17de0adab51c0c840fe589239add32fe4314d11ebfcdefec7636b3af9dcebcbc4209683bf01fbbd8de49a8d36ea0d4f13dd6c4c7c69453dc2f6e871a7e63671f24fb5caa6a418da9014edfab5164b31897424b01a37908afc92bc2555bb1a6c338354565b363d4588f14e6b81d2e686e3cb40ff8448f1fdf3543bd78b31fc1c7c540967c70cd74aded0831c62968f4c6a5a63c4d065b9f72452dc9de13f5811b30403b141fedaac1d1aa1b07555f34af23f21c9808de20d0edd7ddf8a9a6673ba50b88287e577aceab8a06465b324781ec215272b9a1c6376b3247e1832e0c0ce5d37c2ad5958465b0f514410ff74385c76f8dc0d532d4ba656aaa090d45ac28985db21ef2e6b9e3e11ccd78aa07a9da81664489609936a6a186ab6233c36dd8e525dfee3bdea7cc83069dc81e0ca3e0b9dd5d6272515a574e920d7aa08906c004516d6c5e18a97d3d5779cf677b495bcf77a67a7db7f27e6144e2daa1085a2aad95cc89fc9b4e30634737a3d5dd38998892a3b500b004d62c34331246604a680be2c55be18d4cc3c58a6a93ac8e4a64b369e73b5bbddb7b5c1bd4acbb3b789f13db22113fe9429bf1601dedc1705af55e029a7bf081d7e54b84d123e4f7f1a27f2c1f51ca44c5303bce977b89c01fc9db6d5758b5becb3bc777577ed702e2ee237728eb71ca0dd7fbe1a241f72b1526e1280bc1a3bd994a78bb21cb2d65f561387a927f9fbc66868278fdbf239cde58daf4f9cdd7d9cb48153fe55aff525f4ec275e0f12b8468fcdbf04bce8483241c1c8d709299fae177e7ddd918c0c20f029af1010285373e56934ea1981cb82fa17c35c21bbf71b78994400b59d555d6603ad9515c97893b0164ea677cb8d4069e3e7eb38b57ec87c56716f7d57291997ba3f0ce93d4bb88e21fd407a2b31a52883fcfaa8cf0346a7c314ca4e8f713ae6e601014517ce867dcc93cc625106e5410e25eddc58a48990cc6b3b6789e6733932aa3674edec5da67f9323cef524c662d578f2564e1e923fa73f9464b9a4b88e50a72e9c825296bb843f93d80e7ccc8889460c52f46113d5305c5bfb637794745661c3c2aaf4d7e6bf494c3772a6214185455139a5dc08d545e5f71a6668bd88463621c782451a877d31c85408c46d34c6f14e89a93f2bcd32f22d2cffc918f09f099b846271e60916dfc1fe90f0347d77228b1d6355af1a3c13d57afdec8e0c8fe2e54b501785499a561b8b5607e2f58c67f63b2f5cd30dd88104d9a4026acecc31e6def6afeb80bcb04de16e115725358005340e42e13d7752c4fa82bb9db56daac3c09a499b2a7d3aa1c0c64406f7de6078a92096f67c820ab16682d6a9801a5aee7da60d979fc54fe578b55d701bb25cd5967fee39b069b2d4483509cb571101cea06f12dade885de8df2dae5b03c4ff1ae448500a5c8d418a5f9bc5f6bdb64b772051889ac2eb322b28027926ea54800972dac8632caefc6b7a76e1c05944573a6dddf23f1c922f5dbfb678654b3f1bbbbd136f08c70ee2b9b5d426e35f7c498ff5964a1c9b8b5d164c9fa12b77132fb5b5b03c168d84d8ec74d4e0565805104a751939be0741cbffd7b4bbc20babcf7fb2b8eccc16ad88abbb708c0cdf1cda7718e375dc90bced4ded21d6443c97a34b006ea4b76a0e9a51d9ed8f0180d445903d9772385a62517c56b605b5b578c9dc7fb7a5c2246e7df03f1613aa1aa573763221c4471ccb38728cf3c3409d77f583a3fc6e89ee0124cd3ca1dee52a4acf4602d2386c5badaa3cff79ea225f441bba9da3b5caade352ac784068853104c63432b2deddd6e049b3db668106f4e3a417dfd4eb19673e26a9a51e85b259849af4e76f286ed2cfc2cb609f4d4495c236ad887c7021e65c269417646ef6b5e26da84e0fba1a9d0692bac82290bf7ca588ac7466aa2f4ce7d74889c4241571e8e6e250aa9822d5d6d1106f2af631db9d6649f051121ef3fd48e6563062341841dd96f207d374394865ecb48fedc0d3d06b5410480f331f82ea0a3db63ad6d3362327ad8244adce39c088e2da21fc88a35f630383369c647e47dc6a33441235a86e052c874cef5c7a8a094647091926729baea58ef4c21f9dc002268f5e821ccf5ec48a53d7ff369e5f062b5e08f41aaa40035455c365e3be72a4bfbb179f900a07dc44d73ee037e8951362bc576063917d7f54c9a95b5fe1a1b036b21011214fc221cddd6c7adea723af5ef28e9174b66a2174d598e8d895941af07a6a9465a790d71cab575eba343505c1b5bf62bba50d41f09e1a06a7de80f2569e195e65b81ca8fe0d017d1a8f130f5af2eb1e79f1e269cd290dc4d1d2324b8740eb5f8632d7c427e2802eb1235b089cdea5bd73240d8aaa6100aa831c021bc0db734d3d1d5050fa6a54aace6ca936a9ded1b1f9f2fbd8d7e998d232a726456dd3208a0198edd47c4d414dde306e1f8126055fbdf51820ce0953538ce5264589c253d83600f9a4821b6b858efcdbbd23fcc38b19b00a6f332f0b420dd0f038f3aa6f99c8604a8d9ad68e2dd8352ac95ab560dd1859d68793eaa9535eb5d8d43986666205d717bf911910b61688642ea3fa02ad9926d3761e3c674a8c037460513de7b8dc33fc7d03bd31f48682c29394eaacc9e871522e7ad26605320ce0bd562a4af07781e94ff4df7be0f6e1826c68d7a51e4219cfec7dd92668bb4128b81de0a534a314f6d9d8e587e084a49da2ead4958111bcd05040a804767ae7b7627cfbd55bafe0dc4b9a647bada125d6ca4e618aefe2c5c9d4c7a4899192a5b522faddf4539ad0e55c83701c7ea903b7856064150c1767e2de359e6c353b2716c45ff36a1da19b8c1a28a18d9cabf2d1eac5678327a8915509fc915e7b18690709636ed3a6c14cd7b7e187dcd97bce69d30325a6e83d27c35e10d162f29c1011950c9ec7a675866ef30ee0da05ddd8cf1f1b329f9ce4a175bd3e85eb3043e69a8aae027c1f7ce7eb6dc9f62bade8db199fbe6a2202632c4740c2d72315b2f927725ebc7a3cc3e05d9705b9b2adedc7204379ad9aae81f4f14e19ae2acbd29891b91e78e8c66e143b9dc9ea54051fdee087baac7219eb0d366baf71ce608628bf9e1d4568fb38a293fd0b97f6cebabfed89282c6e90f0ad22dce9a46b237c22182d5857cff0980f7eb7e1c9119410a5a50025d5ec7e558d4aa2759134ee40eb5f4ec65bb39b3eff3c1ab0c5cd1d58962fa392f5a0dd31af16367b394c00a8be1ea2c638b4c04508f24f64414c1cd7c1afa0e84510cd99bd25bfa18a6a0f709213c7a633afa8812b0c3f9b521f4122fa2fa2cb01ee85ab9da72d0c523466fb041e48e17f1ad59dde4607c89a1b6a2d2f93ce87718d95cf87572e9cd538397ed9041d3a2df3fa62adb9d21750f4fb5aedc27237cf899286aa67e181af0d0153b69b59c9d00f908599a482672a54415436c745b3112671ed418a49ca3134d008843f41b592555e5de77a4a18e16654e348cc4478ba0f417c8ac11ecf61ad38cb9b7d33b3632ce612d9fd27ac659562050e8e8104fd76021a67fbfc910831dcd5495dc2e0cb1a8f834c6713980d71c982de8e3a136bdcc5481f5f7cb2c53c47f51ff89caf784140ce1dfaa0aaf6d6ed268f785d04512897960eedb9e3ede2dec29cf49a7eeca8bbae8f19a92fbdf903133817842bbb3fc710640931ddf7974a6849ce8f96251f801137a7cfde99eee059cceee3b07496c366f2d832a9171523c32439072d5b185ee2a73f48b669aeb407d8bc1732e106312225fbcaa38a43810b7c72cf110f660f18e5ad76c25ba4eaea22d5b68c697ce4320b46e318425aa827feb175483f309369d8af544ff5df1dbb1223fdbbe7a4b88a95284d113c07295e0acb1b00f2e6d331ca21c6c8820f8b0febeee6d14e11aedb041806c5d72167faa6c7ad09fdc3d41645f5c5e6e50d41abc5c1186f62e4f58cc9b80685566e07e2427cab7f8c571577ec1c5b14b983e6f7e29920c91e0941fdf0eae455061a531f4ebcd0b4c441b0a704c6cf8305820374779d1a706b5afe38e9218f4a54ac49ee7286eddfdf467ec64c7eca079b14ffd097fd61854702513f376e23091aaa97ae687fb51c6534ebcc69423c83e523fcf572d5115c4e28b20c1866e0d310792f561ba0624ae299876c2e65972cc2db768b3b1f3dd10f95119cb012b9d906b29fef086bc725973f1ab288031f7d23ac87c7bbbd38e6d5c5001ac0f73c39782f5df6bf2f5e1bbfd2075634774f9e06375207108d02ea9a857d8da9bba375d5936341ab45b8c6e0dea7388f967f312a1885aec1ec7abe206fa115a09fbff71bc505d5eb1786bab4c132dd0703d0f7fbbb4140ae96f5658eddc39038fadbccb1e25f8265164c93e5f41c2bfb189749fa682f51addfb1de2ad66c18930167c7b4d2574cc23a8de58aeaee4a9ffcb98ccc1e3f187cacaa49bca49e9e25c9318f33d30a0fd9249cd9d697c07f39d80929eff7d12726c57406350ccafaba23362a66b3f689ea0d43fdf4f9c73125b1869edc239c677d9fcc1d8ab9a9fb6560339eb41d43c049cab562f08fa649348fe143c7f71c6cddec2c3bcc5aa60d8acaac2682577fbc00c2da940f24b7a75a09bda5e83c2736a2d6623f21e1043d520f2ad9e19742de89efae0240999e532b207e0f1ab08d862751c21233c510a28f62aec19bd24074503734a9feb3d979c504efa5d6297027f9d8c36e5f6d4bd80544251cff15095c1bc997e85c521f9dc20fc36dcc4cf24b615bf78aa584df2043f1ee6e7b5262d6194ad9afa20eeca21e68e85cd5068e2d1ddaa9f0ca8077a802a6721ffac4008195282c36a0c21c8aaa70edeb132adaeca8f9edbad31885b15a2e3d1f4433172fd3f77a4847f5a"}) [ 412.362822][T22765] binder: 22759:22765 ioctl d000943e 20001ac0 returned -22 [ 412.372773][T22766] binder: 22760:22766 ioctl d000943e 20001ac0 returned -22 [ 412.391956][T22767] binder: 22762:22767 ioctl d000943e 20001ac0 returned -22 05:25:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001ac0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002ac0)={0x0, r5, "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", "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"}) 05:25:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000015c0)={0x14, 0x0, 0x1}, 0x14}}, 0x40084) 05:25:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)) 05:25:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001ac0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002ac0)={0x0, r5, "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", "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"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004040)={0x90, 0x0, &(0x7f0000003ec0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000003c80)={@ptr={0x70742a85, 0x8000, &(0x7f0000001740)=""/183, 0xb7, 0x2, 0x20}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000001a40)={0x0, 0x28, 0x40}}, 0x1000}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003e00)={@fda={0x66646185, 0x8, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x2, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000003d00)=""/214, 0xd6, 0x1, 0x15}}, &(0x7f0000003e80)={0x0, 0x20, 0x40}}}], 0x21, 0x0, &(0x7f0000004000)="bc7a8d1a562470d72b35a96805c96e55dd2c43a9a1f6dacfd1b68df573b29e9d46"}) 05:25:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) 05:25:13 executing program 1: socketpair(0x2b, 0x0, 0x0, 0x0) 05:25:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001ac0)={0x0, 0x0, "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", "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"}) [ 412.475384][T22775] binder: 22772:22775 ioctl d000943e 20001ac0 returned -22 [ 412.504213][T22780] binder: 22777:22780 ioctl d000943e 20001ac0 returned -22 05:25:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)) 05:25:13 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000015c0)={0x14, 0x0, 0x1}, 0x14}}, 0x0) 05:25:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) 05:25:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) [ 412.574181][T22787] binder: 22784:22787 ioctl d000943e 20001ac0 returned -22 [ 412.593325][T22791] binder: 22788:22791 ioctl d000943e 20001ac0 returned -22 05:25:13 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001ac0)={0x0, 0x0, "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", "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"}) 05:25:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)) 05:25:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) 05:25:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001ac0)={0x0, 0x0, "895ac6ce4a8c34d01f5c17a97a4dcbeca28cd5bea05d31ea5b860afd39365ef4d2e006e23c474d9d3b20358ff4f4a10eff3290ed3d3abb17a3e182b01fdc3e47d42d4f7446ae21d62720b549699372c9a2c4568d3344f9586f06c29cae5cf3462f7d85e9bd058797fecb27a516cce22e433a6b8dc366d3c003935923f8f6a5d95c06f6278ccda9463fef175aeda44d335297f38030af4cdef7b424fde76e794838fb5cf0631ff6ff9ac3ffc2a061d91d0567a4fb6b73492666d0e7a731d8cde407fc29a8495925d469e6e6ec41e9b92515e516904dac0c60d6cce23cc2e7c6fbd3e892a5c0d8947b6a7f3ff324139b6c1192be0aeabc8524388189e2d9a6ad25", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002ac0)={0x0, r5, "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", "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"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004040)={0x90, 0x0, &(0x7f0000003ec0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000003c80)={@ptr={0x70742a85, 0x8000, &(0x7f0000001740)=""/183, 0xb7, 0x2, 0x20}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000001a40)={0x0, 0x28, 0x40}}, 0x1000}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003e00)={@fda={0x66646185, 0x8, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x2, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000003d00)=""/214, 0xd6, 0x1, 0x15}}, &(0x7f0000003e80)={0x0, 0x20, 0x40}}}], 0x21, 0x0, &(0x7f0000004000)="bc7a8d1a562470d72b35a96805c96e55dd2c43a9a1f6dacfd1b68df573b29e9d46"}) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)) 05:25:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) 05:25:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)) 05:25:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001ac0)={0x0, 0x0, "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", "7c4be1c510d389b18cb1f5786e6e09feba0b10f1c2f6ed823866d0423cb575f627a2ec264e657f86e319991d76c5d80f298fa5e6e1ca1d1d1fd9dd978f67156e6fd423fd9a53f936603a9c76b4c4d2cd1a66eb121396a89751142a60270b474dfde5f4af53aa1ed24db0f1b74294fbf5b6f67795fd8a3efbf7d428b37d0ce17f8287f2c45a6e6f9bfca001d3a51f2c8d421cff9ca6114be949bda4e55527d633da2aa2eca4a7a4df4d0d07af2dcb7af5120faa4c357cd4f2e2e7fc7e1bef23e25d647442d1593fdc62ea3a8ab22707dca1926dd0092d34313be70f6ae0c09e901779619fc74ccf8c3f73c0f8cbcc7891a6afa7a28a0799fe106c10c3766ffa16a8e619d443374579e804c5130b2cb6eb55fd1eb3b222f1dee734b2c8139215198f99abb15b9c1ab8e7e58f325dc88d87a858a5e7f379ada224cfc6354ec523225060af44a84bb2abbf02cf1a5ad37bf7a3025fba3723a522c4edfc3bff0f8ba117a69abc3170ad52129fe01703b3e006ed5b17de0adab51c0c840fe589239add32fe4314d11ebfcdefec7636b3af9dcebcbc4209683bf01fbbd8de49a8d36ea0d4f13dd6c4c7c69453dc2f6e871a7e63671f24fb5caa6a418da9014edfab5164b31897424b01a37908afc92bc2555bb1a6c338354565b363d4588f14e6b81d2e686e3cb40ff8448f1fdf3543bd78b31fc1c7c540967c70cd74aded0831c62968f4c6a5a63c4d065b9f72452dc9de13f5811b30403b141fedaac1d1aa1b07555f34af23f21c9808de20d0edd7ddf8a9a6673ba50b88287e577aceab8a06465b324781ec215272b9a1c6376b3247e1832e0c0ce5d37c2ad5958465b0f514410ff74385c76f8dc0d532d4ba656aaa090d45ac28985db21ef2e6b9e3e11ccd78aa07a9da81664489609936a6a186ab6233c36dd8e525dfee3bdea7cc83069dc81e0ca3e0b9dd5d6272515a574e920d7aa08906c004516d6c5e18a97d3d5779cf677b495bcf77a67a7db7f27e6144e2daa1085a2aad95cc89fc9b4e30634737a3d5dd38998892a3b500b004d62c34331246604a680be2c55be18d4cc3c58a6a93ac8e4a64b369e73b5bbddb7b5c1bd4acbb3b789f13db22113fe9429bf1601dedc1705af55e029a7bf081d7e54b84d123e4f7f1a27f2c1f51ca44c5303bce977b89c01fc9db6d5758b5becb3bc777577ed702e2ee237728eb71ca0dd7fbe1a241f72b1526e1280bc1a3bd994a78bb21cb2d65f561387a927f9fbc66868278fdbf239cde58daf4f9cdd7d9cb48153fe55aff525f4ec275e0f12b8468fcdbf04bce8483241c1c8d709299fae177e7ddd918c0c20f029af1010285373e56934ea1981cb82fa17c35c21bbf71b78994400b59d555d6603ad9515c97893b0164ea677cb8d4069e3e7eb38b57ec87c56716f7d57291997ba3f0ce93d4bb88e21fd407a2b31a52883fcfaa8cf0346a7c314ca4e8f713ae6e601014517ce867dcc93cc625106e5410e25eddc58a48990cc6b3b6789e6733932aa3674edec5da67f9323cef524c662d578f2564e1e923fa73f9464b9a4b88e50a72e9c825296bb843f93d80e7ccc8889460c52f46113d5305c5bfb637794745661c3c2aaf4d7e6bf494c3772a6214185455139a5dc08d545e5f71a6668bd88463621c782451a877d31c85408c46d34c6f14e89a93f2bcd32f22d2cffc918f09f099b846271e60916dfc1fe90f0347d77228b1d6355af1a3c13d57afdec8e0c8fe2e54b501785499a561b8b5607e2f58c67f63b2f5cd30dd88104d9a4026acecc31e6def6afeb80bcb04de16e115725358005340e42e13d7752c4fa82bb9db56daac3c09a499b2a7d3aa1c0c64406f7de6078a92096f67c820ab16682d6a9801a5aee7da60d979fc54fe578b55d701bb25cd5967fee39b069b2d4483509cb571101cea06f12dade885de8df2dae5b03c4ff1ae448500a5c8d418a5f9bc5f6bdb64b772051889ac2eb322b28027926ea54800972dac8632caefc6b7a76e1c05944573a6dddf23f1c922f5dbfb678654b3f1bbbbd136f08c70ee2b9b5d426e35f7c498ff5964a1c9b8b5d164c9fa12b77132fb5b5b03c168d84d8ec74d4e0565805104a751939be0741cbffd7b4bbc20babcf7fb2b8eccc16ad88abbb708c0cdf1cda7718e375dc90bced4ded21d6443c97a34b006ea4b76a0e9a51d9ed8f0180d445903d9772385a62517c56b605b5b578c9dc7fb7a5c2246e7df03f1613aa1aa573763221c4471ccb38728cf3c3409d77f583a3fc6e89ee0124cd3ca1dee52a4acf4602d2386c5badaa3cff79ea225f441bba9da3b5caade352ac784068853104c63432b2deddd6e049b3db668106f4e3a417dfd4eb19673e26a9a51e85b259849af4e76f286ed2cfc2cb609f4d4495c236ad887c7021e65c269417646ef6b5e26da84e0fba1a9d0692bac82290bf7ca588ac7466aa2f4ce7d74889c4241571e8e6e250aa9822d5d6d1106f2af631db9d6649f051121ef3fd48e6563062341841dd96f207d374394865ecb48fedc0d3d06b5410480f331f82ea0a3db63ad6d3362327ad8244adce39c088e2da21fc88a35f630383369c647e47dc6a33441235a86e052c874cef5c7a8a094647091926729baea58ef4c21f9dc002268f5e821ccf5ec48a53d7ff369e5f062b5e08f41aaa40035455c365e3be72a4bfbb179f900a07dc44d73ee037e8951362bc576063917d7f54c9a95b5fe1a1b036b21011214fc221cddd6c7adea723af5ef28e9174b66a2174d598e8d895941af07a6a9465a790d71cab575eba343505c1b5bf62bba50d41f09e1a06a7de80f2569e195e65b81ca8fe0d017d1a8f130f5af2eb1e79f1e269cd290dc4d1d2324b8740eb5f8632d7c427e2802eb1235b089cdea5bd73240d8aaa6100aa831c021bc0db734d3d1d5050fa6a54aace6ca936a9ded1b1f9f2fbd8d7e998d232a726456dd3208a0198edd47c4d414dde306e1f8126055fbdf51820ce0953538ce5264589c253d83600f9a4821b6b858efcdbbd23fcc38b19b00a6f332f0b420dd0f038f3aa6f99c8604a8d9ad68e2dd8352ac95ab560dd1859d68793eaa9535eb5d8d43986666205d717bf911910b61688642ea3fa02ad9926d3761e3c674a8c037460513de7b8dc33fc7d03bd31f48682c29394eaacc9e871522e7ad26605320ce0bd562a4af07781e94ff4df7be0f6e1826c68d7a51e4219cfec7dd92668bb4128b81de0a534a314f6d9d8e587e084a49da2ead4958111bcd05040a804767ae7b7627cfbd55bafe0dc4b9a647bada125d6ca4e618aefe2c5c9d4c7a4899192a5b522faddf4539ad0e55c83701c7ea903b7856064150c1767e2de359e6c353b2716c45ff36a1da19b8c1a28a18d9cabf2d1eac5678327a8915509fc915e7b18690709636ed3a6c14cd7b7e187dcd97bce69d30325a6e83d27c35e10d162f29c1011950c9ec7a675866ef30ee0da05ddd8cf1f1b329f9ce4a175bd3e85eb3043e69a8aae027c1f7ce7eb6dc9f62bade8db199fbe6a2202632c4740c2d72315b2f927725ebc7a3cc3e05d9705b9b2adedc7204379ad9aae81f4f14e19ae2acbd29891b91e78e8c66e143b9dc9ea54051fdee087baac7219eb0d366baf71ce608628bf9e1d4568fb38a293fd0b97f6cebabfed89282c6e90f0ad22dce9a46b237c22182d5857cff0980f7eb7e1c9119410a5a50025d5ec7e558d4aa2759134ee40eb5f4ec65bb39b3eff3c1ab0c5cd1d58962fa392f5a0dd31af16367b394c00a8be1ea2c638b4c04508f24f64414c1cd7c1afa0e84510cd99bd25bfa18a6a0f709213c7a633afa8812b0c3f9b521f4122fa2fa2cb01ee85ab9da72d0c523466fb041e48e17f1ad59dde4607c89a1b6a2d2f93ce87718d95cf87572e9cd538397ed9041d3a2df3fa62adb9d21750f4fb5aedc27237cf899286aa67e181af0d0153b69b59c9d00f908599a482672a54415436c745b3112671ed418a49ca3134d008843f41b592555e5de77a4a18e16654e348cc4478ba0f417c8ac11ecf61ad38cb9b7d33b3632ce612d9fd27ac659562050e8e8104fd76021a67fbfc910831dcd5495dc2e0cb1a8f834c6713980d71c982de8e3a136bdcc5481f5f7cb2c53c47f51ff89caf784140ce1dfaa0aaf6d6ed268f785d04512897960eedb9e3ede2dec29cf49a7eeca8bbae8f19a92fbdf903133817842bbb3fc710640931ddf7974a6849ce8f96251f801137a7cfde99eee059cceee3b07496c366f2d832a9171523c32439072d5b185ee2a73f48b669aeb407d8bc1732e106312225fbcaa38a43810b7c72cf110f660f18e5ad76c25ba4eaea22d5b68c697ce4320b46e318425aa827feb175483f309369d8af544ff5df1dbb1223fdbbe7a4b88a95284d113c07295e0acb1b00f2e6d331ca21c6c8820f8b0febeee6d14e11aedb041806c5d72167faa6c7ad09fdc3d41645f5c5e6e50d41abc5c1186f62e4f58cc9b80685566e07e2427cab7f8c571577ec1c5b14b983e6f7e29920c91e0941fdf0eae455061a531f4ebcd0b4c441b0a704c6cf8305820374779d1a706b5afe38e9218f4a54ac49ee7286eddfdf467ec64c7eca079b14ffd097fd61854702513f376e23091aaa97ae687fb51c6534ebcc69423c83e523fcf572d5115c4e28b20c1866e0d310792f561ba0624ae299876c2e65972cc2db768b3b1f3dd10f95119cb012b9d906b29fef086bc725973f1ab288031f7d23ac87c7bbbd38e6d5c5001ac0f73c39782f5df6bf2f5e1bbfd2075634774f9e06375207108d02ea9a857d8da9bba375d5936341ab45b8c6e0dea7388f967f312a1885aec1ec7abe206fa115a09fbff71bc505d5eb1786bab4c132dd0703d0f7fbbb4140ae96f5658eddc39038fadbccb1e25f8265164c93e5f41c2bfb189749fa682f51addfb1de2ad66c18930167c7b4d2574cc23a8de58aeaee4a9ffcb98ccc1e3f187cacaa49bca49e9e25c9318f33d30a0fd9249cd9d697c07f39d80929eff7d12726c57406350ccafaba23362a66b3f689ea0d43fdf4f9c73125b1869edc239c677d9fcc1d8ab9a9fb6560339eb41d43c049cab562f08fa649348fe143c7f71c6cddec2c3bcc5aa60d8acaac2682577fbc00c2da940f24b7a75a09bda5e83c2736a2d6623f21e1043d520f2ad9e19742de89efae0240999e532b207e0f1ab08d862751c21233c510a28f62aec19bd24074503734a9feb3d979c504efa5d6297027f9d8c36e5f6d4bd80544251cff15095c1bc997e85c521f9dc20fc36dcc4cf24b615bf78aa584df2043f1ee6e7b5262d6194ad9afa20eeca21e68e85cd5068e2d1ddaa9f0ca8077a802a6721ffac4008195282c36a0c21c8aaa70edeb132adaeca8f9edbad31885b15a2e3d1f4433172fd3f77a4847f5a"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002ac0)={0x0, r5, "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", "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"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004040)={0x90, 0x0, &(0x7f0000003ec0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000003c80)={@ptr={0x70742a85, 0x8000, &(0x7f0000001740)=""/183, 0xb7, 0x2, 0x20}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000001a40)={0x0, 0x28, 0x40}}, 0x1000}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003e00)={@fda={0x66646185, 0x8, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x2, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000003d00)=""/214, 0xd6, 0x1, 0x15}}, &(0x7f0000003e80)={0x0, 0x20, 0x40}}}], 0x21, 0x0, &(0x7f0000004000)="bc7a8d1a562470d72b35a96805c96e55dd2c43a9a1f6dacfd1b68df573b29e9d46"}) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)={0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f0000003fc0), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a00)={&(0x7f0000001880)="76ec4f2ce9632de5a741df08d27155cb18cfe57179fc6682eaff0a515ac5249461e3e9ba", &(0x7f00000018c0)=""/126, &(0x7f0000001940)="b226c7cd7938314431591354d6d3fa86d0dd6418487d4578a7777dbb5bdab5bd05c735aa9e04b9bfb219bf9e6847362a401f2d69b7e5a2df675073ffbf8f24b5be2fbeee90d506a89d340a29a1ca7ddd44fdefab5443f62086f7d1f185e6a0298a6ea4ab58d443a9eab3d2b3292595ddea65d1cd05aa1161bd1d828a861ea13744762e06f4b0ec59acc9ab92eae87f877b61cd784c27e3c04066352175f8eafc5ebec3b08986275fc645ed16f7a9", &(0x7f0000003ac0)="567e1c8fd832806c49f7dce957f6433648c1a2ba6eee80c27972c83ddb8d8cf70942c9fd9edc69f43d629836ebff0fd515df325687ea2b2a9116677778be95e99bcaf86da1d02084c47bd4e9e69ff4fa60f93ab403553005b7ed2c2ad5bdf74be65c1c3d43705ea69eb46a7471d69c65802f0c7b9024995619ebfcc8bb238b7a9893cf82fc8a3e9e612a314c1026", 0x401, r4}, 0x38) 05:25:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001ac0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002ac0)={0x0, r5, "64bac7a286e26f48daf58f332a052a50beb4b16120eee5b6fab63f97ff66a2f67dea3a3fddbbdab4ffc6551cedda76788fbfe6f9584dc83088170b8271f5fc74e915a8f4ce281121f28bcb130c00e3aecde1f078232d7051144c8b94d22a2f92beda568228dedc7c0ada752265e65e4f984c1baaf85f1ee8769514e8798a59eefc26e13aa0c31991e0a7efedeaa70f13e57d534203f4757f4834056c3805f44e23b44511c29e91ea4227dc9efc949657599013f8e9d811a12d8695ccd5eb6c333187700f124c28408fa1f43149d41ce6ff411eaec794494956eb20d6d8eabd3ae7ddb3c04bf188a8dab0474625575864dafdd62bd3002f59dd3beff4480d9e16", "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"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004040)={0x90, 0x0, &(0x7f0000003ec0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000003c80)={@ptr={0x70742a85, 0x8000, &(0x7f0000001740)=""/183, 0xb7, 0x2, 0x20}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000001a40)={0x0, 0x28, 0x40}}, 0x1000}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003e00)={@fda={0x66646185, 0x8, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x2, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000003d00)=""/214, 0xd6, 0x1, 0x15}}, &(0x7f0000003e80)={0x0, 0x20, 0x40}}}], 0x21, 0x0, &(0x7f0000004000)="bc7a8d1a562470d72b35a96805c96e55dd2c43a9a1f6dacfd1b68df573b29e9d46"}) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)={0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f0000003fc0), 0x4) [ 412.716039][T22806] binder: 22803:22806 ioctl d000943e 20001ac0 returned -22 05:25:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) 05:25:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)) 05:25:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) 05:25:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) 05:25:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001ac0)={0x0, 0x0, "895ac6ce4a8c34d01f5c17a97a4dcbeca28cd5bea05d31ea5b860afd39365ef4d2e006e23c474d9d3b20358ff4f4a10eff3290ed3d3abb17a3e182b01fdc3e47d42d4f7446ae21d62720b549699372c9a2c4568d3344f9586f06c29cae5cf3462f7d85e9bd058797fecb27a516cce22e433a6b8dc366d3c003935923f8f6a5d95c06f6278ccda9463fef175aeda44d335297f38030af4cdef7b424fde76e794838fb5cf0631ff6ff9ac3ffc2a061d91d0567a4fb6b73492666d0e7a731d8cde407fc29a8495925d469e6e6ec41e9b92515e516904dac0c60d6cce23cc2e7c6fbd3e892a5c0d8947b6a7f3ff324139b6c1192be0aeabc8524388189e2d9a6ad25", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002ac0)={0x0, r5, "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", "384b4ff95d5952ea41e46e129416b2e03c6fa98a4da189a374dd29d1c31c8098a3e8eab88a52c50028795cfabbeaba1bdb3c7005a75169425c0f8b5b08178f3cf86bc4a50894d8e3ba2d13285e1b545410926ffd510141283e2568194d9b8f1ab7effd29322abfe72a4b292e687dffaf9286c48a32ab12d4d9b6ade4738c18bde178d621e2a53c4075c026351c57229edcfaacf0c3d2d2f269628a43e971683fc6ac305b99716744494258f7a2ec3c2872fa6198720f4bc0c1d1ae9c77490598ec5a5ff433c46ad89ff5cb16584ceeac785516bf73df7bdf8cce9922174462d9202e6421802e4dc0dd562c2d0f09d82d4982078b072da0d2412246548e409eccfae1e9bfa8033688e2f9882c84fe389fa49adffc94587941b562cbfd9762671ac30d4d542a5a49911df40891f3c2c8c1a0bc3b6c7bf55ee6c8d2216ad86c1d67caa6cc0fe05583f29e72b16e2dfd5ac0aef6ab3b498d133321b645ae8c18e3f6daf201b7d846907552444fb8d8014cf03ba6d5b324e96957e791ed20ab53b83e8c4d607889f9002fc2b42c2674327211152e4107aaf9b0bfb16abd9a1e31ff166c050bcde34f9de5fe6a463810cb62e163f31d826fe6fcfb177371eab67c43be5151d6dda24c856e26a82ffd34c364b0904b79476bc9d952512a4fba127f2e284c3b6fa89f1ace68c933ddac089497a4dc15a3e469b434b9f8e34b7b50c34feaf0e714f2ce2e093eced5b99dad1e5496b5d3f38aed2e98025ece65bb5d0c6e47b2f0c3208c354cab8a8a7fb1fcd98015e1575796aa167a1f6908b24278d076890c9245e3472c3da40c202a8544d643483bcad525ec1b45773aab10c8f1a574930cfdef09949c78551790c9dac53ef81f66847d4f5862ea05527c1613d4589aefd9255f5f06e9e992d1438ba90b666f937bfc5308caf33b5d3f4e10353d036f6b7dd9d34a9b82dd6bedc4921bb673850fa8db025dcf2577dc0b668493d49fe619d0601d50ac2fce274740a2da68b62cd54515db0888b5215f24d38da3894d814529676d5beda8094e12785f6b11341d0b23f82c327a720c38cb5476c71d71d45d510d703d55d0f87dfc51daed678decc2e4518086011aefcb107c7130e6b3b640f115c8264f570738f82ae4be084cb9e69dc8b036ff0715d87923ad96f55fb2a1444678d7c4f7d658769635c14c50febf0b131d4d11e7ff7ec65274b9c6e2a23e2a248a7d2922a42770c2d895c62945182eecfa83610edd2eb7e28d613c2c59bb2cb3d8a7a9a2f307f95a0d09d59d1a3aac1492da5564d0b264f2ae631528cd3939480c345e4de5dacff0bd3d3398c41d6129151dd8aeb6fe2132731f3399696002aa93daa35f9ac9205b1f5c95208f21bfa51441391686b5b834604d2e20f5b823a68e650189e4e41351fa01d5fc5f96746a6e17549d67bab8cf127e9c104b89102ec60f8117580aa3118d8792805237506f90e02352cc10f16e3b916aaa4c3d13ba2f22d3868815733f7aa6f44a63478c6a5d33f028a9596247e4f63d367505210c705050ce70df0c57d0b62a8d048fb6e72ae18cf8b1cf3bc21186859b3beea72006eb7c1a26cd537fef22d71a7958111dae78acc22502f5d67e35a23570f709f10c86b9aeba67b936948a3abc423a13844982bd24c25d10ac9c86d94c2726ccf2f8d9079209dcd38f78f23a597109040f6ef850a3c51f86e0b9aee3a72bd11b5032aab95104cd8feb0c385d2cb8d0e57ffaec3d8d65ed45366ef3b52f1069471e051a2b23a858f843de6cb39db470b576ae58583de62332248738054467dc7048b4099a3108547f4aebc9f1221ff465138b9634f8f3637127a46126799923986dbf3d10f27913509449a44796809153eec3b7d8f5e5ace900e204f375908caef9c54adbf976bcd1c1b2f52b5b4198fe4d3eeac25c073b33831eee28ffea569d272580b28576ad2016b07913725e1f4027a607056be6364ac5b0d6d68e5b6a6ed944fdcfb3fa1e2cd99586815b1b0ebfb9270c8ece86338b67cd8aeaed5d86818b5c0e7a947d39f3466ee9d7d70b333aea4009c10611d02e48483ed5dd979b2d8e8c971bf4cb36e25e7580d728bf59bd16d494b8977fbbb01c4c4965b7e8e583bd27a48e30955e4753404491cf6abd7dd9f95a7ffbd60d4aa6a7f39481d7eeb9c1aa0da63d18b514ef61bad0ca62c80685668db850302a87f3691f625b82219ef9ee2ff5cec214be90843a82b69a59c8adaff85397a73148b1e178c43c4fa437e154c541bdd9f9fde401b800530b04f71d111ae743b42e8ce3404e0577e451c6c55cc0021b67aa4dc10ab16e7b363ac52d0849d27e95681c5ca71b2460af71d96f4a7a8d8e815976c46ba42139d5e7d4cb0d3426790c5c6510d0d2bcf7613d1a2f0978dafead938b5b1df817ee7d146eab6de8062b63b9fb05ccf38412c6b35340d6bc24e7d4654f1e6b20594e36a9b8dc06395a41f7c00d609418b5481fc94bc99c8d4272fe39f245a68705a8f2fb6acd40e5c9518ea60be4d91990b8f637b075b301ed88d7a99cc399e14d068bdbfd27bafab06c5d9e95ce9d4561fc9b7e19382f20debc1ebf15942cc74b1b2b67a199e52bbd5abc074a2d843a6a931fe178cec7da1cfbefa075261d951579ad051ae63aac0227e10b1d841c07fd672f7c4dac27ac4cf098347978ad3171256b4a65525b91b9f57ed9d2f223312b089ecfa8856a183b4c92e6fc6500efb1a4f103609c27236f733a6b5959c85f19b2c684e19a15e92d9c36dd1e1806fc2dfe8f608a591accd4e139e116a94945f701441a3c942c1f6e7dd883cfab7ee065e23106dbf947dc280a1e1e2a00f541aeb4b8a483fddad6ed545f239aa2e61674d056df8273d52a5cc9a689a0bfcf9075632f7386c6dbba79468a82ec79cdb1f19ceb3021f07f7408ff5806f2e4016ebee5a1b96a8abfd6ef7ba33ffc0b4e756e21565894edcde8b75e78cfdb62dd917e3301af25c83d735c53b9035b8a71150ad4519dbb722947d5f2083a471c1ab217ed6767c7c5f3e1ea1bddf5fb7f3fecd1602f3601b339dffc7c1a1f27e397108df3470a43538251607b093d69572ca6e7c562667c577ebdafe27eda97deddc52b014829e4b46168e0486d384f5b12c8b225b7bea2f2b4fd2ce2cbc3c15e670c7312505525e71a1ce73c8c87a3215bb8c02d3c0a4744ddfe9e04e5f4df77c6a34015540a752674d56aaa6494e396a4177b849c8d6f90310050f9b1c5346a75a30dd60e710f8bebb0290a5c31e5bdb7e67ff2789e1ff4afe2e5dc008587b86c52c3b84f3e70f7aca35cdd64a8245d045bbdf48e5a9571c31917e63cb0a0912403bd8deaa122317b0f5bb5976a1482eae33a702f6b7c66ad06c4eaf9c5e835a401ce000b01136f7416d0ad9ba5fde0fd67b8a2c8648e81c0a44d47b972c399c5a0e86ddf486f31d3189c1b3b30b454abe22cb85be8a3287e40ac1c83546aee91963907a7da3443319ab99f82f301b574f33ed90663101e616490c1548bbd6b630f2fe2a1046ac99e00edc417453b6f90d831de5cb5a88179d31166155e79c65286c05efce58fb15c184b30eae25ae06678473218b5a79d49e349a515beedacf6bec942097d2785795f9d86d7d0dd3a67a2a19c3699ca2958c09263eb73db2e03aee8c40cb4324b131e5fbe60cf310699d235f5be2b38b8d3d4ae7afc8fa9199eb310769812577048b06e770ad65286a798d4136d6c14f85cd7d8023f372ae4135f4769e4b5325721274d4f6ce53eb6e6969eb9302df292e47c1629b38d8afe4fbb4c5a5b33ee4e57af1ff087b67e120e33c13ec674363c198a7614eb179392e52a162d6781b1e09cda946620dedfdb049b6b8ba4634d5d8b078cc2d9ca0f1b678be0a540cd2904ff4b7f6db7500afc5834705f18a3b7a4a89b7d08e43f28d27f1dcc79e8a0082bd2d94e1ba37fb5a56c3a4c22c5783c0e6f0cfbc90b81c037a5927a905bfc690905292cb6de6519ff75a8e38000ab6fdc82a641694a992f4446dab5f1f25c80e5453ffc1eea8f9537e6c4dc25ce54f80f4ab22245b33f47f7a9d9e78a003451ac8e3e7f120fdf254d311937ac0308a2897198aa203c3e41c72ab46ee2847cf8ffa985e2353424f5e1ca9352bf0703aae13a06044dd4f49eab09aa4eeef8a1249f3640597bd2d8eb8f5a0dafdbb5f1a5b2676f965ca02747a215cbc1abe0e8a5b14b75400d7fff9a7d76209b4599e3e75fe761c48d2b081383ddd29c768db8d2c1745bb42867d6aa0c83202ea90acf4fe9a84d9339e07be9d09d41a24fa887d48bbc45b6b9389893d3b5abd627618bc8866c7ff5d16f0d6d473ca642f4fdfabc6ea829ac7ebc0c36342be46b80f46b1bca6e95eb80419cd17c0fa48b85846b740ddd6f6a59ae8508c01c78b912a69addfab857a6117d6355e8bea723d90a5e06552896e20c270d1fad70f10bff3fa7d19a90d7e394d0fc8b1b0bfa5c41292b8d1ce80e1f81f11979a86acc50a57b4fa551bf3be8cea90f53f990b3575f733a4fbeff99c5641d05fa387d3f9f0d19315af874e4bb560a7bf289426a8348ed0d62ed62d6e6a032f3aeee3beadf2e18f4e1028924778045a9e4aeddbd897ffbcb3b088634b031736abffa1a7b8ccda37f4ab63e8b8467b6f2d5fac8cf7b8addf91da799c83d1af05e8df8035e8068c3dec3ee16325aa2d1cb2b79fecbd83da9136c656100e515b04ee971e3a731e7574a58487534ec8548cb289ec00b89ac4e1d701b16ee03a2d14c992ab17f04a4283c0f1da95a774e98d65787dde8f1a2b2aec6b0d3077349913308c2230bc9e852476d7562245fee8de845c540ea8267fca9b1d7c4bc8dc1faeafc01c4ef7a5cec98070fc22a77691b205dc0831fbd4201fc34eb90bc5ad25d3e473abd6dd826b36b4a9a7021df79a364fda41165ca9f416adee836f3f6ca3530c823a37a1686509096d3860df722df73bad8a2a9cc63aa11f48a886c5aaba53b8baf41307c9183a5ac750f8a8185251215c9a4696a856fc81e81f79806563fa1812f0778ab317c82ab85162f24de423801a3c4c40a605169900f635740d9a16b49a19999117121917253c7258e111ec3d2c644801ebf9f290bcda32a5d545bf3d8abbfefb5947b9d061869a927e41dbb1c366b53cfac2bfdc7cb626013b0e72baa0d32b310532e7b35322fc8d8e357fe7b456965ffc6e30fb5159f0ea21cfbc41c71a9ab6b76d318741f6cb03dcf5dcc670ba55074ffc760a6e47f2d8326ef23e07a393c3164dddef6ec4336ced736b22606e1e146e285b9c17230532d0787c3126e961d64094713056ebf1a87c7c6c14cd41dffbb40b1deac7fe2a58fe83c581c25a4f34e48b25062b4c6713a03bbf9351b62988fefcbd363ac0fd5ee9e8b204b9308447683b6c9"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004040)={0x90, 0x0, &(0x7f0000003ec0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000003c80)={@ptr={0x70742a85, 0x8000, &(0x7f0000001740)=""/183, 0xb7, 0x2, 0x20}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000001a40)={0x0, 0x28, 0x40}}, 0x1000}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003e00)={@fda={0x66646185, 0x8, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x2, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000003d00)=""/214, 0xd6, 0x1, 0x15}}, &(0x7f0000003e80)={0x0, 0x20, 0x40}}}], 0x21, 0x0, &(0x7f0000004000)="bc7a8d1a562470d72b35a96805c96e55dd2c43a9a1f6dacfd1b68df573b29e9d46"}) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)={0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f0000003fc0), 0x4) 05:25:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) [ 412.820459][T22817] binder: 22814:22817 ioctl d000943e 20001ac0 returned -22 [ 412.828741][T22815] binder: 22813:22815 ioctl d000943e 20001ac0 returned -22 05:25:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)) 05:25:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) 05:25:13 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f00000015c0)={0x68, 0x0, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004080}, 0x40084) 05:25:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) [ 412.912809][T22826] binder: 22825:22826 ioctl d000943e 20001ac0 returned -22 05:25:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)) socket$nl_generic(0x10, 0x3, 0x10) 05:25:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)) 05:25:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001ac0)={0x0, 0x0, "895ac6ce4a8c34d01f5c17a97a4dcbeca28cd5bea05d31ea5b860afd39365ef4d2e006e23c474d9d3b20358ff4f4a10eff3290ed3d3abb17a3e182b01fdc3e47d42d4f7446ae21d62720b549699372c9a2c4568d3344f9586f06c29cae5cf3462f7d85e9bd058797fecb27a516cce22e433a6b8dc366d3c003935923f8f6a5d95c06f6278ccda9463fef175aeda44d335297f38030af4cdef7b424fde76e794838fb5cf0631ff6ff9ac3ffc2a061d91d0567a4fb6b73492666d0e7a731d8cde407fc29a8495925d469e6e6ec41e9b92515e516904dac0c60d6cce23cc2e7c6fbd3e892a5c0d8947b6a7f3ff324139b6c1192be0aeabc8524388189e2d9a6ad25", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002ac0)={0x0, r5, "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", "384b4ff95d5952ea41e46e129416b2e03c6fa98a4da189a374dd29d1c31c8098a3e8eab88a52c50028795cfabbeaba1bdb3c7005a75169425c0f8b5b08178f3cf86bc4a50894d8e3ba2d13285e1b545410926ffd510141283e2568194d9b8f1ab7effd29322abfe72a4b292e687dffaf9286c48a32ab12d4d9b6ade4738c18bde178d621e2a53c4075c026351c57229edcfaacf0c3d2d2f269628a43e971683fc6ac305b99716744494258f7a2ec3c2872fa6198720f4bc0c1d1ae9c77490598ec5a5ff433c46ad89ff5cb16584ceeac785516bf73df7bdf8cce9922174462d9202e6421802e4dc0dd562c2d0f09d82d4982078b072da0d2412246548e409eccfae1e9bfa8033688e2f9882c84fe389fa49adffc94587941b562cbfd9762671ac30d4d542a5a49911df40891f3c2c8c1a0bc3b6c7bf55ee6c8d2216ad86c1d67caa6cc0fe05583f29e72b16e2dfd5ac0aef6ab3b498d133321b645ae8c18e3f6daf201b7d846907552444fb8d8014cf03ba6d5b324e96957e791ed20ab53b83e8c4d607889f9002fc2b42c2674327211152e4107aaf9b0bfb16abd9a1e31ff166c050bcde34f9de5fe6a463810cb62e163f31d826fe6fcfb177371eab67c43be5151d6dda24c856e26a82ffd34c364b0904b79476bc9d952512a4fba127f2e284c3b6fa89f1ace68c933ddac089497a4dc15a3e469b434b9f8e34b7b50c34feaf0e714f2ce2e093eced5b99dad1e5496b5d3f38aed2e98025ece65bb5d0c6e47b2f0c3208c354cab8a8a7fb1fcd98015e1575796aa167a1f6908b24278d076890c9245e3472c3da40c202a8544d643483bcad525ec1b45773aab10c8f1a574930cfdef09949c78551790c9dac53ef81f66847d4f5862ea05527c1613d4589aefd9255f5f06e9e992d1438ba90b666f937bfc5308caf33b5d3f4e10353d036f6b7dd9d34a9b82dd6bedc4921bb673850fa8db025dcf2577dc0b668493d49fe619d0601d50ac2fce274740a2da68b62cd54515db0888b5215f24d38da3894d814529676d5beda8094e12785f6b11341d0b23f82c327a720c38cb5476c71d71d45d510d703d55d0f87dfc51daed678decc2e4518086011aefcb107c7130e6b3b640f115c8264f570738f82ae4be084cb9e69dc8b036ff0715d87923ad96f55fb2a1444678d7c4f7d658769635c14c50febf0b131d4d11e7ff7ec65274b9c6e2a23e2a248a7d2922a42770c2d895c62945182eecfa83610edd2eb7e28d613c2c59bb2cb3d8a7a9a2f307f95a0d09d59d1a3aac1492da5564d0b264f2ae631528cd3939480c345e4de5dacff0bd3d3398c41d6129151dd8aeb6fe2132731f3399696002aa93daa35f9ac9205b1f5c95208f21bfa51441391686b5b834604d2e20f5b823a68e650189e4e41351fa01d5fc5f96746a6e17549d67bab8cf127e9c104b89102ec60f8117580aa3118d8792805237506f90e02352cc10f16e3b916aaa4c3d13ba2f22d3868815733f7aa6f44a63478c6a5d33f028a9596247e4f63d367505210c705050ce70df0c57d0b62a8d048fb6e72ae18cf8b1cf3bc21186859b3beea72006eb7c1a26cd537fef22d71a7958111dae78acc22502f5d67e35a23570f709f10c86b9aeba67b936948a3abc423a13844982bd24c25d10ac9c86d94c2726ccf2f8d9079209dcd38f78f23a597109040f6ef850a3c51f86e0b9aee3a72bd11b5032aab95104cd8feb0c385d2cb8d0e57ffaec3d8d65ed45366ef3b52f1069471e051a2b23a858f843de6cb39db470b576ae58583de62332248738054467dc7048b4099a3108547f4aebc9f1221ff465138b9634f8f3637127a46126799923986dbf3d10f27913509449a44796809153eec3b7d8f5e5ace900e204f375908caef9c54adbf976bcd1c1b2f52b5b4198fe4d3eeac25c073b33831eee28ffea569d272580b28576ad2016b07913725e1f4027a607056be6364ac5b0d6d68e5b6a6ed944fdcfb3fa1e2cd99586815b1b0ebfb9270c8ece86338b67cd8aeaed5d86818b5c0e7a947d39f3466ee9d7d70b333aea4009c10611d02e48483ed5dd979b2d8e8c971bf4cb36e25e7580d728bf59bd16d494b8977fbbb01c4c4965b7e8e583bd27a48e30955e4753404491cf6abd7dd9f95a7ffbd60d4aa6a7f39481d7eeb9c1aa0da63d18b514ef61bad0ca62c80685668db850302a87f3691f625b82219ef9ee2ff5cec214be90843a82b69a59c8adaff85397a73148b1e178c43c4fa437e154c541bdd9f9fde401b800530b04f71d111ae743b42e8ce3404e0577e451c6c55cc0021b67aa4dc10ab16e7b363ac52d0849d27e95681c5ca71b2460af71d96f4a7a8d8e815976c46ba42139d5e7d4cb0d3426790c5c6510d0d2bcf7613d1a2f0978dafead938b5b1df817ee7d146eab6de8062b63b9fb05ccf38412c6b35340d6bc24e7d4654f1e6b20594e36a9b8dc06395a41f7c00d609418b5481fc94bc99c8d4272fe39f245a68705a8f2fb6acd40e5c9518ea60be4d91990b8f637b075b301ed88d7a99cc399e14d068bdbfd27bafab06c5d9e95ce9d4561fc9b7e19382f20debc1ebf15942cc74b1b2b67a199e52bbd5abc074a2d843a6a931fe178cec7da1cfbefa075261d951579ad051ae63aac0227e10b1d841c07fd672f7c4dac27ac4cf098347978ad3171256b4a65525b91b9f57ed9d2f223312b089ecfa8856a183b4c92e6fc6500efb1a4f103609c27236f733a6b5959c85f19b2c684e19a15e92d9c36dd1e1806fc2dfe8f608a591accd4e139e116a94945f701441a3c942c1f6e7dd883cfab7ee065e23106dbf947dc280a1e1e2a00f541aeb4b8a483fddad6ed545f239aa2e61674d056df8273d52a5cc9a689a0bfcf9075632f7386c6dbba79468a82ec79cdb1f19ceb3021f07f7408ff5806f2e4016ebee5a1b96a8abfd6ef7ba33ffc0b4e756e21565894edcde8b75e78cfdb62dd917e3301af25c83d735c53b9035b8a71150ad4519dbb722947d5f2083a471c1ab217ed6767c7c5f3e1ea1bddf5fb7f3fecd1602f3601b339dffc7c1a1f27e397108df3470a43538251607b093d69572ca6e7c562667c577ebdafe27eda97deddc52b014829e4b46168e0486d384f5b12c8b225b7bea2f2b4fd2ce2cbc3c15e670c7312505525e71a1ce73c8c87a3215bb8c02d3c0a4744ddfe9e04e5f4df77c6a34015540a752674d56aaa6494e396a4177b849c8d6f90310050f9b1c5346a75a30dd60e710f8bebb0290a5c31e5bdb7e67ff2789e1ff4afe2e5dc008587b86c52c3b84f3e70f7aca35cdd64a8245d045bbdf48e5a9571c31917e63cb0a0912403bd8deaa122317b0f5bb5976a1482eae33a702f6b7c66ad06c4eaf9c5e835a401ce000b01136f7416d0ad9ba5fde0fd67b8a2c8648e81c0a44d47b972c399c5a0e86ddf486f31d3189c1b3b30b454abe22cb85be8a3287e40ac1c83546aee91963907a7da3443319ab99f82f301b574f33ed90663101e616490c1548bbd6b630f2fe2a1046ac99e00edc417453b6f90d831de5cb5a88179d31166155e79c65286c05efce58fb15c184b30eae25ae06678473218b5a79d49e349a515beedacf6bec942097d2785795f9d86d7d0dd3a67a2a19c3699ca2958c09263eb73db2e03aee8c40cb4324b131e5fbe60cf310699d235f5be2b38b8d3d4ae7afc8fa9199eb310769812577048b06e770ad65286a798d4136d6c14f85cd7d8023f372ae4135f4769e4b5325721274d4f6ce53eb6e6969eb9302df292e47c1629b38d8afe4fbb4c5a5b33ee4e57af1ff087b67e120e33c13ec674363c198a7614eb179392e52a162d6781b1e09cda946620dedfdb049b6b8ba4634d5d8b078cc2d9ca0f1b678be0a540cd2904ff4b7f6db7500afc5834705f18a3b7a4a89b7d08e43f28d27f1dcc79e8a0082bd2d94e1ba37fb5a56c3a4c22c5783c0e6f0cfbc90b81c037a5927a905bfc690905292cb6de6519ff75a8e38000ab6fdc82a641694a992f4446dab5f1f25c80e5453ffc1eea8f9537e6c4dc25ce54f80f4ab22245b33f47f7a9d9e78a003451ac8e3e7f120fdf254d311937ac0308a2897198aa203c3e41c72ab46ee2847cf8ffa985e2353424f5e1ca9352bf0703aae13a06044dd4f49eab09aa4eeef8a1249f3640597bd2d8eb8f5a0dafdbb5f1a5b2676f965ca02747a215cbc1abe0e8a5b14b75400d7fff9a7d76209b4599e3e75fe761c48d2b081383ddd29c768db8d2c1745bb42867d6aa0c83202ea90acf4fe9a84d9339e07be9d09d41a24fa887d48bbc45b6b9389893d3b5abd627618bc8866c7ff5d16f0d6d473ca642f4fdfabc6ea829ac7ebc0c36342be46b80f46b1bca6e95eb80419cd17c0fa48b85846b740ddd6f6a59ae8508c01c78b912a69addfab857a6117d6355e8bea723d90a5e06552896e20c270d1fad70f10bff3fa7d19a90d7e394d0fc8b1b0bfa5c41292b8d1ce80e1f81f11979a86acc50a57b4fa551bf3be8cea90f53f990b3575f733a4fbeff99c5641d05fa387d3f9f0d19315af874e4bb560a7bf289426a8348ed0d62ed62d6e6a032f3aeee3beadf2e18f4e1028924778045a9e4aeddbd897ffbcb3b088634b031736abffa1a7b8ccda37f4ab63e8b8467b6f2d5fac8cf7b8addf91da799c83d1af05e8df8035e8068c3dec3ee16325aa2d1cb2b79fecbd83da9136c656100e515b04ee971e3a731e7574a58487534ec8548cb289ec00b89ac4e1d701b16ee03a2d14c992ab17f04a4283c0f1da95a774e98d65787dde8f1a2b2aec6b0d3077349913308c2230bc9e852476d7562245fee8de845c540ea8267fca9b1d7c4bc8dc1faeafc01c4ef7a5cec98070fc22a77691b205dc0831fbd4201fc34eb90bc5ad25d3e473abd6dd826b36b4a9a7021df79a364fda41165ca9f416adee836f3f6ca3530c823a37a1686509096d3860df722df73bad8a2a9cc63aa11f48a886c5aaba53b8baf41307c9183a5ac750f8a8185251215c9a4696a856fc81e81f79806563fa1812f0778ab317c82ab85162f24de423801a3c4c40a605169900f635740d9a16b49a19999117121917253c7258e111ec3d2c644801ebf9f290bcda32a5d545bf3d8abbfefb5947b9d061869a927e41dbb1c366b53cfac2bfdc7cb626013b0e72baa0d32b310532e7b35322fc8d8e357fe7b456965ffc6e30fb5159f0ea21cfbc41c71a9ab6b76d318741f6cb03dcf5dcc670ba55074ffc760a6e47f2d8326ef23e07a393c3164dddef6ec4336ced736b22606e1e146e285b9c17230532d0787c3126e961d64094713056ebf1a87c7c6c14cd41dffbb40b1deac7fe2a58fe83c581c25a4f34e48b25062b4c6713a03bbf9351b62988fefcbd363ac0fd5ee9e8b204b9308447683b6c9"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004040)={0x90, 0x0, &(0x7f0000003ec0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000003c80)={@ptr={0x70742a85, 0x8000, &(0x7f0000001740)=""/183, 0xb7, 0x2, 0x20}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000001a40)={0x0, 0x28, 0x40}}, 0x1000}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003e00)={@fda={0x66646185, 0x8, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x2, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000003d00)=""/214, 0xd6, 0x1, 0x15}}, &(0x7f0000003e80)={0x0, 0x20, 0x40}}}], 0x21, 0x0, &(0x7f0000004000)="bc7a8d1a562470d72b35a96805c96e55dd2c43a9a1f6dacfd1b68df573b29e9d46"}) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)={0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f0000003fc0), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a00)={&(0x7f0000001880)="76ec4f2ce9632de5a741df08d27155cb18cfe57179fc6682eaff0a515ac5249461e3e9ba", &(0x7f00000018c0)=""/126, &(0x7f0000001940)="b226c7cd7938314431591354d6d3fa86d0dd6418487d4578a7777dbb5bdab5bd05c735aa9e04b9bfb219bf9e6847362a401f2d69b7e5a2df675073ffbf8f24b5be2fbeee90d506a89d340a29a1ca7ddd44fdefab5443f62086f7d1f185e6a0298a6ea4ab58d443a9eab3d2b3292595ddea65d1cd05aa1161bd1d828a861ea13744762e06f4b0ec59acc9ab92eae87f877b61cd784c27e3c04066352175f8eafc5ebec3b08986275fc645ed16f7a9", &(0x7f0000003ac0)="567e1c8fd832806c49f7dce957f6433648c1a2ba6eee80c27972c83ddb8d8cf70942c9fd9edc69f43d629836ebff0fd515df325687ea2b2a9116677778be95e99bcaf86da1d02084c47bd4e9e69ff4fa60f93ab403553005b7ed2c2ad5bdf74be65c1c3d43705ea69eb46a7471d69c65802f0c7b9024995619ebfcc8bb238b7a9893cf82fc8a3e9e612a314c1026", 0x401, r4}, 0x38) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000001840)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001800)={&(0x7f00000015c0)={0x68, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004080}, 0x40084) 05:25:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) 05:25:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001ac0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002ac0)={0x0, r5, "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", "384b4ff95d5952ea41e46e129416b2e03c6fa98a4da189a374dd29d1c31c8098a3e8eab88a52c50028795cfabbeaba1bdb3c7005a75169425c0f8b5b08178f3cf86bc4a50894d8e3ba2d13285e1b545410926ffd510141283e2568194d9b8f1ab7effd29322abfe72a4b292e687dffaf9286c48a32ab12d4d9b6ade4738c18bde178d621e2a53c4075c026351c57229edcfaacf0c3d2d2f269628a43e971683fc6ac305b99716744494258f7a2ec3c2872fa6198720f4bc0c1d1ae9c77490598ec5a5ff433c46ad89ff5cb16584ceeac785516bf73df7bdf8cce9922174462d9202e6421802e4dc0dd562c2d0f09d82d4982078b072da0d2412246548e409eccfae1e9bfa8033688e2f9882c84fe389fa49adffc94587941b562cbfd9762671ac30d4d542a5a49911df40891f3c2c8c1a0bc3b6c7bf55ee6c8d2216ad86c1d67caa6cc0fe05583f29e72b16e2dfd5ac0aef6ab3b498d133321b645ae8c18e3f6daf201b7d846907552444fb8d8014cf03ba6d5b324e96957e791ed20ab53b83e8c4d607889f9002fc2b42c2674327211152e4107aaf9b0bfb16abd9a1e31ff166c050bcde34f9de5fe6a463810cb62e163f31d826fe6fcfb177371eab67c43be5151d6dda24c856e26a82ffd34c364b0904b79476bc9d952512a4fba127f2e284c3b6fa89f1ace68c933ddac089497a4dc15a3e469b434b9f8e34b7b50c34feaf0e714f2ce2e093eced5b99dad1e5496b5d3f38aed2e98025ece65bb5d0c6e47b2f0c3208c354cab8a8a7fb1fcd98015e1575796aa167a1f6908b24278d076890c9245e3472c3da40c202a8544d643483bcad525ec1b45773aab10c8f1a574930cfdef09949c78551790c9dac53ef81f66847d4f5862ea05527c1613d4589aefd9255f5f06e9e992d1438ba90b666f937bfc5308caf33b5d3f4e10353d036f6b7dd9d34a9b82dd6bedc4921bb673850fa8db025dcf2577dc0b668493d49fe619d0601d50ac2fce274740a2da68b62cd54515db0888b5215f24d38da3894d814529676d5beda8094e12785f6b11341d0b23f82c327a720c38cb5476c71d71d45d510d703d55d0f87dfc51daed678decc2e4518086011aefcb107c7130e6b3b640f115c8264f570738f82ae4be084cb9e69dc8b036ff0715d87923ad96f55fb2a1444678d7c4f7d658769635c14c50febf0b131d4d11e7ff7ec65274b9c6e2a23e2a248a7d2922a42770c2d895c62945182eecfa83610edd2eb7e28d613c2c59bb2cb3d8a7a9a2f307f95a0d09d59d1a3aac1492da5564d0b264f2ae631528cd3939480c345e4de5dacff0bd3d3398c41d6129151dd8aeb6fe2132731f3399696002aa93daa35f9ac9205b1f5c95208f21bfa51441391686b5b834604d2e20f5b823a68e650189e4e41351fa01d5fc5f96746a6e17549d67bab8cf127e9c104b89102ec60f8117580aa3118d8792805237506f90e02352cc10f16e3b916aaa4c3d13ba2f22d3868815733f7aa6f44a63478c6a5d33f028a9596247e4f63d367505210c705050ce70df0c57d0b62a8d048fb6e72ae18cf8b1cf3bc21186859b3beea72006eb7c1a26cd537fef22d71a7958111dae78acc22502f5d67e35a23570f709f10c86b9aeba67b936948a3abc423a13844982bd24c25d10ac9c86d94c2726ccf2f8d9079209dcd38f78f23a597109040f6ef850a3c51f86e0b9aee3a72bd11b5032aab95104cd8feb0c385d2cb8d0e57ffaec3d8d65ed45366ef3b52f1069471e051a2b23a858f843de6cb39db470b576ae58583de62332248738054467dc7048b4099a3108547f4aebc9f1221ff465138b9634f8f3637127a46126799923986dbf3d10f27913509449a44796809153eec3b7d8f5e5ace900e204f375908caef9c54adbf976bcd1c1b2f52b5b4198fe4d3eeac25c073b33831eee28ffea569d272580b28576ad2016b07913725e1f4027a607056be6364ac5b0d6d68e5b6a6ed944fdcfb3fa1e2cd99586815b1b0ebfb9270c8ece86338b67cd8aeaed5d86818b5c0e7a947d39f3466ee9d7d70b333aea4009c10611d02e48483ed5dd979b2d8e8c971bf4cb36e25e7580d728bf59bd16d494b8977fbbb01c4c4965b7e8e583bd27a48e30955e4753404491cf6abd7dd9f95a7ffbd60d4aa6a7f39481d7eeb9c1aa0da63d18b514ef61bad0ca62c80685668db850302a87f3691f625b82219ef9ee2ff5cec214be90843a82b69a59c8adaff85397a73148b1e178c43c4fa437e154c541bdd9f9fde401b800530b04f71d111ae743b42e8ce3404e0577e451c6c55cc0021b67aa4dc10ab16e7b363ac52d0849d27e95681c5ca71b2460af71d96f4a7a8d8e815976c46ba42139d5e7d4cb0d3426790c5c6510d0d2bcf7613d1a2f0978dafead938b5b1df817ee7d146eab6de8062b63b9fb05ccf38412c6b35340d6bc24e7d4654f1e6b20594e36a9b8dc06395a41f7c00d609418b5481fc94bc99c8d4272fe39f245a68705a8f2fb6acd40e5c9518ea60be4d91990b8f637b075b301ed88d7a99cc399e14d068bdbfd27bafab06c5d9e95ce9d4561fc9b7e19382f20debc1ebf15942cc74b1b2b67a199e52bbd5abc074a2d843a6a931fe178cec7da1cfbefa075261d951579ad051ae63aac0227e10b1d841c07fd672f7c4dac27ac4cf098347978ad3171256b4a65525b91b9f57ed9d2f223312b089ecfa8856a183b4c92e6fc6500efb1a4f103609c27236f733a6b5959c85f19b2c684e19a15e92d9c36dd1e1806fc2dfe8f608a591accd4e139e116a94945f701441a3c942c1f6e7dd883cfab7ee065e23106dbf947dc280a1e1e2a00f541aeb4b8a483fddad6ed545f239aa2e61674d056df8273d52a5cc9a689a0bfcf9075632f7386c6dbba79468a82ec79cdb1f19ceb3021f07f7408ff5806f2e4016ebee5a1b96a8abfd6ef7ba33ffc0b4e756e21565894edcde8b75e78cfdb62dd917e3301af25c83d735c53b9035b8a71150ad4519dbb722947d5f2083a471c1ab217ed6767c7c5f3e1ea1bddf5fb7f3fecd1602f3601b339dffc7c1a1f27e397108df3470a43538251607b093d69572ca6e7c562667c577ebdafe27eda97deddc52b014829e4b46168e0486d384f5b12c8b225b7bea2f2b4fd2ce2cbc3c15e670c7312505525e71a1ce73c8c87a3215bb8c02d3c0a4744ddfe9e04e5f4df77c6a34015540a752674d56aaa6494e396a4177b849c8d6f90310050f9b1c5346a75a30dd60e710f8bebb0290a5c31e5bdb7e67ff2789e1ff4afe2e5dc008587b86c52c3b84f3e70f7aca35cdd64a8245d045bbdf48e5a9571c31917e63cb0a0912403bd8deaa122317b0f5bb5976a1482eae33a702f6b7c66ad06c4eaf9c5e835a401ce000b01136f7416d0ad9ba5fde0fd67b8a2c8648e81c0a44d47b972c399c5a0e86ddf486f31d3189c1b3b30b454abe22cb85be8a3287e40ac1c83546aee91963907a7da3443319ab99f82f301b574f33ed90663101e616490c1548bbd6b630f2fe2a1046ac99e00edc417453b6f90d831de5cb5a88179d31166155e79c65286c05efce58fb15c184b30eae25ae06678473218b5a79d49e349a515beedacf6bec942097d2785795f9d86d7d0dd3a67a2a19c3699ca2958c09263eb73db2e03aee8c40cb4324b131e5fbe60cf310699d235f5be2b38b8d3d4ae7afc8fa9199eb310769812577048b06e770ad65286a798d4136d6c14f85cd7d8023f372ae4135f4769e4b5325721274d4f6ce53eb6e6969eb9302df292e47c1629b38d8afe4fbb4c5a5b33ee4e57af1ff087b67e120e33c13ec674363c198a7614eb179392e52a162d6781b1e09cda946620dedfdb049b6b8ba4634d5d8b078cc2d9ca0f1b678be0a540cd2904ff4b7f6db7500afc5834705f18a3b7a4a89b7d08e43f28d27f1dcc79e8a0082bd2d94e1ba37fb5a56c3a4c22c5783c0e6f0cfbc90b81c037a5927a905bfc690905292cb6de6519ff75a8e38000ab6fdc82a641694a992f4446dab5f1f25c80e5453ffc1eea8f9537e6c4dc25ce54f80f4ab22245b33f47f7a9d9e78a003451ac8e3e7f120fdf254d311937ac0308a2897198aa203c3e41c72ab46ee2847cf8ffa985e2353424f5e1ca9352bf0703aae13a06044dd4f49eab09aa4eeef8a1249f3640597bd2d8eb8f5a0dafdbb5f1a5b2676f965ca02747a215cbc1abe0e8a5b14b75400d7fff9a7d76209b4599e3e75fe761c48d2b081383ddd29c768db8d2c1745bb42867d6aa0c83202ea90acf4fe9a84d9339e07be9d09d41a24fa887d48bbc45b6b9389893d3b5abd627618bc8866c7ff5d16f0d6d473ca642f4fdfabc6ea829ac7ebc0c36342be46b80f46b1bca6e95eb80419cd17c0fa48b85846b740ddd6f6a59ae8508c01c78b912a69addfab857a6117d6355e8bea723d90a5e06552896e20c270d1fad70f10bff3fa7d19a90d7e394d0fc8b1b0bfa5c41292b8d1ce80e1f81f11979a86acc50a57b4fa551bf3be8cea90f53f990b3575f733a4fbeff99c5641d05fa387d3f9f0d19315af874e4bb560a7bf289426a8348ed0d62ed62d6e6a032f3aeee3beadf2e18f4e1028924778045a9e4aeddbd897ffbcb3b088634b031736abffa1a7b8ccda37f4ab63e8b8467b6f2d5fac8cf7b8addf91da799c83d1af05e8df8035e8068c3dec3ee16325aa2d1cb2b79fecbd83da9136c656100e515b04ee971e3a731e7574a58487534ec8548cb289ec00b89ac4e1d701b16ee03a2d14c992ab17f04a4283c0f1da95a774e98d65787dde8f1a2b2aec6b0d3077349913308c2230bc9e852476d7562245fee8de845c540ea8267fca9b1d7c4bc8dc1faeafc01c4ef7a5cec98070fc22a77691b205dc0831fbd4201fc34eb90bc5ad25d3e473abd6dd826b36b4a9a7021df79a364fda41165ca9f416adee836f3f6ca3530c823a37a1686509096d3860df722df73bad8a2a9cc63aa11f48a886c5aaba53b8baf41307c9183a5ac750f8a8185251215c9a4696a856fc81e81f79806563fa1812f0778ab317c82ab85162f24de423801a3c4c40a605169900f635740d9a16b49a19999117121917253c7258e111ec3d2c644801ebf9f290bcda32a5d545bf3d8abbfefb5947b9d061869a927e41dbb1c366b53cfac2bfdc7cb626013b0e72baa0d32b310532e7b35322fc8d8e357fe7b456965ffc6e30fb5159f0ea21cfbc41c71a9ab6b76d318741f6cb03dcf5dcc670ba55074ffc760a6e47f2d8326ef23e07a393c3164dddef6ec4336ced736b22606e1e146e285b9c17230532d0787c3126e961d64094713056ebf1a87c7c6c14cd41dffbb40b1deac7fe2a58fe83c581c25a4f34e48b25062b4c6713a03bbf9351b62988fefcbd363ac0fd5ee9e8b204b9308447683b6c9"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004040)={0x90, 0x0, &(0x7f0000003ec0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000003c80)={@ptr={0x70742a85, 0x8000, &(0x7f0000001740)=""/183, 0xb7, 0x2, 0x20}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000001a40)={0x0, 0x28, 0x40}}, 0x1000}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003e00)={@fda={0x66646185, 0x8, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x2, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000003d00)=""/214, 0xd6, 0x1, 0x15}}, &(0x7f0000003e80)={0x0, 0x20, 0x40}}}], 0x21, 0x0, &(0x7f0000004000)="bc7a8d1a562470d72b35a96805c96e55dd2c43a9a1f6dacfd1b68df573b29e9d46"}) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)={0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f0000003fc0), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a00)={&(0x7f0000001880)="76ec4f2ce9632de5a741df08d27155cb18cfe57179fc6682eaff0a515ac5249461e3e9ba", &(0x7f00000018c0)=""/126, &(0x7f0000001940)="b226c7cd7938314431591354d6d3fa86d0dd6418487d4578a7777dbb5bdab5bd05c735aa9e04b9bfb219bf9e6847362a401f2d69b7e5a2df675073ffbf8f24b5be2fbeee90d506a89d340a29a1ca7ddd44fdefab5443f62086f7d1f185e6a0298a6ea4ab58d443a9eab3d2b3292595ddea65d1cd05aa1161bd1d828a861ea13744762e06f4b0ec59acc9ab92eae87f877b61cd784c27e3c04066352175f8eafc5ebec3b08986275fc645ed16f7a9", &(0x7f0000003ac0)="567e1c8fd832806c49f7dce957f6433648c1a2ba6eee80c27972c83ddb8d8cf70942c9fd9edc69f43d629836ebff0fd515df325687ea2b2a9116677778be95e99bcaf86da1d02084c47bd4e9e69ff4fa60f93ab403553005b7ed2c2ad5bdf74be65c1c3d43705ea69eb46a7471d69c65802f0c7b9024995619ebfcc8bb238b7a9893cf82fc8a3e9e612a314c1026", 0x401, r4}, 0x38) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000001840)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001800)={&(0x7f00000015c0)={0x68, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004080}, 0x40084) 05:25:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) 05:25:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)) 05:25:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)) [ 413.050017][T22843] binder: 22842:22843 ioctl d000943e 20001ac0 returned -22 [ 413.066329][T22846] binder: 22844:22846 ioctl d000943e 20001ac0 returned -22 05:25:13 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)) 05:25:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x9) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000001ac0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f0000002ac0)={0x0, r5, "64bac7a286e26f48daf58f332a052a50beb4b16120eee5b6fab63f97ff66a2f67dea3a3fddbbdab4ffc6551cedda76788fbfe6f9584dc83088170b8271f5fc74e915a8f4ce281121f28bcb130c00e3aecde1f078232d7051144c8b94d22a2f92beda568228dedc7c0ada752265e65e4f984c1baaf85f1ee8769514e8798a59eefc26e13aa0c31991e0a7efedeaa70f13e57d534203f4757f4834056c3805f44e23b44511c29e91ea4227dc9efc949657599013f8e9d811a12d8695ccd5eb6c333187700f124c28408fa1f43149d41ce6ff411eaec794494956eb20d6d8eabd3ae7ddb3c04bf188a8dab0474625575864dafdd62bd3002f59dd3beff4480d9e16", "384b4ff95d5952ea41e46e129416b2e03c6fa98a4da189a374dd29d1c31c8098a3e8eab88a52c50028795cfabbeaba1bdb3c7005a75169425c0f8b5b08178f3cf86bc4a50894d8e3ba2d13285e1b545410926ffd510141283e2568194d9b8f1ab7effd29322abfe72a4b292e687dffaf9286c48a32ab12d4d9b6ade4738c18bde178d621e2a53c4075c026351c57229edcfaacf0c3d2d2f269628a43e971683fc6ac305b99716744494258f7a2ec3c2872fa6198720f4bc0c1d1ae9c77490598ec5a5ff433c46ad89ff5cb16584ceeac785516bf73df7bdf8cce9922174462d9202e6421802e4dc0dd562c2d0f09d82d4982078b072da0d2412246548e409eccfae1e9bfa8033688e2f9882c84fe389fa49adffc94587941b562cbfd9762671ac30d4d542a5a49911df40891f3c2c8c1a0bc3b6c7bf55ee6c8d2216ad86c1d67caa6cc0fe05583f29e72b16e2dfd5ac0aef6ab3b498d133321b645ae8c18e3f6daf201b7d846907552444fb8d8014cf03ba6d5b324e96957e791ed20ab53b83e8c4d607889f9002fc2b42c2674327211152e4107aaf9b0bfb16abd9a1e31ff166c050bcde34f9de5fe6a463810cb62e163f31d826fe6fcfb177371eab67c43be5151d6dda24c856e26a82ffd34c364b0904b79476bc9d952512a4fba127f2e284c3b6fa89f1ace68c933ddac089497a4dc15a3e469b434b9f8e34b7b50c34feaf0e714f2ce2e093eced5b99dad1e5496b5d3f38aed2e98025ece65bb5d0c6e47b2f0c3208c354cab8a8a7fb1fcd98015e1575796aa167a1f6908b24278d076890c9245e3472c3da40c202a8544d643483bcad525ec1b45773aab10c8f1a574930cfdef09949c78551790c9dac53ef81f66847d4f5862ea05527c1613d4589aefd9255f5f06e9e992d1438ba90b666f937bfc5308caf33b5d3f4e10353d036f6b7dd9d34a9b82dd6bedc4921bb673850fa8db025dcf2577dc0b668493d49fe619d0601d50ac2fce274740a2da68b62cd54515db0888b5215f24d38da3894d814529676d5beda8094e12785f6b11341d0b23f82c327a720c38cb5476c71d71d45d510d703d55d0f87dfc51daed678decc2e4518086011aefcb107c7130e6b3b640f115c8264f570738f82ae4be084cb9e69dc8b036ff0715d87923ad96f55fb2a1444678d7c4f7d658769635c14c50febf0b131d4d11e7ff7ec65274b9c6e2a23e2a248a7d2922a42770c2d895c62945182eecfa83610edd2eb7e28d613c2c59bb2cb3d8a7a9a2f307f95a0d09d59d1a3aac1492da5564d0b264f2ae631528cd3939480c345e4de5dacff0bd3d3398c41d6129151dd8aeb6fe2132731f3399696002aa93daa35f9ac9205b1f5c95208f21bfa51441391686b5b834604d2e20f5b823a68e650189e4e41351fa01d5fc5f96746a6e17549d67bab8cf127e9c104b89102ec60f8117580aa3118d8792805237506f90e02352cc10f16e3b916aaa4c3d13ba2f22d3868815733f7aa6f44a63478c6a5d33f028a9596247e4f63d367505210c705050ce70df0c57d0b62a8d048fb6e72ae18cf8b1cf3bc21186859b3beea72006eb7c1a26cd537fef22d71a7958111dae78acc22502f5d67e35a23570f709f10c86b9aeba67b936948a3abc423a13844982bd24c25d10ac9c86d94c2726ccf2f8d9079209dcd38f78f23a597109040f6ef850a3c51f86e0b9aee3a72bd11b5032aab95104cd8feb0c385d2cb8d0e57ffaec3d8d65ed45366ef3b52f1069471e051a2b23a858f843de6cb39db470b576ae58583de62332248738054467dc7048b4099a3108547f4aebc9f1221ff465138b9634f8f3637127a46126799923986dbf3d10f27913509449a44796809153eec3b7d8f5e5ace900e204f375908caef9c54adbf976bcd1c1b2f52b5b4198fe4d3eeac25c073b33831eee28ffea569d272580b28576ad2016b07913725e1f4027a607056be6364ac5b0d6d68e5b6a6ed944fdcfb3fa1e2cd99586815b1b0ebfb9270c8ece86338b67cd8aeaed5d86818b5c0e7a947d39f3466ee9d7d70b333aea4009c10611d02e48483ed5dd979b2d8e8c971bf4cb36e25e7580d728bf59bd16d494b8977fbbb01c4c4965b7e8e583bd27a48e30955e4753404491cf6abd7dd9f95a7ffbd60d4aa6a7f39481d7eeb9c1aa0da63d18b514ef61bad0ca62c80685668db850302a87f3691f625b82219ef9ee2ff5cec214be90843a82b69a59c8adaff85397a73148b1e178c43c4fa437e154c541bdd9f9fde401b800530b04f71d111ae743b42e8ce3404e0577e451c6c55cc0021b67aa4dc10ab16e7b363ac52d0849d27e95681c5ca71b2460af71d96f4a7a8d8e815976c46ba42139d5e7d4cb0d3426790c5c6510d0d2bcf7613d1a2f0978dafead938b5b1df817ee7d146eab6de8062b63b9fb05ccf38412c6b35340d6bc24e7d4654f1e6b20594e36a9b8dc06395a41f7c00d609418b5481fc94bc99c8d4272fe39f245a68705a8f2fb6acd40e5c9518ea60be4d91990b8f637b075b301ed88d7a99cc399e14d068bdbfd27bafab06c5d9e95ce9d4561fc9b7e19382f20debc1ebf15942cc74b1b2b67a199e52bbd5abc074a2d843a6a931fe178cec7da1cfbefa075261d951579ad051ae63aac0227e10b1d841c07fd672f7c4dac27ac4cf098347978ad3171256b4a65525b91b9f57ed9d2f223312b089ecfa8856a183b4c92e6fc6500efb1a4f103609c27236f733a6b5959c85f19b2c684e19a15e92d9c36dd1e1806fc2dfe8f608a591accd4e139e116a94945f701441a3c942c1f6e7dd883cfab7ee065e23106dbf947dc280a1e1e2a00f541aeb4b8a483fddad6ed545f239aa2e61674d056df8273d52a5cc9a689a0bfcf9075632f7386c6dbba79468a82ec79cdb1f19ceb3021f07f7408ff5806f2e4016ebee5a1b96a8abfd6ef7ba33ffc0b4e756e21565894edcde8b75e78cfdb62dd917e3301af25c83d735c53b9035b8a71150ad4519dbb722947d5f2083a471c1ab217ed6767c7c5f3e1ea1bddf5fb7f3fecd1602f3601b339dffc7c1a1f27e397108df3470a43538251607b093d69572ca6e7c562667c577ebdafe27eda97deddc52b014829e4b46168e0486d384f5b12c8b225b7bea2f2b4fd2ce2cbc3c15e670c7312505525e71a1ce73c8c87a3215bb8c02d3c0a4744ddfe9e04e5f4df77c6a34015540a752674d56aaa6494e396a4177b849c8d6f90310050f9b1c5346a75a30dd60e710f8bebb0290a5c31e5bdb7e67ff2789e1ff4afe2e5dc008587b86c52c3b84f3e70f7aca35cdd64a8245d045bbdf48e5a9571c31917e63cb0a0912403bd8deaa122317b0f5bb5976a1482eae33a702f6b7c66ad06c4eaf9c5e835a401ce000b01136f7416d0ad9ba5fde0fd67b8a2c8648e81c0a44d47b972c399c5a0e86ddf486f31d3189c1b3b30b454abe22cb85be8a3287e40ac1c83546aee91963907a7da3443319ab99f82f301b574f33ed90663101e616490c1548bbd6b630f2fe2a1046ac99e00edc417453b6f90d831de5cb5a88179d31166155e79c65286c05efce58fb15c184b30eae25ae06678473218b5a79d49e349a515beedacf6bec942097d2785795f9d86d7d0dd3a67a2a19c3699ca2958c09263eb73db2e03aee8c40cb4324b131e5fbe60cf310699d235f5be2b38b8d3d4ae7afc8fa9199eb310769812577048b06e770ad65286a798d4136d6c14f85cd7d8023f372ae4135f4769e4b5325721274d4f6ce53eb6e6969eb9302df292e47c1629b38d8afe4fbb4c5a5b33ee4e57af1ff087b67e120e33c13ec674363c198a7614eb179392e52a162d6781b1e09cda946620dedfdb049b6b8ba4634d5d8b078cc2d9ca0f1b678be0a540cd2904ff4b7f6db7500afc5834705f18a3b7a4a89b7d08e43f28d27f1dcc79e8a0082bd2d94e1ba37fb5a56c3a4c22c5783c0e6f0cfbc90b81c037a5927a905bfc690905292cb6de6519ff75a8e38000ab6fdc82a641694a992f4446dab5f1f25c80e5453ffc1eea8f9537e6c4dc25ce54f80f4ab22245b33f47f7a9d9e78a003451ac8e3e7f120fdf254d311937ac0308a2897198aa203c3e41c72ab46ee2847cf8ffa985e2353424f5e1ca9352bf0703aae13a06044dd4f49eab09aa4eeef8a1249f3640597bd2d8eb8f5a0dafdbb5f1a5b2676f965ca02747a215cbc1abe0e8a5b14b75400d7fff9a7d76209b4599e3e75fe761c48d2b081383ddd29c768db8d2c1745bb42867d6aa0c83202ea90acf4fe9a84d9339e07be9d09d41a24fa887d48bbc45b6b9389893d3b5abd627618bc8866c7ff5d16f0d6d473ca642f4fdfabc6ea829ac7ebc0c36342be46b80f46b1bca6e95eb80419cd17c0fa48b85846b740ddd6f6a59ae8508c01c78b912a69addfab857a6117d6355e8bea723d90a5e06552896e20c270d1fad70f10bff3fa7d19a90d7e394d0fc8b1b0bfa5c41292b8d1ce80e1f81f11979a86acc50a57b4fa551bf3be8cea90f53f990b3575f733a4fbeff99c5641d05fa387d3f9f0d19315af874e4bb560a7bf289426a8348ed0d62ed62d6e6a032f3aeee3beadf2e18f4e1028924778045a9e4aeddbd897ffbcb3b088634b031736abffa1a7b8ccda37f4ab63e8b8467b6f2d5fac8cf7b8addf91da799c83d1af05e8df8035e8068c3dec3ee16325aa2d1cb2b79fecbd83da9136c656100e515b04ee971e3a731e7574a58487534ec8548cb289ec00b89ac4e1d701b16ee03a2d14c992ab17f04a4283c0f1da95a774e98d65787dde8f1a2b2aec6b0d3077349913308c2230bc9e852476d7562245fee8de845c540ea8267fca9b1d7c4bc8dc1faeafc01c4ef7a5cec98070fc22a77691b205dc0831fbd4201fc34eb90bc5ad25d3e473abd6dd826b36b4a9a7021df79a364fda41165ca9f416adee836f3f6ca3530c823a37a1686509096d3860df722df73bad8a2a9cc63aa11f48a886c5aaba53b8baf41307c9183a5ac750f8a8185251215c9a4696a856fc81e81f79806563fa1812f0778ab317c82ab85162f24de423801a3c4c40a605169900f635740d9a16b49a19999117121917253c7258e111ec3d2c644801ebf9f290bcda32a5d545bf3d8abbfefb5947b9d061869a927e41dbb1c366b53cfac2bfdc7cb626013b0e72baa0d32b310532e7b35322fc8d8e357fe7b456965ffc6e30fb5159f0ea21cfbc41c71a9ab6b76d318741f6cb03dcf5dcc670ba55074ffc760a6e47f2d8326ef23e07a393c3164dddef6ec4336ced736b22606e1e146e285b9c17230532d0787c3126e961d64094713056ebf1a87c7c6c14cd41dffbb40b1deac7fe2a58fe83c581c25a4f34e48b25062b4c6713a03bbf9351b62988fefcbd363ac0fd5ee9e8b204b9308447683b6c9"}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000004040)={0x90, 0x0, &(0x7f0000003ec0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000003c80)={@ptr={0x70742a85, 0x8000, &(0x7f0000001740)=""/183, 0xb7, 0x2, 0x20}, @flat=@weak_binder={0x77622a85, 0x1000, 0x2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000001a40)={0x0, 0x28, 0x40}}, 0x1000}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000003e00)={@fda={0x66646185, 0x8, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x2, 0x31}, @ptr={0x70742a85, 0x1, &(0x7f0000003d00)=""/214, 0xd6, 0x1, 0x15}}, &(0x7f0000003e80)={0x0, 0x20, 0x40}}}], 0x21, 0x0, &(0x7f0000004000)="bc7a8d1a562470d72b35a96805c96e55dd2c43a9a1f6dacfd1b68df573b29e9d46"}) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)={0xffffffffffffffff}) setsockopt$MISDN_TIME_STAMP(r6, 0x0, 0x1, &(0x7f0000003fc0), 0x4) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001a00)={&(0x7f0000001880)="76ec4f2ce9632de5a741df08d27155cb18cfe57179fc6682eaff0a515ac5249461e3e9ba", &(0x7f00000018c0)=""/126, &(0x7f0000001940)="b226c7cd7938314431591354d6d3fa86d0dd6418487d4578a7777dbb5bdab5bd05c735aa9e04b9bfb219bf9e6847362a401f2d69b7e5a2df675073ffbf8f24b5be2fbeee90d506a89d340a29a1ca7ddd44fdefab5443f62086f7d1f185e6a0298a6ea4ab58d443a9eab3d2b3292595ddea65d1cd05aa1161bd1d828a861ea13744762e06f4b0ec59acc9ab92eae87f877b61cd784c27e3c04066352175f8eafc5ebec3b08986275fc645ed16f7a9", &(0x7f0000003ac0)="567e1c8fd832806c49f7dce957f6433648c1a2ba6eee80c27972c83ddb8d8cf70942c9fd9edc69f43d629836ebff0fd515df325687ea2b2a9116677778be95e99bcaf86da1d02084c47bd4e9e69ff4fa60f93ab403553005b7ed2c2ad5bdf74be65c1c3d43705ea69eb46a7471d69c65802f0c7b9024995619ebfcc8bb238b7a9893cf82fc8a3e9e612a314c1026", 0x401, r4}, 0x38) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000001840)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001800)={&(0x7f00000015c0)={0x68, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x2}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}]}, 0x68}, 0x1, 0x0, 0x0, 0x20004080}, 0x40084) 05:25:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) 05:25:13 executing program 3: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000011c0)=0xcb) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000100)="450119a7ea3b96760667bdeb709c963c2bf67e754029c3d5e693d12b4cb29b10d3aae56876d37ded4d1a7b5ecd22b41ae266af7c0e4bc7739398504c253c3e9aa0d1ebf55f1ed59763781e5b6023badf40f3d0e5808d8339be5f52a3fde5c6cd6a4e780915", 0x65) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) 05:25:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) 05:25:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:13 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)) 05:25:13 executing program 3: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000011c0)=0xcb) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000100)="450119a7ea3b96760667bdeb709c963c2bf67e754029c3d5e693d12b4cb29b10d3aae56876d37ded4d1a7b5ecd22b41ae266af7c0e4bc7739398504c253c3e9aa0d1ebf55f1ed59763781e5b6023badf40f3d0e5808d8339be5f52a3fde5c6cd6a4e780915", 0x65) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) [ 413.174174][T22858] binder: 22856:22858 ioctl d000943e 20001ac0 returned -22 05:25:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) 05:25:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) 05:25:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) 05:25:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:13 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)) 05:25:13 executing program 3: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000011c0)=0xcb) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000100)="450119a7ea3b96760667bdeb709c963c2bf67e754029c3d5e693d12b4cb29b10d3aae56876d37ded4d1a7b5ecd22b41ae266af7c0e4bc7739398504c253c3e9aa0d1ebf55f1ed59763781e5b6023badf40f3d0e5808d8339be5f52a3fde5c6cd6a4e780915", 0x65) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) 05:25:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)) socket$nl_generic(0x10, 0x3, 0x10) 05:25:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) 05:25:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:13 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) 05:25:14 executing program 3: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000011c0)=0xcb) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000100)="450119a7ea3b96760667bdeb709c963c2bf67e754029c3d5e693d12b4cb29b10d3aae56876d37ded4d1a7b5ecd22b41ae266af7c0e4bc7739398504c253c3e9aa0d1ebf55f1ed59763781e5b6023badf40f3d0e5808d8339be5f52a3fde5c6cd6a4e780915", 0x65) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) 05:25:14 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)) 05:25:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)) 05:25:14 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) 05:25:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) 05:25:14 executing program 3: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000011c0)=0xcb) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000100)="450119a7ea3b96760667bdeb709c963c2bf67e754029c3d5e693d12b4cb29b10d3aae56876d37ded4d1a7b5ecd22b41ae266af7c0e4bc7739398504c253c3e9aa0d1ebf55f1ed59763781e5b6023badf40f3d0e5808d8339be5f52a3fde5c6cd6a4e780915", 0x65) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) 05:25:14 executing program 4: socketpair(0x8, 0x5, 0x95, &(0x7f0000003f80)) 05:25:14 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000001680)={&(0x7f00000016c0)={0x10, 0x0, 0x0, 0xa92333c4706c7881}, 0x28, &(0x7f0000001640)={&(0x7f0000003b80)=ANY=[@ANYBLOB="480010e86fa3e700003b250dc92600000000", @ANYRES16=0x0, @ANYBLOB="100028bd7000ffdbdf2501000000060001000000000014002000fe8000000000000000000000000000aa0800190064010102050012003f00ec7f1c09fa56a7e0efdec0000006001a004e230000c7d4579a5b9d33355470ca382d616c5a571f9a03a2dfb052a76347a654de72737e0d5f48d5bd93cc99d75e8684deaf1071ada8df07ce3139ac3d800c3d31fec48e587a2718577a691c3a4e18ce686039972308809e6d9c2d80fecde81452dc76c7122e3bd37f2a3ef87a4a680814d4cf1d44fb1c889d27fcf6d55615f75a7a5ddc2bcbf30371120d2443e58c6f72cdf9f1c3efd554949baa3a5c"], 0x48}, 0x1, 0x0, 0x0, 0x4010844}, 0x40000) 05:25:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)) socket$nl_generic(0x10, 0x3, 0x10) 05:25:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)) socket$nl_generic(0x10, 0x3, 0x10) 05:25:14 executing program 3: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000011c0)=0xcb) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000100)="450119a7ea3b96760667bdeb709c963c2bf67e754029c3d5e693d12b4cb29b10d3aae56876d37ded4d1a7b5ecd22b41ae266af7c0e4bc7739398504c253c3e9aa0d1ebf55f1ed59763781e5b6023badf40f3d0e5808d8339be5f52a3fde5c6cd6a4e780915", 0x65) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)) 05:25:14 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 4: socketpair(0x0, 0x5, 0x95, &(0x7f0000003f80)) 05:25:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 3: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000011c0)=0xcb) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000100)="450119a7ea3b96760667bdeb709c963c2bf67e754029c3d5e693d12b4cb29b10d3aae56876d37ded4d1a7b5ecd22b41ae266af7c0e4bc7739398504c253c3e9aa0d1ebf55f1ed59763781e5b6023badf40f3d0e5808d8339be5f52a3fde5c6cd6a4e780915", 0x65) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)) 05:25:14 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 4: socketpair(0x0, 0x5, 0x95, &(0x7f0000003f80)) 05:25:14 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 3: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f00000011c0)=0xcb) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 4: socketpair(0x0, 0x5, 0x95, &(0x7f0000003f80)) 05:25:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 3: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:14 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 05:25:14 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 4: socketpair(0x8, 0x0, 0x95, &(0x7f0000003f80)) 05:25:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 3: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) 05:25:14 executing program 4: socketpair(0x8, 0x0, 0x0, &(0x7f0000003f80)) 05:25:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 3: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:14 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) 05:25:14 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 3: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 4: socketpair(0x8, 0x0, 0x0, 0x0) 05:25:14 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 3: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:14 executing program 4: socketpair(0x8, 0x0, 0x0, 0x0) 05:25:14 executing program 5: syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) 05:25:14 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 3: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:14 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 5: syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) 05:25:14 executing program 4: socketpair(0x8, 0x0, 0x0, 0x0) 05:25:14 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 3: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:14 executing program 2: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 5: syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) 05:25:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)) 05:25:14 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:14 executing program 5: syz_open_dev$binderN(0x0, 0x0, 0x1000) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) 05:25:14 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:15 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 5: syz_open_dev$binderN(0x0, 0x0, 0x1000) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) 05:25:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:15 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:15 executing program 4: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:15 executing program 5: syz_open_dev$binderN(0x0, 0x0, 0x1000) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) 05:25:15 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 414.503355][T23044] binder: 23041:23044 ioctl c0306201 0 returned -14 05:25:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)) 05:25:15 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:15 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) 05:25:15 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)) [ 414.596574][T23057] binder: 23054:23057 ioctl c0306201 0 returned -14 05:25:15 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x0, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x802) 05:25:15 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) socketpair(0x28, 0x0, 0x3, &(0x7f0000001a80)) 05:25:15 executing program 3: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:15 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x802) 05:25:15 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) [ 414.737689][T23076] binder: 23072:23076 ioctl c0306201 0 returned -14 05:25:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(0x0, 0x0, 0x802) 05:25:15 executing program 3: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 3: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x802) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 5: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000001580)='/dev/binder#\x00', 0x0, 0x0) 05:25:15 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 5: syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:15 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) 05:25:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32=r1, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64=r1], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xc8, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) [ 415.022092][T23115] binder: 23111:23115 ioctl c0306201 0 returned -14 05:25:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) 05:25:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:15 executing program 5: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000011c0)=0xcb) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000100)="450119a7ea3b96760667bdeb709c963c2bf67e754029c3d5e693d12b4cb29b10d3aae56876d37ded4d1a7b5ecd22b41ae266af7c0e4bc7739398504c253c3e9aa0d1ebf55f1ed59763781e5b6023badf40f3d0e5808d8339be5f52a3fde5c6cd6a4e780915", 0x65) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) [ 415.092022][T23126] binder: 23124:23126 ioctl c0306201 0 returned -14 05:25:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xbc, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 5: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000011c0)=0xcb) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000100)="450119a7ea3b96760667bdeb709c963c2bf67e754029c3d5e693d12b4cb29b10d3aae56876d37ded4d1a7b5ecd22b41ae266af7c0e4bc7739398504c253c3e9aa0d1ebf55f1ed59763781e5b6023badf40f3d0e5808d8339be5f52a3fde5c6cd6a4e780915", 0x65) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) 05:25:15 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) [ 415.152858][T23134] binder: 23129:23134 ioctl c0306201 0 returned -14 05:25:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xac, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:15 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) [ 415.229733][T23139] binder: 23137:23139 ioctl c0306201 0 returned -14 05:25:15 executing program 5: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000011c0)=0xcb) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000100)="450119a7ea3b96760667bdeb709c963c2bf67e754029c3d5e693d12b4cb29b10d3aae56876d37ded4d1a7b5ecd22b41ae266af7c0e4bc7739398504c253c3e9aa0d1ebf55f1ed59763781e5b6023badf40f3d0e5808d8339be5f52a3fde5c6cd6a4e780915", 0x65) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) getsockopt$inet6_tcp_buf(r3, 0x6, 0xd, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x1000) 05:25:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x98, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:15 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) [ 415.277553][T23151] binder: 23150:23151 ioctl c0306201 0 returned -14 05:25:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:15 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x54, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 5: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000011c0)=0xcb) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000100)="450119a7ea3b96760667bdeb709c963c2bf67e754029c3d5e693d12b4cb29b10d3aae56876d37ded4d1a7b5ecd22b41ae266af7c0e4bc7739398504c253c3e9aa0d1ebf55f1ed59763781e5b6023badf40f3d0e5808d8339be5f52a3fde5c6cd6a4e780915", 0x65) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) [ 415.353763][T23161] binder: 23155:23161 ioctl c0306201 0 returned -14 05:25:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:16 executing program 5: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000011c0)=0xcb) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000100)="450119a7ea3b96760667bdeb709c963c2bf67e754029c3d5e693d12b4cb29b10d3aae56876d37ded4d1a7b5ecd22b41ae266af7c0e4bc7739398504c253c3e9aa0d1ebf55f1ed59763781e5b6023badf40f3d0e5808d8339be5f52a3fde5c6cd6a4e780915", 0x65) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) 05:25:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r0, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e"}, 0x60) 05:25:16 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x1000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xc8, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xc8, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 5: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000011c0)=0xcb) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000100)="450119a7ea3b96760667bdeb709c963c2bf67e754029c3d5e693d12b4cb29b10d3aae56876d37ded4d1a7b5ecd22b41ae266af7c0e4bc7739398504c253c3e9aa0d1ebf55f1ed59763781e5b6023badf40f3d0e5808d8339be5f52a3fde5c6cd6a4e780915", 0x65) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) bind$nfc_llcp(r1, &(0x7f0000000080)={0x27, 0x0, 0x0, 0x2, 0x9, 0x8, "8933fa56b242ae98cd966cc4dda505d2315a600dbde5d394c3c6ecf0cb7ffc932c820b2cc73d4bfd7f7eda4333af9a5a0ef91ffd159a5d92a07cfc6d49fc9e", 0x3a}, 0x60) 05:25:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x54, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xbc, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 5: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f00000011c0)=0xcb) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000100)="450119a7ea3b96760667bdeb709c963c2bf67e754029c3d5e693d12b4cb29b10d3aae56876d37ded4d1a7b5ecd22b41ae266af7c0e4bc7739398504c253c3e9aa0d1ebf55f1ed59763781e5b6023badf40f3d0e5808d8339be5f52a3fde5c6cd6a4e780915", 0x65) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r1, 0x118, 0x1, 0x0, 0x0) 05:25:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x54, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xbc, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xac, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xac, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x54, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 5: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, &(0x7f00000011c0)=0xcb) setsockopt$inet6_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000100)="450119a7ea3b96760667bdeb709c963c2bf67e754029c3d5e693d12b4cb29b10d3aae56876d37ded4d1a7b5ecd22b41ae266af7c0e4bc7739398504c253c3e9aa0d1ebf55f1ed59763781e5b6023badf40f3d0e5808d8339be5f52a3fde5c6cd6a4e780915", 0x65) 05:25:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x98, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x98, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x54, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 5: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f00000011c0)=0xcb) 05:25:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x54, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000012c0)}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x54, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0xd4, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer, @dead_binder_done], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x54, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 5: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) 05:25:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x54, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:16 executing program 5: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) 05:25:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 416.129201][T23268] binder: 23266:23268 ioctl c0306201 0 returned -14 05:25:16 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x54, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 5: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 05:25:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 416.220782][T23278] binder: 23276:23278 ioctl c0306201 0 returned -14 05:25:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 5: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) 05:25:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x54, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:16 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x54, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:16 executing program 5: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) 05:25:17 executing program 3: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x54, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 5: socketpair(0x0, 0x80000, 0x3, &(0x7f0000000040)) [ 416.346244][T23296] binder: 23294:23296 ioctl c0306201 0 returned -14 [ 416.366254][T23298] binder: 23292:23298 ioctl c0306201 0 returned -14 05:25:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 2: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 05:25:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 3: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x54, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 5: socketpair(0x0, 0x80000, 0x3, &(0x7f0000000040)) 05:25:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 2: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 05:25:17 executing program 3: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x54, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000012c0)}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 2: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) 05:25:17 executing program 5: socketpair(0x0, 0x80000, 0x3, &(0x7f0000000040)) 05:25:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000012c0)}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 2: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0xa, 0x3}) 05:25:17 executing program 5: socketpair(0x2a, 0x0, 0x3, &(0x7f0000000040)) 05:25:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xc8, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death, @free_buffer], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) [ 416.722974][T23347] binder: 23342:23347 ioctl c0306201 0 returned -14 05:25:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:17 executing program 5: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000040)) 05:25:17 executing program 2: socketpair(0x2a, 0x80000, 0x3, &(0x7f0000000040)) 05:25:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xbc, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}, @clear_death], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:17 executing program 5: socketpair(0x2a, 0x0, 0x0, 0x0) 05:25:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:17 executing program 2: socketpair(0x0, 0x80000, 0x3, &(0x7f0000000040)) 05:25:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0xac, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}, @increfs_done={0x40106308, 0x1}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) [ 416.871422][T23370] binder: 23363:23370 ioctl c0306201 0 returned -14 05:25:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:17 executing program 5: socketpair(0x2a, 0x0, 0x0, 0x0) 05:25:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 416.963428][T23384] binder: 23383:23384 ioctl c0306201 0 returned -14 05:25:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x98, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001300)=ANY=[@ANYBLOB="e70000000000004b", @ANYRES32, @ANYBLOB="000000000000000000000000852a646600000080", @ANYRES32, @ANYRES64], &(0x7f0000001380)={0x0, 0x18, 0x93}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 2: socketpair(0x0, 0x80000, 0x3, &(0x7f0000000040)) 05:25:17 executing program 5: socketpair(0x2a, 0x0, 0x0, 0x0) 05:25:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:17 executing program 2: socketpair(0x0, 0x80000, 0x3, &(0x7f0000000040)) 05:25:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x54, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x2}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 2: socketpair(0x2a, 0x0, 0x3, &(0x7f0000000040)) 05:25:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 417.173683][T23411] binder: 23406:23411 ioctl c0306201 0 returned -14 05:25:17 executing program 5: socketpair(0x28, 0xfeffffff00000000, 0x0, &(0x7f0000001a80)) 05:25:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 2: socketpair(0x2a, 0x0, 0x0, &(0x7f0000000040)) 05:25:17 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:17 executing program 5: socketpair(0x28, 0x4, 0x140000, &(0x7f0000001a80)) 05:25:17 executing program 2: socketpair(0x2a, 0x0, 0x0, 0x0) 05:25:18 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:18 executing program 5: ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x80600) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f0000000080)=""/107, 0x6b) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001500)={0xac, 0x0, &(0x7f0000000440)=[@enter_looper, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/189, 0xbd, 0x1, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/141, 0x8d, 0x1, 0x26}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000340)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@binder={0x73622a85, 0x1}, @fda={0x66646185, 0x0, 0x0, 0x19}, @fda={0x66646185, 0x3, 0x81, 0x32}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}}, @decrefs={0x40046307, 0x1}, @acquire={0x40046305, 0x1}], 0x1000, 0x0, &(0x7f0000000500)="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"}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x3) connect$nfc_llcp(r0, &(0x7f0000001540)={0x27, 0x1, 0x1, 0x1, 0x3, 0x1, "b5298bcce31a212e366be20df98b8b416f2b901ea187010a51a83cecd6351521ef9076ff1c36c03cdc6df84ede85ece467253f3c67366173b6c5835f0f145d", 0x3e}, 0x60) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000016c0)={'gre0\x00', &(0x7f00000015c0)={'tunl0\x00', 0x0, 0x40, 0x7, 0x1, 0x2, {{0x2e, 0x4, 0x0, 0x39, 0xb8, 0x67, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_addr={0x44, 0x54, 0xcb, 0x1, 0x2, [{@rand_addr=0x64010101, 0x3c}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x80000001}, {@empty, 0xfffffffd}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x6}, {@loopback, 0x9}, {@multicast2, 0xa35}, {@private=0xa010100, 0x400}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast2}]}, @rr={0x7, 0xb, 0xaa, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @lsrr={0x83, 0xb, 0x8d, [@dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x38}]}, @timestamp_prespec={0x44, 0x24, 0x1d, 0x3, 0x4, [{@multicast2, 0x1}, {@multicast1, 0x244}, {@broadcast, 0x10000}, {@broadcast, 0x1}]}, @noop, @end, @timestamp={0x44, 0xc, 0xdd, 0x0, 0x0, [0x401, 0xfffeffff]}, @generic={0x83, 0x8, "443a7be42689"}]}}}}}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bind$isdn(r0, &(0x7f0000001700)={0x22, 0x7d, 0x81, 0x40, 0x1}, 0x6) r2 = syz_open_dev$vcsa(&(0x7f00000019c0)='/dev/vcsa#\x00', 0x5, 0x2000) connect$nfc_llcp(r2, &(0x7f0000001a00)={0x27, 0x0, 0x1, 0x7, 0x9, 0x3, "cff79527d831e7c77626de0fa7c75797cbe247f9f9f6d165f6145a497de3eb344aa6ce2b57981714cd3d6ce190c1a5143cd5ff108580ba256ad16558f013e1", 0x3b}, 0x60) socketpair(0x28, 0x80000, 0x3, &(0x7f0000001a80)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001bc0)={'ip_vti0\x00', &(0x7f0000001ac0)={'syztnl2\x00', 0x0, 0x700, 0x10, 0x4, 0x66, {{0x33, 0x4, 0x0, 0x6, 0xcc, 0x64, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x17}, {[@timestamp_addr={0x44, 0x34, 0x39, 0x1, 0xb, [{@remote, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@local, 0x20000000}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x400}, {@remote, 0x63}, {@multicast1, 0xcd2}]}, @timestamp_prespec={0x44, 0x34, 0xcf, 0x3, 0x2, [{@multicast1, 0x3ff}, {@local, 0x80000001}, {@rand_addr=0x64010102, 0x101}, {@loopback, 0x40}, {@remote, 0xa0}, {@empty, 0xffff}]}, @noop, @timestamp_addr={0x44, 0x44, 0xcc, 0x1, 0x0, [{@multicast1, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x10001}, {@broadcast, 0x8}, {@private=0xa010100, 0x7c35}, {@broadcast, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x3}, {@rand_addr=0x64010101, 0x8}, {@private=0xa010102, 0x7fffffff}]}, @lsrr={0x83, 0xb, 0x8a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}}) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000001c00)) sendmmsg$nfc_llcp(r3, &(0x7f0000002380)=[{&(0x7f0000001cc0)={0x27, 0x1, 0x2, 0x6, 0x9, 0x6, "18d9db9c5ca8665b3010fa5b024e356b390063a3f89b756ad744743306ca9ce5b8fcd3a1110ab67739044f8385e29abbc9479e1fcf6024dc5d1a2c1dcd2f7d", 0x31}, 0x60, &(0x7f0000001dc0)=[{&(0x7f0000001d40)="ea6e24ef6aedc08597754ba76c807bd0fb98f97ae335800dd17655268595ec386a59f42bc8ac95d67756669767ff272040c60b854ca25efe78341aa71bc1fe42fe3c10fedae1150fb4dd3347a2ded4c0b55c27dbfeb2a21ad71a6397d54c3620ff4dce41d73da0f79b915ce5ae3e4297845eabc02241653eb19d90", 0x7b}], 0x1}, {&(0x7f0000001e00)={0x27, 0x0, 0x1, 0x4, 0xfc, 0x0, "a3a027d87ab6e8f3068c09afdd4c286f12540c96ab3f56c48813949c11251ebd69680265df4420a1b029ec2f7c04daee75739a1b0a0b28a3b82760904a470b", 0xd}, 0x60, &(0x7f0000001ec0)=[{&(0x7f0000001e80)="71d045a9a24246892aba0b9cb96ed5e03c6d20f2c4d29e7efbdd", 0x1a}], 0x1, &(0x7f0000001f00)={0xb0, 0x102, 0x2, "b683b271daa69fcb3d9c72fbc7e9455aea95e6002566383d384286b8446412c864d3d7061a912afd60e63657944668b670722d82c690b8b19cb2276a758cd47e95fc2de1765e326cbfaffc3197f23d0828051b6d780bc8f27e43fbaf3d13c44a07c6f3cde08e250605e4348127669ed083dce7b7927c2a9aa657ca23ce7611be58ee1c03ceaa9f2339c9f84bb38a04075e9f4e129436780e788121f3"}, 0xb0, 0x800}, {&(0x7f0000001fc0)={0x27, 0x1, 0x2, 0x2, 0x2, 0x9, "f2df2eab944e9c609f6d8f1e24be0d8e0c8460023a61c5ae1f82a83e8c28ca1fe8e242a79074ef5f98882616b060cfb235b76c189e7c3172eeb7c88564a426", 0x3c}, 0x60, &(0x7f0000002280)=[{&(0x7f0000002040)="31f2e0a20312b3c36b36a9ee00a8d5725f6ae2e1d0556d2b75596c03d91dfa838be5761c7fdb0ddb559d160c981baf7df6b416c8da4cd048aee45ee72fba744cfc165b9b321778a8cbe58221d7ac7082c90d3de475a981ec68100442d5b4c40981b469ebcf9db22c373a8250ceb27a0af97dcd3537830407f85987afe648b5c99b0391b8da19ed5e020abb9efd1ade070091be4ba93c730fc7f05d540d2b233cca907b006c6d8f27000945d33f7e349bd7cca53a1a5736615a2264290bbf63945eb34d5e946e26a1d9c0822c22", 0xcd}, {&(0x7f0000002140)="f820f688647f93598c5157db0ef645a953799930c8f2f762992b9a9700f80f76d44e86c3b4db48e1f6c3dc2790c50effdde742cd0c29d7047a7a7eb788b7c077d10ce055159d2dbdcf94d9611560381fb96b76cb063eba9a51c03d0d1e4bee402c2e28bca6a99619770e0bececd489d070ba87b547d6296ca00e145bc92211cad1f5b2121ee489524f6bb0c0bd49a8376c0f68287a5ba9a752a14e3c", 0x9c}, {&(0x7f0000002200)="086e937ccdbfa7a3ccbd6138e33705090f5061343da86505cb98b00a23620eb32a55708226b507fa64bd34777a4dfa4c76f93d9ae650c5aaec1a90e2dc9809da60508fdb83c6603a70b6250f4bb873ff5c02759d2916020ec9de85bd0a80d5e2320b6f72a54db072f54c79e3", 0x6c}], 0x3, &(0x7f00000022c0)={0xa8, 0x108, 0x3, "2890055fd05c30eabbc1bc0fbb89cff3b2d92b93db2ba4334abf28ba9fb77eb10d9a60ac5a24e67224bc55d1466cff0806b00fc81a1827244f95f5caede321218dc009f59e0f34e3e15e469341eaee20fd42e2342c6db7d31457dd8ef86fdc610231168b3c5fdb8c5255d45fae276c0d8349a76edeebc3f043bcb198b625d2a8f488f959b06893bc07a14ef0387ee8871e"}, 0xa8, 0x200400c1}], 0x3, 0x20000000) 05:25:18 executing program 2: socketpair(0x2a, 0x0, 0x0, 0x0) 05:25:18 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:18 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 2: socketpair(0x2a, 0x0, 0x0, 0x0) 05:25:18 executing program 5: ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000000)) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x1, 0x80600) getsockopt$nfc_llcp(r0, 0x118, 0x2, &(0x7f0000000080)=""/107, 0x6b) r1 = syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001500)={0xac, 0x0, &(0x7f0000000440)=[@enter_looper, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f00000002c0)={@ptr={0x70742a85, 0x1, &(0x7f0000000140)=""/189, 0xbd, 0x1, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/141, 0x8d, 0x1, 0x26}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000340)={0x0, 0x28, 0x50}}}, @increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000380)={@flat=@binder={0x73622a85, 0x1}, @fda={0x66646185, 0x0, 0x0, 0x19}, @fda={0x66646185, 0x3, 0x81, 0x32}}, &(0x7f0000000400)={0x0, 0x18, 0x38}}}, @decrefs={0x40046307, 0x1}, @acquire={0x40046305, 0x1}], 0x1000, 0x0, &(0x7f0000000500)="ff5df1b57cd8b92b7e84e030534fee952129073073334d48cdf70af4a27e517b82a7d28977af63e58b15da8d3588b6ea927064b14e296ea7b3237c95ca885fe8c8dbad9a9a7f1acbccd4df23e6df740374679a0410c34ab486586eb236745bc3aa6473f17b0f34f4c5a7ecbd52f7364d4bea9fee7865fcf537e3ec63b4a06c15eed4ad6b79f22d69846891b3466b7c91f1b5caadd716977ad790efe2671c335468ed540ef64d12cd50eb72aaf6657d6eb3b5fb752c2ed7a38d4b0123129b091bf9c05ff693e314a26a27d78f653a7dc9b03ea010fbdb1a9b9fb951d5f6dd24d98e21037d8aeb07396be258303e2643126d50f0c6d0dab8d3aa1f7a8c866764c93c63859c018c490845d7d892b5cc0a77eb4b48bef057abc93f8788bea5cbb7a8fad23937fe4394ddb5701d15ced031a141b2bb31391988d433fd01ed92489ff9ce89e28b3451d9f09761a96755762271768053f8d8c6e2e4b7fcf57d2cff0f27886c17bab81cfa0b15cdd8924fa63d6ac344ad81410d2435c007324328e694d0bc005619215c1d77e6d4cf1217d20eec556f403db32ab115d8e02dfa80e816156fdb2ce89182d35ec60f18d34241243aab85a5f001313ed68d6ab69892bdb01737bd172b81ea1fbc8c6d100a3540a82310113da2dc3db5e76eac4be574ec1c3baf3ec32e2f3f954af05e86123ddb25906fa649453b07e05e19477c8b1967cbc574d22c91ba6babdbe30aed17e69647a5ebd379f768295b21a67d6b2a31ce4e075ec9dd465315209d17d6ee982270a3a1f283f09ab4a501c6a1281034513a7930caf6744653fb7f463306a8c211e2a655f2e9486f6945c31dd5cb00f33ddaa322ce6836cfd191f16169982d48cd1b943050909d8aed0565c8021fc27b11a022c01196ce2431a5f3af4b9a9567cbdfd0264020b2a5429003d09a62699a9a77bbd6c70309dbbdcdf67ee9b80414daf4ec8a7c0adf3cabdb3759b634c24e479e04ce9f1e7620ff3525047e7928098fc90bfc01d7ab90917edf57a079d0c4aba25696f8be7cb7950aa7394fff5f9251f17e0df17aec9b44c7ba6cdbdf40ee2f70308d7dc3b53f924ed530498bf172f096d57f7b704859bf910f3826e52effb3efb240654bc90dda7dcbc5487e0dd064ae98ff45ffd9d9216db0c05669abe476474a32c2f6017a85bbdf6ca9f9594e5b954ce681babc44200bce2a66ad932f2976abe2b878854afbb24e08f4ad5db6bf48528e6d172626277c5b30e8f156d21484c48f028ac79ccd82e21a392035904b43426372cdc7083dba7a26ad4d8827b06ad89fb023ace6f71b819b3243cabf10bde832571afbe2a19fb2ad7ade353114e91c74f794c49858a6e64c268fc712f58508c8134ca0b82e246be60bb1bc50ef2499c7fc58f0cdecaef5c52b708ce897b98eab0539fc30e2471f801a7dfadf7a6706ede91d627d1e1725807cf3b3832f53abdb1223b4b670d125629b00238430a1ad0d3c929bca43de4e9ca537ef64405b12c352a3eea54b90643972946481bd81ea483d092d0918b6b8a01edc7be8c09bd7b9d90b3b3c82661af8b3258472b5275ac1b9ad4c76b0cbe6b13453c579c5701b97b5326fed7356d4f58560d88f850e50b1574b5d7a3b481a7207d68a7943b825b612f3247b41cf488443495586cbc5740d59e6131a03bd00ad2c560f990956c0cb88f992152cba3856663336079ab4e0b79a8deacc7492001b45a827024ca8196d05941eb29ebe6fe96ce90bd9b217451a5ee271d15d21d3b781a0188730c04ad9e7aefe325eef7f8f28940a2760528f56af0f14b9fdd9c508381f92d4d466f283f8c9590e585571dbb53f41fb2134224afa8944b3ec96d5a3dbc30ab34d3b9dafe4e8232c492335ee1576fc9b0696f10b82cf5b83b0f2c9b439d126b5723b8edbc229a472d1d22393805fcaab59f029547d8e4ace8b57976384a59875098ba6d63102070b08bf030d966253796877b180e37e3f4a6b3f1c1d7493313c3d1d0d96b031247fe7ec0870dcb2bb00c18deae7ad136eaa37203bf17d9d98b01b18acf5c7162b3426d1e7665bbf85390fb53879430e438ec87bc32d04c4e9f64fec424ecfc1b41249cfc3e90c9c7b3b8710381cf7cc30ec3481d8a809a179561cf57ab8e826eaaf8cd747810409c8c8f20960fbfc9495f54ddf8ab1d3f2541be54884e671abf1b559af8640e66e50a6bef0dbe917bc62b2b53fa2986b7d51378129fd36979a4173d7587ce1549814fad7e7039a07d4b60fdb3fe8605ea15e93549542f7447eff3ecbcf73e43133b0a11d792978f825a6c389f6539f8633e2faff04cc3c783245bb9fb0b93264a829c917b799e369cdcd4aea565ba94486c693d57a3a0323d1248bdacf798eb1d814eebd27664b9fde3b3d359f8c264d579a7c9c9847c3f3e850f0105118ef1702104ed876da65a3138ddbff0d831cba21384baa2b4cedabb2fcb7e59c70488edc536e049f9d9a9a2d3bf05a6342cabf9616bef3adc74a0f1c4871bc7d051cf25f28451b9102d49ffb41ed6c8d8574d714a3d11eb3d4e8f48fa9c2b08635f1e509faeecfc5001e745b7765475acbcce90e709d4fd85ee07d366f007024280e817656044ec6445c18096c9f95ab0ffd816d2044ba22c0eb49050714ff5acf11f569c8bee6e4ecf1065838fc1791d8ab04c30885070ffc21415233ff19fbd208dfc82f032f214fc6c6bce63151755495f56e5b7605b5667dcc8cfa166d1f44701f4021cd2ac785bcd27f54d47ea484b260d88e87294c03287444500c1058330d851802f46cc6edc5513db7db47a7b59c94b07719d97e4c0b68aa1f959a031a197e0e9aa0c35bab2f6bebfc67f601b9e4dcbf19918c12354dccbfac22dc62d41e7c7b97d74cde94745d7dc68091f76f83ba8a10445dc886caebca3067bf54f4e1335d4eb386572c18f7381d723d73b33ab5ceff4ada1214d0e0296dc1350b43d769644af8ad87f455adae22a48249cd32b0facd73f9c97f2c8203b8f877dd2d13074936134e1a1ebd7fdffb54f3890ca2044984ae076bcb5d9cf80e92ac9ed1bf19546ac675e3f813dea305e83fbb933d8530ffb02d2c58e661082fbd89cd56a82d0a68335d084f6d52829bd5555680a3127dd476636dbeca3bd1bd20a4f188b6e61179ab0052c4fb4d1b07da0363f8ba41681301f8390265f896f9578b00da1a45bd7a8ed07362b6d935f509ebf6ac5fa045a16f1bfe5fcf019076d6376f906bbdf0aed6b9f35dd52c08fde1c26989227617f7347094a1885dae6dd7d1aae78685cad8e8ba372e2ade78a62f754270ae026ba8f8ded344d7cbf3ef030eaebc4216083d04ea77acaefd1b19c72577d6036e80223ea575d10472f51fdf218766bf92d840e904fc9e1e28c4f02586fd510527ab1b55c62303134d29a1abda297af1abfe385373088a3fb8145d56ec776bbacd8af1b99ed4c376494da4760d68ca14b4db344e77728871efcda7c46998cbd8164e4f23561ef3997359979a302467760cdb3cba5a4f5fc42274ced4b17d9c8c79ee9681bbfc73064e811b20d5d56bd883706c42234800c822dec84acce095d088a0347f4337f12e42d34b62293066cca0c112cc37a1bb314e5565f47bbb22f0434c77d723bc1bd21a7c150d3af5760f3a790c64fa5d5af3c61489b57f87477b37fce4b266074396d4fd0e41338f5cefbc9c0c6c548a03b0c3c75be604c89398022f9aca1720c5796da93df62af996527e06586f1c3ae92f813976b1d6900a2049a21c9db18bc689e9582caf797ade8462755ea1acf33bfb4b6b9bde1e8e6430c0ab48126687d86a6826d69261304fd41f17829f40932a70246cf126bfdb9b7a0f814f2d18f69e0b74a8c61fa197acd3224d629d3e74dc73786eae8b243cc76cbf9089442625acfbbd30067b73823cb6e1e4b50c64b31052aa536a5bdc6813f1088320996f7c2e61d0519c52182389c3daf1d4928893a443b0dea8a1b9a9d3794a74387539f56bf6030c7509e603710801bdf7782ae8b869ee2257187033b0b8774d7b059dfdc3528abf6c15b659a18c39b18bb525c8bd1ccbca07fa37e0effc345e0c276ab3590441399e925595335088b00653bd74f5f1816a8b005fb41b0c6a763bc803bdc247ddef10475bbe178fea228ad7d4dfb5a4019087a1f2ea28e0f00b6e3d75f1cb06ee3b6eaa8ddbd07a39feb032891336d58582eefb0a3733be554255271412989c66444b13ae269a2d524f6b5329b614c6cf65cd4c1cf39cd47e3da229c042872a9d191989b59f2e736af7e4fd4cb06565101a86f3f3de3d0a40d39d54e0272a599f4fca78c3a77dc7cc3cd1970bf7ed1e2f781605ebe3fb9f1229152bb17c2c189d4878d9c6211fe055862f92c598ba8e6ad2e027868290ebf6983eb2759eef06eb09432ceedc0b3328e3909e4d9ec5e530520939f54c29292d6e31cfec16f700f0172c302a9eac8fbe462b43c825e5a85aa62e194e7886769d00882a0fd947106e9678c5f6d6c3568577da35265db1885b67a590cea23a4f8cced4f1de18758aa210d1bb314ed9e57dfc77c3c778a28ece4a2173722073d2aad3c8c7524f8ca47fc37818f4a08ab2c5adb17261fe411ad5dcf522a3b846e4cf6eec1cdff03ffd1efb1447c6fb77fe4adcdf4e1cfc3dd39538f8381719cfef1fb30a4b85241ace8be6ade82343b25d21c272dee70a984ec690758a535f218c491b6ae98eaa0361c6f697b89c97b71eec74c753a08ef0a4864cd39d168d8ddf71deca55b8719477bf714d53aac33872cfaba4a26685f0995a55651f9501cd14b6497dff1b7bff9636cca5225c7e0f041b0201ba63915aa7de99b9e6dafe18f604f6bc6439331ce8b4d0b0151dbf8088339479b212c8433532c5afe9f9a68e3ba3007c7832e9b03b48c87c5bea6f2f73011884f9b99c354155a90a099b204b0d448923e176217ce3c86ddc7708a571fc83b127853c48400e0f0ac3d7cd10adf5280076b53023451f09e62451e0bb4831065945c1fb9595418da69c0631efdb670ab9195440e7022c0e03e38513e89409edcfe5945ebbfaa05079e1b81f5601079f77ea87f07fa6fe9311a324b0ee8c74dcb46f94a0a270d2c69442b4ab396c355b8e9d889628b88dbea0d5883c4500f7d756dc16051dd7a59245644031e8cd79456d0084c990de90e925ce28c612c99a5187e189f6089a2f0e4dd29006581e222d302db2378fa9f8f057727f07f9df6d7c338982fdf3c287ba95f73797aeab77207247ee5101cf2e3f75f29dc605d9b71f339fc916f8cee08e510171a713995ce232e87010b09c255981da34a847b009546fcdec075cc9d789f7862aef8f1c0efd0bdc365f8358aea587d0b9ae9166326c02369c13e1aca186ae76f3f41a0ad500da4a24da712038515f62ce550bd55863817ce1cde276d176307655a687bb3fdcb69738e3eb5f7963c892d658aa08c7b551ea4b8532997cdb883447dcf7d25be3c9d14e85dfa08fcedbdb09af2337b6113bddb984d4fb4dc5b6d8eda10c341faae2a1613b20ec628c3f2e8783e445ef3bb84be78f62dfa4215eaf2187e89f13b6bb716f33fa6a6125a6066f27bd760a96f484cd4127342f44c3f4880d94d9504c478941f4926b81f808e9a1fad0207b23c514ae73429b2984a495879e93198f009d32ba44158e05ac33745ef0b718b55ee3ed4b016a587bbe1368b433c03eb40011d4072023447ea73a0ca4ea701750a376beeeffa2b88a745471ca603ccc0a32e87a6985c31cf469030a6062238e0cee84d404c10fb375"}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x3) connect$nfc_llcp(r0, &(0x7f0000001540)={0x27, 0x1, 0x1, 0x1, 0x3, 0x1, "b5298bcce31a212e366be20df98b8b416f2b901ea187010a51a83cecd6351521ef9076ff1c36c03cdc6df84ede85ece467253f3c67366173b6c5835f0f145d", 0x3e}, 0x60) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000016c0)={'gre0\x00', &(0x7f00000015c0)={'tunl0\x00', 0x0, 0x40, 0x7, 0x1, 0x2, {{0x2e, 0x4, 0x0, 0x39, 0xb8, 0x67, 0x0, 0x3, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@timestamp_addr={0x44, 0x54, 0xcb, 0x1, 0x2, [{@rand_addr=0x64010101, 0x3c}, {@dev={0xac, 0x14, 0x14, 0x42}, 0x80000001}, {@empty, 0xfffffffd}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x6}, {@loopback, 0x9}, {@multicast2, 0xa35}, {@private=0xa010100, 0x400}, {@multicast1, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@multicast2}]}, @rr={0x7, 0xb, 0xaa, [@initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010101]}, @lsrr={0x83, 0xb, 0x8d, [@dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x38}]}, @timestamp_prespec={0x44, 0x24, 0x1d, 0x3, 0x4, [{@multicast2, 0x1}, {@multicast1, 0x244}, {@broadcast, 0x10000}, {@broadcast, 0x1}]}, @noop, @end, @timestamp={0x44, 0xc, 0xdd, 0x0, 0x0, [0x401, 0xfffeffff]}, @generic={0x83, 0x8, "443a7be42689"}]}}}}}) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) bind$isdn(r0, &(0x7f0000001700)={0x22, 0x7d, 0x81, 0x40, 0x1}, 0x6) r2 = syz_open_dev$vcsa(&(0x7f00000019c0)='/dev/vcsa#\x00', 0x5, 0x2000) connect$nfc_llcp(r2, &(0x7f0000001a00)={0x27, 0x0, 0x1, 0x7, 0x9, 0x3, "cff79527d831e7c77626de0fa7c75797cbe247f9f9f6d165f6145a497de3eb344aa6ce2b57981714cd3d6ce190c1a5143cd5ff108580ba256ad16558f013e1", 0x3b}, 0x60) socketpair(0x28, 0x80000, 0x3, &(0x7f0000001a80)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000001bc0)={'ip_vti0\x00', &(0x7f0000001ac0)={'syztnl2\x00', 0x0, 0x700, 0x10, 0x4, 0x66, {{0x33, 0x4, 0x0, 0x6, 0xcc, 0x64, 0x0, 0x1, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x17}, {[@timestamp_addr={0x44, 0x34, 0x39, 0x1, 0xb, [{@remote, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}, {@local, 0x20000000}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x400}, {@remote, 0x63}, {@multicast1, 0xcd2}]}, @timestamp_prespec={0x44, 0x34, 0xcf, 0x3, 0x2, [{@multicast1, 0x3ff}, {@local, 0x80000001}, {@rand_addr=0x64010102, 0x101}, {@loopback, 0x40}, {@remote, 0xa0}, {@empty, 0xffff}]}, @noop, @timestamp_addr={0x44, 0x44, 0xcc, 0x1, 0x0, [{@multicast1, 0xbc}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x10001}, {@broadcast, 0x8}, {@private=0xa010100, 0x7c35}, {@broadcast, 0x80000000}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x3}, {@rand_addr=0x64010101, 0x8}, {@private=0xa010102, 0x7fffffff}]}, @lsrr={0x83, 0xb, 0x8a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}}) ioctl$LOOP_GET_STATUS(r2, 0x4c03, &(0x7f0000001c00)) sendmmsg$nfc_llcp(r3, &(0x7f0000002380)=[{&(0x7f0000001cc0)={0x27, 0x1, 0x2, 0x6, 0x9, 0x6, "18d9db9c5ca8665b3010fa5b024e356b390063a3f89b756ad744743306ca9ce5b8fcd3a1110ab67739044f8385e29abbc9479e1fcf6024dc5d1a2c1dcd2f7d", 0x31}, 0x60, &(0x7f0000001dc0)=[{&(0x7f0000001d40)="ea6e24ef6aedc08597754ba76c807bd0fb98f97ae335800dd17655268595ec386a59f42bc8ac95d67756669767ff272040c60b854ca25efe78341aa71bc1fe42fe3c10fedae1150fb4dd3347a2ded4c0b55c27dbfeb2a21ad71a6397d54c3620ff4dce41d73da0f79b915ce5ae3e4297845eabc02241653eb19d90", 0x7b}], 0x1}, {&(0x7f0000001e00)={0x27, 0x0, 0x1, 0x4, 0xfc, 0x0, "a3a027d87ab6e8f3068c09afdd4c286f12540c96ab3f56c48813949c11251ebd69680265df4420a1b029ec2f7c04daee75739a1b0a0b28a3b82760904a470b", 0xd}, 0x60, &(0x7f0000001ec0)=[{&(0x7f0000001e80)="71d045a9a24246892aba0b9cb96ed5e03c6d20f2c4d29e7efbdd", 0x1a}], 0x1, &(0x7f0000001f00)={0xb0, 0x102, 0x2, "b683b271daa69fcb3d9c72fbc7e9455aea95e6002566383d384286b8446412c864d3d7061a912afd60e63657944668b670722d82c690b8b19cb2276a758cd47e95fc2de1765e326cbfaffc3197f23d0828051b6d780bc8f27e43fbaf3d13c44a07c6f3cde08e250605e4348127669ed083dce7b7927c2a9aa657ca23ce7611be58ee1c03ceaa9f2339c9f84bb38a04075e9f4e129436780e788121f3"}, 0xb0, 0x800}, {&(0x7f0000001fc0)={0x27, 0x1, 0x2, 0x2, 0x2, 0x9, "f2df2eab944e9c609f6d8f1e24be0d8e0c8460023a61c5ae1f82a83e8c28ca1fe8e242a79074ef5f98882616b060cfb235b76c189e7c3172eeb7c88564a426", 0x3c}, 0x60, &(0x7f0000002280)=[{&(0x7f0000002040)="31f2e0a20312b3c36b36a9ee00a8d5725f6ae2e1d0556d2b75596c03d91dfa838be5761c7fdb0ddb559d160c981baf7df6b416c8da4cd048aee45ee72fba744cfc165b9b321778a8cbe58221d7ac7082c90d3de475a981ec68100442d5b4c40981b469ebcf9db22c373a8250ceb27a0af97dcd3537830407f85987afe648b5c99b0391b8da19ed5e020abb9efd1ade070091be4ba93c730fc7f05d540d2b233cca907b006c6d8f27000945d33f7e349bd7cca53a1a5736615a2264290bbf63945eb34d5e946e26a1d9c0822c22", 0xcd}, {&(0x7f0000002140)="f820f688647f93598c5157db0ef645a953799930c8f2f762992b9a9700f80f76d44e86c3b4db48e1f6c3dc2790c50effdde742cd0c29d7047a7a7eb788b7c077d10ce055159d2dbdcf94d9611560381fb96b76cb063eba9a51c03d0d1e4bee402c2e28bca6a99619770e0bececd489d070ba87b547d6296ca00e145bc92211cad1f5b2121ee489524f6bb0c0bd49a8376c0f68287a5ba9a752a14e3c", 0x9c}, {&(0x7f0000002200)="086e937ccdbfa7a3ccbd6138e33705090f5061343da86505cb98b00a23620eb32a55708226b507fa64bd34777a4dfa4c76f93d9ae650c5aaec1a90e2dc9809da60508fdb83c6603a70b6250f4bb873ff5c02759d2916020ec9de85bd0a80d5e2320b6f72a54db072f54c79e3", 0x6c}], 0x3, &(0x7f00000022c0)={0xa8, 0x108, 0x3, "2890055fd05c30eabbc1bc0fbb89cff3b2d92b93db2ba4334abf28ba9fb77eb10d9a60ac5a24e67224bc55d1466cff0806b00fc81a1827244f95f5caede321218dc009f59e0f34e3e15e469341eaee20fd42e2342c6db7d31457dd8ef86fdc610231168b3c5fdb8c5255d45fae276c0d8349a76edeebc3f043bcb198b625d2a8f488f959b06893bc07a14ef0387ee8871e"}, 0xa8, 0x200400c1}], 0x3, 0x20000000) 05:25:18 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:18 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 2: socketpair(0x28, 0xa, 0x3, &(0x7f0000001a80)) 05:25:18 executing program 5: socketpair(0x28, 0x3, 0x0, &(0x7f0000001a80)) 05:25:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) 05:25:18 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:18 executing program 5: socketpair(0x2c, 0x0, 0x3, &(0x7f0000001a80)) 05:25:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000012c0)}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:18 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) 05:25:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000012c0)}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 5: socketpair(0x2c, 0x0, 0x3, &(0x7f0000001a80)) 05:25:18 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) 05:25:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 5: socketpair(0x2c, 0x0, 0x3, &(0x7f0000001a80)) 05:25:18 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 2: socketpair(0x0, 0x2, 0x0, &(0x7f0000001a80)) 05:25:18 executing program 0: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:18 executing program 5: socketpair(0x0, 0x0, 0x3, &(0x7f0000001a80)) 05:25:18 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 2: socketpair(0x0, 0x2, 0x0, &(0x7f0000001a80)) 05:25:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 3: socketpair(0x2, 0x0, 0x3, &(0x7f0000001a80)) 05:25:18 executing program 5: socketpair(0x0, 0x0, 0x3, &(0x7f0000001a80)) 05:25:18 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 2: socketpair(0x0, 0x2, 0x0, &(0x7f0000001a80)) 05:25:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 5: socketpair(0x0, 0x0, 0x3, &(0x7f0000001a80)) [ 418.115916][T23543] binder: 23541:23543 ioctl c0306201 0 returned -14 05:25:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:18 executing program 3: socketpair(0x2, 0x0, 0x0, &(0x7f0000001a80)) 05:25:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:18 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000001a80)) 05:25:18 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) 05:25:18 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) [ 418.261560][T23567] binder: 23562:23567 ioctl c0306201 0 returned -14 [ 418.272238][T23568] binder: 23563:23568 ioctl c0306201 0 returned -14 05:25:18 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000001a80)) 05:25:18 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:19 executing program 5: socketpair(0x2c, 0x0, 0x0, 0x0) 05:25:19 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:19 executing program 2: socketpair(0x28, 0x0, 0x0, &(0x7f0000001a80)) [ 418.368986][T23583] FAULT_INJECTION: forcing a failure. [ 418.368986][T23583] name failslab, interval 1, probability 0, space 0, times 0 [ 418.372336][T23585] binder: 23581:23585 ioctl c0306201 0 returned -14 [ 418.389538][T23584] binder: 23582:23584 ioctl c0306201 0 returned -14 [ 418.411243][T23583] CPU: 0 PID: 23583 Comm: syz-executor.3 Not tainted 5.11.0-syzkaller #0 [ 418.419669][T23583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.429718][T23583] Call Trace: [ 418.432991][T23583] dump_stack+0x116/0x15d [ 418.437336][T23583] should_fail+0x23c/0x250 [ 418.441814][T23583] __should_failslab+0x81/0x90 [ 418.446595][T23583] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 418.452401][T23583] should_failslab+0x5/0x20 [ 418.456894][T23583] __kmalloc+0x59/0x360 [ 418.461048][T23583] ? path_openat+0x1e0d/0x20a0 [ 418.465828][T23583] ? __rcu_read_unlock+0x5c/0x250 [ 418.470906][T23583] tomoyo_realpath_from_path+0x98/0x3b0 [ 418.476468][T23583] tomoyo_path_number_perm+0xc1/0x2d0 [ 418.481838][T23583] ? __rcu_read_unlock+0x5c/0x250 [ 418.486903][T23583] tomoyo_file_ioctl+0x1c/0x20 [ 418.491764][T23583] security_file_ioctl+0x45/0x90 [ 418.496702][T23583] __se_sys_ioctl+0x48/0x140 [ 418.501292][T23583] __x64_sys_ioctl+0x3f/0x50 [ 418.505940][T23583] do_syscall_64+0x39/0x80 [ 418.510357][T23583] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 418.516309][T23583] RIP: 0033:0x465d99 [ 418.520194][T23583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 418.539865][T23583] RSP: 002b:00007f4e79afa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.548276][T23583] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 418.556288][T23583] RDX: 0000000020001540 RSI: 00000000c0306201 RDI: 0000000000000003 05:25:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:25:19 executing program 5: socketpair(0x2c, 0x0, 0x0, 0x0) 05:25:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:19 executing program 2: socketpair(0x28, 0x2, 0x0, 0x0) [ 418.564250][T23583] RBP: 00007f4e79afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 418.572277][T23583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.580276][T23583] R13: 00007ffe6aa9682f R14: 00007f4e79afa300 R15: 0000000000022000 [ 418.603387][T23583] ERROR: Out of memory at tomoyo_realpath_from_path. 05:25:19 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:19 executing program 3 (fault-call:1 fault-nth:1): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:25:19 executing program 5: socketpair(0x2c, 0x0, 0x0, 0x0) 05:25:19 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:19 executing program 2: socketpair(0x28, 0x2, 0x0, 0x0) [ 418.676116][T23604] binder: 23597:23604 ioctl c0306201 0 returned -14 [ 418.695980][T23607] FAULT_INJECTION: forcing a failure. [ 418.695980][T23607] name failslab, interval 1, probability 0, space 0, times 0 05:25:19 executing program 2: socketpair(0x28, 0x2, 0x0, 0x0) [ 418.741912][T23607] CPU: 0 PID: 23607 Comm: syz-executor.3 Not tainted 5.11.0-syzkaller #0 [ 418.750349][T23607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 418.760398][T23607] Call Trace: [ 418.763687][T23607] dump_stack+0x116/0x15d [ 418.768022][T23607] should_fail+0x23c/0x250 [ 418.772473][T23607] __should_failslab+0x81/0x90 [ 418.777232][T23607] ? tomoyo_encode2+0x1d3/0x350 [ 418.782081][T23607] should_failslab+0x5/0x20 [ 418.786581][T23607] __kmalloc+0x59/0x360 [ 418.790734][T23607] tomoyo_encode2+0x1d3/0x350 [ 418.795423][T23607] tomoyo_realpath_from_path+0x35e/0x3b0 [ 418.801112][T23607] tomoyo_path_number_perm+0xc1/0x2d0 [ 418.806491][T23607] ? __rcu_read_unlock+0x5c/0x250 [ 418.811573][T23607] tomoyo_file_ioctl+0x1c/0x20 [ 418.816350][T23607] security_file_ioctl+0x45/0x90 [ 418.821282][T23607] __se_sys_ioctl+0x48/0x140 [ 418.825880][T23607] __x64_sys_ioctl+0x3f/0x50 [ 418.830465][T23607] do_syscall_64+0x39/0x80 [ 418.834933][T23607] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 418.840831][T23607] RIP: 0033:0x465d99 [ 418.844720][T23607] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 418.864321][T23607] RSP: 002b:00007f4e79afa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 418.872767][T23607] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 418.880721][T23607] RDX: 0000000020001540 RSI: 00000000c0306201 RDI: 0000000000000003 05:25:19 executing program 2 (fault-call:0 fault-nth:0): socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) 05:25:19 executing program 5 (fault-call:0 fault-nth:0): socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) 05:25:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 418.888687][T23607] RBP: 00007f4e79afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 418.896699][T23607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 418.904714][T23607] R13: 00007ffe6aa9682f R14: 00007f4e79afa300 R15: 0000000000022000 05:25:19 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) [ 418.958452][T23623] FAULT_INJECTION: forcing a failure. [ 418.958452][T23623] name failslab, interval 1, probability 0, space 0, times 0 [ 418.961800][T23625] FAULT_INJECTION: forcing a failure. [ 418.961800][T23625] name failslab, interval 1, probability 0, space 0, times 0 [ 419.012049][T23623] CPU: 1 PID: 23623 Comm: syz-executor.2 Not tainted 5.11.0-syzkaller #0 [ 419.020497][T23623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.030787][T23623] Call Trace: [ 419.034053][T23623] dump_stack+0x116/0x15d [ 419.038381][T23623] should_fail+0x23c/0x250 [ 419.042811][T23623] ? __anon_vma_prepare+0x3c/0x2b0 [ 419.047910][T23623] __should_failslab+0x81/0x90 [ 419.052654][T23623] should_failslab+0x5/0x20 [ 419.057188][T23623] kmem_cache_alloc+0x36/0x2e0 [ 419.061932][T23623] __anon_vma_prepare+0x3c/0x2b0 [ 419.066948][T23623] do_huge_pmd_anonymous_page+0x898/0x970 [ 419.072649][T23623] ? try_charge+0x36/0xa10 [ 419.077051][T23623] ? get_page_from_freelist+0x366/0x630 [ 419.082600][T23623] ? __rcu_read_unlock+0x5c/0x250 [ 419.087651][T23623] handle_mm_fault+0x122a/0x1810 [ 419.092574][T23623] do_user_addr_fault+0x43e/0x830 [ 419.097699][T23623] exc_page_fault+0x94/0x2a0 [ 419.102270][T23623] asm_exc_page_fault+0x1e/0x30 [ 419.107158][T23623] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 419.112861][T23623] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 419.132446][T23623] RSP: 0018:ffffc900160afea0 EFLAGS: 00010293 [ 419.138492][T23623] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020001a80 [ 419.146442][T23623] RDX: ffff8881016fd000 RSI: 0000000000000005 RDI: 00000000ffffffff [ 419.154408][T23623] RBP: 0000000000000028 R08: ffffffff848bb646 R09: 0001ffff874656bf [ 419.162400][T23623] R10: 000188810105eb87 R11: 0000000000000000 R12: 0000000000000002 [ 419.170361][T23623] R13: 0000000020001a80 R14: 0000000000000000 R15: 0000000000000005 [ 419.178402][T23623] ? __sys_socketpair+0x96/0x800 [ 419.183410][T23623] __sys_socketpair+0xb2/0x800 [ 419.188168][T23623] ? ksys_write+0x157/0x180 [ 419.192685][T23623] ? fpregs_assert_state_consistent+0x7d/0x90 [ 419.198747][T23623] __x64_sys_socketpair+0x4e/0x60 [ 419.203823][T23623] do_syscall_64+0x39/0x80 [ 419.208284][T23623] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 419.212823][T23607] ERROR: Out of memory at tomoyo_realpath_from_path. [ 419.214162][T23623] RIP: 0033:0x465d99 [ 419.214177][T23623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 419.244284][T23623] RSP: 002b:00007fedfe459188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 419.252772][T23623] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 419.261456][T23623] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000028 [ 419.269409][T23623] RBP: 00007fedfe4591d0 R08: 0000000000000000 R09: 0000000000000000 [ 419.277405][T23623] R10: 0000000020001a80 R11: 0000000000000246 R12: 0000000000000001 [ 419.285375][T23623] R13: 00007ffffd09c80f R14: 00007fedfe459300 R15: 0000000000022000 [ 419.293362][T23625] CPU: 0 PID: 23625 Comm: syz-executor.5 Not tainted 5.11.0-syzkaller #0 [ 419.301785][T23625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.311830][T23625] Call Trace: [ 419.315092][T23625] dump_stack+0x116/0x15d [ 419.319419][T23625] should_fail+0x23c/0x250 [ 419.323824][T23625] ? __anon_vma_prepare+0x3c/0x2b0 [ 419.328936][T23625] __should_failslab+0x81/0x90 [ 419.333697][T23625] should_failslab+0x5/0x20 [ 419.338190][T23625] kmem_cache_alloc+0x36/0x2e0 [ 419.343899][T23625] __anon_vma_prepare+0x3c/0x2b0 [ 419.348833][T23625] do_huge_pmd_anonymous_page+0x898/0x970 [ 419.354599][T23625] ? try_charge+0x36/0xa10 [ 419.358999][T23625] ? get_page_from_freelist+0x366/0x630 [ 419.364535][T23625] ? __rcu_read_unlock+0x5c/0x250 [ 419.369562][T23625] handle_mm_fault+0x122a/0x1810 [ 419.374515][T23625] do_user_addr_fault+0x43e/0x830 [ 419.379540][T23625] exc_page_fault+0x94/0x2a0 [ 419.384125][T23625] asm_exc_page_fault+0x1e/0x30 [ 419.388979][T23625] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 419.394713][T23625] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 419.414314][T23625] RSP: 0018:ffffc900161b3ea0 EFLAGS: 00010293 [ 419.420381][T23625] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020001a80 [ 419.428342][T23625] RDX: ffff888129250000 RSI: 0000000000000005 RDI: 00000000ffffffff [ 419.436308][T23625] RBP: 000000000000002c R08: ffffffff848bb646 R09: 0001ffff874656bf [ 419.444340][T23625] R10: 000188810a7ca587 R11: 0000000000000000 R12: 0000000000000000 [ 419.452426][T23625] R13: 0000000020001a80 R14: 0000000000000000 R15: 0000000000000005 [ 419.460394][T23625] ? __sys_socketpair+0x96/0x800 [ 419.465438][T23625] __sys_socketpair+0xb2/0x800 [ 419.470189][T23625] ? ksys_write+0x157/0x180 [ 419.474795][T23625] ? fpregs_assert_state_consistent+0x7d/0x90 [ 419.480847][T23625] __x64_sys_socketpair+0x4e/0x60 [ 419.485868][T23625] do_syscall_64+0x39/0x80 [ 419.490353][T23625] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 419.496307][T23625] RIP: 0033:0x465d99 [ 419.500248][T23625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 419.519882][T23625] RSP: 002b:00007f3c6fb9d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 419.528284][T23625] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 419.536450][T23625] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000002c [ 419.544586][T23625] RBP: 00007f3c6fb9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 419.552548][T23625] R10: 0000000020001a80 R11: 0000000000000246 R12: 0000000000000001 05:25:20 executing program 3 (fault-call:1 fault-nth:2): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:20 executing program 2 (fault-call:0 fault-nth:1): socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) 05:25:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x0, 0x0, 0x0}) [ 419.560587][T23625] R13: 00007ffce46267af R14: 00007f3c6fb9d300 R15: 0000000000022000 05:25:20 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x0, 0x0, 0x0}) 05:25:20 executing program 5 (fault-call:0 fault-nth:1): socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) [ 419.623152][T23646] FAULT_INJECTION: forcing a failure. [ 419.623152][T23646] name failslab, interval 1, probability 0, space 0, times 0 [ 419.636709][T23644] FAULT_INJECTION: forcing a failure. [ 419.636709][T23644] name failslab, interval 1, probability 0, space 0, times 0 [ 419.668434][T23646] CPU: 1 PID: 23646 Comm: syz-executor.2 Not tainted 5.11.0-syzkaller #0 [ 419.676870][T23646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.686921][T23646] Call Trace: [ 419.690192][T23646] dump_stack+0x116/0x15d [ 419.694529][T23646] should_fail+0x23c/0x250 [ 419.698953][T23646] ? __anon_vma_prepare+0x8d/0x2b0 [ 419.704121][T23646] __should_failslab+0x81/0x90 [ 419.708931][T23646] should_failslab+0x5/0x20 [ 419.713440][T23646] kmem_cache_alloc+0x36/0x2e0 [ 419.718197][T23646] ? __anon_vma_prepare+0x3c/0x2b0 05:25:20 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) [ 419.723448][T23646] __anon_vma_prepare+0x8d/0x2b0 [ 419.728382][T23646] do_huge_pmd_anonymous_page+0x898/0x970 [ 419.734113][T23646] ? try_charge+0x36/0xa10 [ 419.738527][T23646] ? get_page_from_freelist+0x366/0x630 [ 419.744068][T23646] ? __rcu_read_unlock+0x5c/0x250 [ 419.749178][T23646] handle_mm_fault+0x122a/0x1810 [ 419.754132][T23646] do_user_addr_fault+0x43e/0x830 [ 419.759148][T23646] exc_page_fault+0x94/0x2a0 [ 419.763731][T23646] asm_exc_page_fault+0x1e/0x30 [ 419.768641][T23646] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 419.774439][T23646] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 419.794049][T23646] RSP: 0018:ffffc90016273ea0 EFLAGS: 00010293 [ 419.800124][T23646] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020001a80 [ 419.808137][T23646] RDX: ffff88810a448000 RSI: 0000000000000005 RDI: 00000000ffffffff [ 419.816098][T23646] RBP: 0000000000000028 R08: ffffffff848bb646 R09: 0001ffff874656bf [ 419.824063][T23646] R10: 000188810a7caa07 R11: 0000000000000000 R12: 0000000000000002 [ 419.832025][T23646] R13: 0000000020001a80 R14: 0000000000000000 R15: 0000000000000005 [ 419.839990][T23646] ? __sys_socketpair+0x96/0x800 [ 419.844926][T23646] __sys_socketpair+0xb2/0x800 [ 419.849742][T23646] ? ksys_write+0x157/0x180 [ 419.854245][T23646] ? fpregs_assert_state_consistent+0x7d/0x90 [ 419.860400][T23646] __x64_sys_socketpair+0x4e/0x60 [ 419.865418][T23646] do_syscall_64+0x39/0x80 [ 419.869836][T23646] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 419.875717][T23646] RIP: 0033:0x465d99 [ 419.879599][T23646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 419.899193][T23646] RSP: 002b:00007fedfe459188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 419.907602][T23646] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 419.915771][T23646] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000028 [ 419.923738][T23646] RBP: 00007fedfe4591d0 R08: 0000000000000000 R09: 0000000000000000 [ 419.931786][T23646] R10: 0000000020001a80 R11: 0000000000000246 R12: 0000000000000001 [ 419.939746][T23646] R13: 00007ffffd09c80f R14: 00007fedfe459300 R15: 0000000000022000 [ 419.947743][T23644] CPU: 0 PID: 23644 Comm: syz-executor.3 Not tainted 5.11.0-syzkaller #0 [ 419.956153][T23644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 419.966200][T23644] Call Trace: [ 419.969469][T23644] dump_stack+0x116/0x15d 05:25:20 executing program 2 (fault-call:0 fault-nth:2): socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) [ 419.973802][T23644] should_fail+0x23c/0x250 [ 419.978287][T23644] __should_failslab+0x81/0x90 [ 419.983042][T23644] ? binder_get_thread+0x1e1/0x590 [ 419.988143][T23644] should_failslab+0x5/0x20 [ 419.992637][T23644] kmem_cache_alloc_trace+0x39/0x320 [ 419.997917][T23644] binder_get_thread+0x1e1/0x590 [ 420.002862][T23644] ? binder_poll+0x400/0x400 [ 420.007524][T23644] binder_ioctl+0x150/0xd70 [ 420.012010][T23644] ? tomoyo_file_ioctl+0x1c/0x20 [ 420.016997][T23644] ? binder_poll+0x400/0x400 [ 420.021577][T23644] __se_sys_ioctl+0xcb/0x140 [ 420.026173][T23644] __x64_sys_ioctl+0x3f/0x50 [ 420.030752][T23644] do_syscall_64+0x39/0x80 [ 420.035329][T23644] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 420.041246][T23644] RIP: 0033:0x465d99 [ 420.045113][T23644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 420.064698][T23644] RSP: 002b:00007f4e79afa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.073129][T23644] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 420.081082][T23644] RDX: 0000000020001540 RSI: 00000000c0306201 RDI: 0000000000000003 [ 420.089107][T23644] RBP: 00007f4e79afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 420.097101][T23644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.105115][T23644] R13: 00007ffe6aa9682f R14: 00007f4e79afa300 R15: 0000000000022000 05:25:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:20 executing program 3 (fault-call:1 fault-nth:3): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 420.125628][T23644] binder: 23642:23644 ioctl c0306201 20001540 returned -12 [ 420.142166][T23664] FAULT_INJECTION: forcing a failure. [ 420.142166][T23664] name failslab, interval 1, probability 0, space 0, times 0 [ 420.176994][T23669] FAULT_INJECTION: forcing a failure. [ 420.176994][T23669] name failslab, interval 1, probability 0, space 0, times 0 [ 420.190940][T23664] CPU: 0 PID: 23664 Comm: syz-executor.5 Not tainted 5.11.0-syzkaller #0 [ 420.199361][T23664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.200430][T23673] FAULT_INJECTION: forcing a failure. [ 420.200430][T23673] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 420.209407][T23664] Call Trace: 05:25:20 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) [ 420.209416][T23664] dump_stack+0x116/0x15d [ 420.209517][T23664] should_fail+0x23c/0x250 [ 420.234490][T23664] ? __anon_vma_prepare+0x8d/0x2b0 [ 420.239638][T23664] __should_failslab+0x81/0x90 [ 420.244555][T23664] should_failslab+0x5/0x20 [ 420.249051][T23664] kmem_cache_alloc+0x36/0x2e0 [ 420.253827][T23664] ? __anon_vma_prepare+0x3c/0x2b0 [ 420.258934][T23664] __anon_vma_prepare+0x8d/0x2b0 [ 420.263922][T23664] do_huge_pmd_anonymous_page+0x898/0x970 [ 420.269639][T23664] ? try_charge+0x36/0xa10 05:25:20 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000001240)={@ptr={0x70742a85, 0x8, &(0x7f0000000040)=""/195, 0xc3, 0x0, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/236, 0xec, 0x0, 0x15}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/4096, 0x1000, 0x0, 0x16}}, &(0x7f00000012c0)={0x0, 0x28, 0x50}}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) [ 420.274047][T23664] ? get_page_from_freelist+0x366/0x630 [ 420.279612][T23664] ? __rcu_read_unlock+0x5c/0x250 [ 420.284656][T23664] handle_mm_fault+0x122a/0x1810 [ 420.289589][T23664] do_user_addr_fault+0x43e/0x830 [ 420.294615][T23664] exc_page_fault+0x94/0x2a0 [ 420.299195][T23664] asm_exc_page_fault+0x1e/0x30 [ 420.304116][T23664] RIP: 0010:__put_user_nocheck_4+0x3/0x11 05:25:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 420.309824][T23664] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 420.329436][T23664] RSP: 0018:ffffc90015ed3ea0 EFLAGS: 00010293 [ 420.335612][T23664] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020001a80 [ 420.343568][T23664] RDX: ffff88810a757000 RSI: 0000000000000005 RDI: 00000000ffffffff [ 420.351530][T23664] RBP: 000000000000002c R08: ffffffff848bb646 R09: 0001ffff874656bf [ 420.359496][T23664] R10: 000188810a7ca907 R11: 0000000000000000 R12: 0000000000000000 [ 420.367461][T23664] R13: 0000000020001a80 R14: 0000000000000000 R15: 0000000000000005 [ 420.375450][T23664] ? __sys_socketpair+0x96/0x800 [ 420.380394][T23664] __sys_socketpair+0xb2/0x800 [ 420.385144][T23664] ? ksys_write+0x157/0x180 [ 420.389641][T23664] ? fpregs_assert_state_consistent+0x7d/0x90 [ 420.395723][T23664] __x64_sys_socketpair+0x4e/0x60 [ 420.400749][T23664] do_syscall_64+0x39/0x80 [ 420.405169][T23664] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 420.405379][T23682] binder: 23680:23682 ioctl c0306201 0 returned -14 [ 420.411087][T23664] RIP: 0033:0x465d99 [ 420.411101][T23664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 420.411116][T23664] RSP: 002b:00007f3c6fb9d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 420.411133][T23664] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 420.411142][T23664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000002c [ 420.411228][T23664] RBP: 00007f3c6fb9d1d0 R08: 0000000000000000 R09: 0000000000000000 05:25:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x0, 0x0, 0x0}) [ 420.411239][T23664] R10: 0000000020001a80 R11: 0000000000000246 R12: 0000000000000001 [ 420.411250][T23664] R13: 00007ffce46267af R14: 00007f3c6fb9d300 R15: 0000000000022000 [ 420.491185][T23673] CPU: 1 PID: 23673 Comm: syz-executor.3 Not tainted 5.11.0-syzkaller #0 [ 420.499646][T23673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.509686][T23673] Call Trace: [ 420.512987][T23673] dump_stack+0x116/0x15d [ 420.517326][T23673] should_fail+0x23c/0x250 [ 420.521737][T23673] should_fail_usercopy+0x16/0x20 [ 420.526763][T23673] _copy_from_user+0x1c/0xd0 [ 420.531423][T23673] binder_ioctl_write_read+0x6b/0x680 [ 420.536800][T23673] ? _raw_spin_unlock+0x22/0x40 [ 420.541642][T23673] ? binder_get_thread+0x4e9/0x590 [ 420.546766][T23673] ? binder_poll+0x400/0x400 [ 420.551342][T23673] binder_ioctl+0x25e/0xd70 [ 420.555840][T23673] ? tomoyo_file_ioctl+0x1c/0x20 [ 420.560780][T23673] ? binder_poll+0x400/0x400 [ 420.565403][T23673] __se_sys_ioctl+0xcb/0x140 [ 420.570155][T23673] __x64_sys_ioctl+0x3f/0x50 05:25:21 executing program 5 (fault-call:0 fault-nth:2): socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) 05:25:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000012c0)}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) [ 420.574773][T23673] do_syscall_64+0x39/0x80 [ 420.579197][T23673] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 420.585090][T23673] RIP: 0033:0x465d99 [ 420.589046][T23673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 420.608668][T23673] RSP: 002b:00007f4e79afa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 420.617082][T23673] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 420.625045][T23673] RDX: 0000000020001540 RSI: 00000000c0306201 RDI: 0000000000000003 [ 420.633001][T23673] RBP: 00007f4e79afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 420.641032][T23673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 420.649054][T23673] R13: 00007ffe6aa9682f R14: 00007f4e79afa300 R15: 0000000000022000 [ 420.658501][T23669] CPU: 1 PID: 23669 Comm: syz-executor.2 Not tainted 5.11.0-syzkaller #0 [ 420.666963][T23669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 420.677008][T23669] Call Trace: [ 420.680276][T23669] dump_stack+0x116/0x15d [ 420.684607][T23669] should_fail+0x23c/0x250 [ 420.689017][T23669] ? __khugepaged_enter+0x38/0x210 [ 420.694197][T23669] __should_failslab+0x81/0x90 [ 420.698959][T23669] should_failslab+0x5/0x20 [ 420.703550][T23669] kmem_cache_alloc+0x36/0x2e0 [ 420.708311][T23669] ? __anon_vma_prepare+0x8d/0x2b0 [ 420.713498][T23669] ? up_write+0x25/0xc0 [ 420.717654][T23669] __khugepaged_enter+0x38/0x210 [ 420.722601][T23669] do_huge_pmd_anonymous_page+0x25e/0x970 [ 420.728318][T23669] ? get_page_from_freelist+0x366/0x630 [ 420.733858][T23669] ? __rcu_read_unlock+0x5c/0x250 [ 420.738950][T23669] handle_mm_fault+0x122a/0x1810 [ 420.743876][T23669] do_user_addr_fault+0x43e/0x830 [ 420.748905][T23669] exc_page_fault+0x94/0x2a0 [ 420.753485][T23669] asm_exc_page_fault+0x1e/0x30 [ 420.758333][T23669] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 420.764087][T23669] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 420.783689][T23669] RSP: 0018:ffffc900161b3ea0 EFLAGS: 00010293 [ 420.789763][T23669] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020001a80 [ 420.797720][T23669] RDX: ffff88812ac57000 RSI: 0000000000000005 RDI: 00000000ffffffff [ 420.805686][T23669] RBP: 0000000000000028 R08: ffffffff848bb646 R09: 0001ffff874656bf [ 420.813649][T23669] R10: 000188812acdeb87 R11: 0000000000000000 R12: 0000000000000002 [ 420.821614][T23669] R13: 0000000020001a80 R14: 0000000000000000 R15: 0000000000000005 [ 420.826523][T23673] binder: 23671:23673 ioctl c0306201 20001540 returned -14 [ 420.829578][T23669] ? __sys_socketpair+0x96/0x800 [ 420.829604][T23669] __sys_socketpair+0xb2/0x800 [ 420.846761][T23669] ? ksys_write+0x157/0x180 [ 420.851386][T23669] ? fpregs_assert_state_consistent+0x7d/0x90 [ 420.857516][T23669] __x64_sys_socketpair+0x4e/0x60 [ 420.862554][T23669] do_syscall_64+0x39/0x80 [ 420.866972][T23669] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 420.872874][T23669] RIP: 0033:0x465d99 05:25:21 executing program 3 (fault-call:1 fault-nth:4): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:21 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 420.876759][T23669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 420.896463][T23669] RSP: 002b:00007fedfe459188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 420.904866][T23669] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 420.912829][T23669] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000028 [ 420.920791][T23669] RBP: 00007fedfe4591d0 R08: 0000000000000000 R09: 0000000000000000 [ 420.928752][T23669] R10: 0000000020001a80 R11: 0000000000000246 R12: 0000000000000001 [ 420.936710][T23669] R13: 00007ffffd09c80f R14: 00007fedfe459300 R15: 0000000000022000 [ 420.961606][T23700] FAULT_INJECTION: forcing a failure. [ 420.961606][T23700] name failslab, interval 1, probability 0, space 0, times 0 [ 420.997525][T23703] FAULT_INJECTION: forcing a failure. [ 420.997525][T23703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 421.010780][T23700] CPU: 1 PID: 23700 Comm: syz-executor.5 Not tainted 5.11.0-syzkaller #0 [ 421.015337][T23704] FAULT_INJECTION: forcing a failure. [ 421.015337][T23704] name failslab, interval 1, probability 0, space 0, times 0 [ 421.019227][T23700] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.019239][T23700] Call Trace: [ 421.019245][T23700] dump_stack+0x116/0x15d [ 421.019286][T23700] should_fail+0x23c/0x250 [ 421.053913][T23700] ? __khugepaged_enter+0x38/0x210 [ 421.059026][T23700] __should_failslab+0x81/0x90 [ 421.063820][T23700] should_failslab+0x5/0x20 [ 421.068311][T23700] kmem_cache_alloc+0x36/0x2e0 [ 421.073101][T23700] ? __anon_vma_prepare+0x8d/0x2b0 [ 421.078234][T23700] ? up_write+0x25/0xc0 [ 421.082392][T23700] __khugepaged_enter+0x38/0x210 [ 421.087326][T23700] do_huge_pmd_anonymous_page+0x25e/0x970 [ 421.093088][T23700] ? __rcu_read_unlock+0x5c/0x250 [ 421.098118][T23700] ? _raw_spin_unlock_irq+0x22/0x40 [ 421.103302][T23700] handle_mm_fault+0x122a/0x1810 [ 421.108303][T23700] do_user_addr_fault+0x43e/0x830 [ 421.113403][T23700] exc_page_fault+0x94/0x2a0 [ 421.118023][T23700] asm_exc_page_fault+0x1e/0x30 [ 421.122858][T23700] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 421.128578][T23700] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 421.148180][T23700] RSP: 0018:ffffc9001645bea0 EFLAGS: 00010293 [ 421.154232][T23700] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020001a80 [ 421.162199][T23700] RDX: ffff88812909a000 RSI: 0000000000000005 RDI: 00000000ffffffff [ 421.170177][T23700] RBP: 000000000000002c R08: ffffffff848bb646 R09: 0001ffff874656bf [ 421.178133][T23700] R10: 000188812af6f887 R11: 0000000000000000 R12: 0000000000000000 [ 421.186101][T23700] R13: 0000000020001a80 R14: 0000000000000000 R15: 0000000000000005 [ 421.194061][T23700] ? __sys_socketpair+0x96/0x800 [ 421.199054][T23700] __sys_socketpair+0xb2/0x800 [ 421.203809][T23700] ? ksys_write+0x157/0x180 [ 421.208382][T23700] ? fpregs_assert_state_consistent+0x7d/0x90 [ 421.214437][T23700] __x64_sys_socketpair+0x4e/0x60 [ 421.219459][T23700] do_syscall_64+0x39/0x80 [ 421.223879][T23700] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 421.229757][T23700] RIP: 0033:0x465d99 [ 421.233638][T23700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 421.253233][T23700] RSP: 002b:00007f3c6fb9d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 421.261687][T23700] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 421.269644][T23700] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000002c [ 421.277599][T23700] RBP: 00007f3c6fb9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 421.285624][T23700] R10: 0000000020001a80 R11: 0000000000000246 R12: 0000000000000001 [ 421.293594][T23700] R13: 00007ffce46267af R14: 00007f3c6fb9d300 R15: 0000000000022000 [ 421.301616][T23704] CPU: 0 PID: 23704 Comm: syz-executor.0 Not tainted 5.11.0-syzkaller #0 [ 421.310025][T23704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.320149][T23704] Call Trace: [ 421.323410][T23704] dump_stack+0x116/0x15d [ 421.327727][T23704] should_fail+0x23c/0x250 [ 421.332122][T23704] __should_failslab+0x81/0x90 [ 421.336920][T23704] ? tomoyo_realpath_from_path+0x98/0x3b0 [ 421.342697][T23704] should_failslab+0x5/0x20 [ 421.347187][T23704] __kmalloc+0x59/0x360 [ 421.351324][T23704] ? path_openat+0x1e0d/0x20a0 [ 421.356066][T23704] ? __rcu_read_unlock+0x5c/0x250 [ 421.361134][T23704] tomoyo_realpath_from_path+0x98/0x3b0 [ 421.366687][T23704] tomoyo_path_number_perm+0xc1/0x2d0 [ 421.372054][T23704] ? __rcu_read_unlock+0x5c/0x250 [ 421.377060][T23704] tomoyo_file_ioctl+0x1c/0x20 [ 421.381818][T23704] security_file_ioctl+0x45/0x90 [ 421.386786][T23704] __se_sys_ioctl+0x48/0x140 [ 421.391370][T23704] __x64_sys_ioctl+0x3f/0x50 [ 421.395942][T23704] do_syscall_64+0x39/0x80 [ 421.400355][T23704] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 421.406228][T23704] RIP: 0033:0x465d99 [ 421.410096][T23704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 421.429682][T23704] RSP: 002b:00007fcfab121188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.438071][T23704] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 421.446057][T23704] RDX: 0000000020001540 RSI: 00000000c0306201 RDI: 0000000000000003 [ 421.454006][T23704] RBP: 00007fcfab1211d0 R08: 0000000000000000 R09: 0000000000000000 [ 421.461954][T23704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 421.469939][T23704] R13: 00007fff06ab6b7f R14: 00007fcfab121300 R15: 0000000000022000 [ 421.477904][T23703] CPU: 1 PID: 23703 Comm: syz-executor.3 Not tainted 5.11.0-syzkaller #0 [ 421.486731][T23703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.496950][T23703] Call Trace: [ 421.500407][T23703] dump_stack+0x116/0x15d [ 421.504989][T23703] should_fail+0x23c/0x250 [ 421.509704][T23703] should_fail_usercopy+0x16/0x20 [ 421.514753][T23703] _copy_from_user+0x1c/0xd0 [ 421.519752][T23703] binder_thread_write+0x70f/0x4080 [ 421.525083][T23703] ? should_fail+0xd6/0x250 [ 421.529586][T23703] binder_ioctl_write_read+0x11f/0x680 [ 421.532579][T23704] ERROR: Out of memory at tomoyo_realpath_from_path. [ 421.535036][T23703] ? binder_poll+0x400/0x400 05:25:22 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) 05:25:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:22 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 421.535097][T23703] binder_ioctl+0x25e/0xd70 [ 421.535114][T23703] ? tomoyo_file_ioctl+0x1c/0x20 [ 421.555975][T23703] ? binder_poll+0x400/0x400 [ 421.560564][T23703] __se_sys_ioctl+0xcb/0x140 [ 421.565152][T23703] __x64_sys_ioctl+0x3f/0x50 [ 421.569782][T23703] do_syscall_64+0x39/0x80 [ 421.574213][T23703] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 421.580159][T23703] RIP: 0033:0x465d99 [ 421.584046][T23703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 421.603650][T23703] RSP: 002b:00007f4e79afa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 421.612142][T23703] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 421.620128][T23703] RDX: 0000000020001540 RSI: 00000000c0306201 RDI: 0000000000000003 [ 421.628084][T23703] RBP: 00007f4e79afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 421.636110][T23703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 05:25:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:22 executing program 5 (fault-call:0 fault-nth:3): socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) [ 421.644122][T23703] R13: 00007ffe6aa9682f R14: 00007f4e79afa300 R15: 0000000000022000 [ 421.664506][T23703] binder: 23702:23703 ioctl c0306201 20001540 returned -14 05:25:22 executing program 2: socketpair(0x2, 0x2, 0x0, &(0x7f0000001a80)) [ 421.705069][T23718] binder: 23712:23718 ioctl c0306201 0 returned -14 [ 421.711040][T23719] FAULT_INJECTION: forcing a failure. [ 421.711040][T23719] name failslab, interval 1, probability 0, space 0, times 0 [ 421.731666][T23721] FAULT_INJECTION: forcing a failure. [ 421.731666][T23721] name fail_page_alloc, interval 1, probability 0, space 0, times 0 05:25:22 executing program 3 (fault-call:1 fault-nth:5): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 421.759468][T23721] CPU: 1 PID: 23721 Comm: syz-executor.5 Not tainted 5.11.0-syzkaller #0 [ 421.767901][T23721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 421.777976][T23721] Call Trace: [ 421.781245][T23721] dump_stack+0x116/0x15d [ 421.785580][T23721] should_fail+0x23c/0x250 [ 421.789999][T23721] __alloc_pages_nodemask+0xd8/0x350 [ 421.795282][T23721] alloc_pages_vma+0x718/0x890 [ 421.800040][T23721] do_huge_pmd_anonymous_page+0x64a/0x970 [ 421.805856][T23721] ? get_page_from_freelist+0x366/0x630 [ 421.811394][T23721] ? __rcu_read_unlock+0x5c/0x250 [ 421.816426][T23721] handle_mm_fault+0x122a/0x1810 [ 421.821378][T23721] do_user_addr_fault+0x43e/0x830 [ 421.826391][T23721] exc_page_fault+0x94/0x2a0 [ 421.830974][T23721] asm_exc_page_fault+0x1e/0x30 [ 421.835812][T23721] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 421.841558][T23721] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 421.861169][T23721] RSP: 0018:ffffc90016567ea0 EFLAGS: 00010293 [ 421.867218][T23721] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020001a80 [ 421.875171][T23721] RDX: ffff88812b9b5000 RSI: 0000000000000005 RDI: 00000000ffffffff [ 421.883132][T23721] RBP: 000000000000002c R08: ffffffff848bb646 R09: 0001ffff874656bf [ 421.891219][T23721] R10: 000188812af6f807 R11: 0000000000000000 R12: 0000000000000000 [ 421.899200][T23721] R13: 0000000020001a80 R14: 0000000000000000 R15: 0000000000000005 [ 421.907209][T23721] ? __sys_socketpair+0x96/0x800 [ 421.912136][T23721] __sys_socketpair+0xb2/0x800 [ 421.916893][T23721] ? ksys_write+0x157/0x180 [ 421.921442][T23721] ? fpregs_assert_state_consistent+0x7d/0x90 [ 421.927503][T23721] __x64_sys_socketpair+0x4e/0x60 [ 421.932716][T23721] do_syscall_64+0x39/0x80 [ 421.937148][T23721] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 421.943250][T23721] RIP: 0033:0x465d99 [ 421.947151][T23721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 421.966794][T23721] RSP: 002b:00007f3c6fb9d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 421.975193][T23721] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 421.983148][T23721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000002c [ 421.991122][T23721] RBP: 00007f3c6fb9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 421.999085][T23721] R10: 0000000020001a80 R11: 0000000000000246 R12: 0000000000000001 05:25:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 422.007047][T23721] R13: 00007ffce46267af R14: 00007f3c6fb9d300 R15: 0000000000022000 [ 422.026678][T23719] CPU: 0 PID: 23719 Comm: syz-executor.0 Not tainted 5.11.0-syzkaller #0 [ 422.035100][T23719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.045149][T23719] Call Trace: [ 422.048410][T23719] dump_stack+0x116/0x15d [ 422.052800][T23719] should_fail+0x23c/0x250 [ 422.057285][T23719] __should_failslab+0x81/0x90 [ 422.062033][T23719] ? tomoyo_encode2+0x1d3/0x350 [ 422.066869][T23719] should_failslab+0x5/0x20 [ 422.071376][T23719] __kmalloc+0x59/0x360 [ 422.075527][T23719] tomoyo_encode2+0x1d3/0x350 [ 422.080280][T23719] tomoyo_realpath_from_path+0x35e/0x3b0 [ 422.085909][T23719] tomoyo_path_number_perm+0xc1/0x2d0 [ 422.091452][T23719] ? __rcu_read_unlock+0x5c/0x250 [ 422.096479][T23719] tomoyo_file_ioctl+0x1c/0x20 [ 422.101231][T23719] security_file_ioctl+0x45/0x90 [ 422.106211][T23719] __se_sys_ioctl+0x48/0x140 [ 422.110792][T23719] __x64_sys_ioctl+0x3f/0x50 [ 422.115403][T23719] do_syscall_64+0x39/0x80 [ 422.119846][T23719] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 422.125804][T23719] RIP: 0033:0x465d99 [ 422.129698][T23719] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 422.149426][T23719] RSP: 002b:00007fcfab121188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 05:25:22 executing program 5 (fault-call:0 fault-nth:4): socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) [ 422.157822][T23719] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 422.165766][T23719] RDX: 0000000020001540 RSI: 00000000c0306201 RDI: 0000000000000003 [ 422.173710][T23719] RBP: 00007fcfab1211d0 R08: 0000000000000000 R09: 0000000000000000 [ 422.181694][T23719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.189639][T23719] R13: 00007fff06ab6b7f R14: 00007fcfab121300 R15: 0000000000022000 05:25:22 executing program 2: socketpair(0xa, 0x2, 0x0, &(0x7f0000001a80)) 05:25:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 422.235496][T23735] binder: 23734:23735 ioctl c0306201 0 returned -14 [ 422.246768][T23736] FAULT_INJECTION: forcing a failure. [ 422.246768][T23736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.256600][T23719] ERROR: Out of memory at tomoyo_realpath_from_path. [ 422.275242][T23737] binder: 23732:23737 ioctl c0306201 0 returned -14 [ 422.287068][T23736] CPU: 1 PID: 23736 Comm: syz-executor.3 Not tainted 5.11.0-syzkaller #0 [ 422.295490][T23736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.305611][T23736] Call Trace: [ 422.309236][T23736] dump_stack+0x116/0x15d [ 422.313621][T23736] should_fail+0x23c/0x250 [ 422.318110][T23736] should_fail_usercopy+0x16/0x20 [ 422.320912][T23743] binder: 23741:23743 ioctl c0306201 0 returned -14 [ 422.323121][T23736] _copy_to_user+0x1c/0x90 05:25:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 422.334095][T23736] binder_ioctl_write_read+0x403/0x680 [ 422.339623][T23736] ? binder_poll+0x400/0x400 [ 422.344440][T23736] binder_ioctl+0x25e/0xd70 [ 422.348938][T23736] ? tomoyo_file_ioctl+0x1c/0x20 [ 422.353917][T23736] ? binder_poll+0x400/0x400 [ 422.358492][T23736] __se_sys_ioctl+0xcb/0x140 [ 422.363083][T23736] __x64_sys_ioctl+0x3f/0x50 [ 422.367726][T23736] do_syscall_64+0x39/0x80 [ 422.372146][T23736] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 422.376155][T23740] FAULT_INJECTION: forcing a failure. [ 422.376155][T23740] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 422.378057][T23736] RIP: 0033:0x465d99 [ 422.378073][T23736] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 422.414756][T23736] RSP: 002b:00007f4e79afa188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.423149][T23736] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 422.431101][T23736] RDX: 0000000020001540 RSI: 00000000c0306201 RDI: 0000000000000003 [ 422.439079][T23736] RBP: 00007f4e79afa1d0 R08: 0000000000000000 R09: 0000000000000000 [ 422.447107][T23736] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.455081][T23736] R13: 00007ffe6aa9682f R14: 00007f4e79afa300 R15: 0000000000022000 [ 422.463114][T23740] CPU: 0 PID: 23740 Comm: syz-executor.5 Not tainted 5.11.0-syzkaller #0 [ 422.471531][T23740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.481624][T23740] Call Trace: [ 422.484917][T23740] dump_stack+0x116/0x15d [ 422.489244][T23740] should_fail+0x23c/0x250 [ 422.493649][T23740] __alloc_pages_nodemask+0xd8/0x350 [ 422.498931][T23740] alloc_pages_current+0x21d/0x310 [ 422.504033][T23740] pte_alloc_one+0x27/0x90 [ 422.508506][T23740] __do_huge_pmd_anonymous_page+0xfe/0x930 [ 422.514318][T23740] ? alloc_pages_vma+0x725/0x890 [ 422.519244][T23740] do_huge_pmd_anonymous_page+0x6a2/0x970 [ 422.524999][T23740] ? get_page_from_freelist+0x366/0x630 [ 422.530552][T23740] ? __rcu_read_unlock+0x5c/0x250 [ 422.535609][T23740] handle_mm_fault+0x122a/0x1810 [ 422.540540][T23740] do_user_addr_fault+0x43e/0x830 [ 422.545563][T23740] exc_page_fault+0x94/0x2a0 [ 422.550319][T23740] asm_exc_page_fault+0x1e/0x30 [ 422.555190][T23740] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 422.560909][T23740] Code: 00 00 48 39 d9 73 54 0f 1f 00 66 89 01 31 c9 0f 1f 00 c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 1f 00 <89> 01 31 c9 0f 1f 00 c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 422.580571][T23740] RSP: 0018:ffffc9001645bea0 EFLAGS: 00010293 [ 422.586627][T23740] RAX: 0000000000000004 RBX: 00007fffffffeffd RCX: 0000000020001a80 [ 422.594588][T23740] RDX: ffff888108613000 RSI: 0000000000000005 RDI: 00000000ffffffff [ 422.602553][T23740] RBP: 000000000000002c R08: ffffffff848bb646 R09: 0001ffff874656bf [ 422.610509][T23740] R10: 000188812af6f907 R11: 0000000000000000 R12: 0000000000000000 [ 422.618465][T23740] R13: 0000000020001a80 R14: 0000000000000000 R15: 0000000000000005 [ 422.626432][T23740] ? __sys_socketpair+0x96/0x800 [ 422.631375][T23740] __sys_socketpair+0xb2/0x800 [ 422.636212][T23740] ? ksys_write+0x157/0x180 [ 422.640182][T23736] binder: 23733:23736 ioctl c0306201 20001540 returned -14 [ 422.640716][T23740] ? fpregs_assert_state_consistent+0x7d/0x90 [ 422.640740][T23740] __x64_sys_socketpair+0x4e/0x60 [ 422.659053][T23740] do_syscall_64+0x39/0x80 [ 422.663715][T23740] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 422.670037][T23740] RIP: 0033:0x465d99 05:25:23 executing program 0 (fault-call:1 fault-nth:2): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:23 executing program 2: socketpair(0x2c, 0x2, 0x0, &(0x7f0000001a80)) [ 422.674212][T23740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 422.694164][T23740] RSP: 002b:00007f3c6fb9d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 422.702603][T23740] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 422.710568][T23740] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000002c [ 422.718532][T23740] RBP: 00007f3c6fb9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 422.726530][T23740] R10: 0000000020001a80 R11: 0000000000000246 R12: 0000000000000001 [ 422.734479][T23740] R13: 00007ffce46267af R14: 00007f3c6fb9d300 R15: 0000000000022000 05:25:23 executing program 1: socketpair(0xa, 0x2, 0x0, &(0x7f0000001a80)) 05:25:23 executing program 3 (fault-call:1 fault-nth:6): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 422.763284][T23754] binder: 23753:23754 ioctl c0306201 0 returned -14 [ 422.803710][T23759] FAULT_INJECTION: forcing a failure. 05:25:23 executing program 5 (fault-call:0 fault-nth:5): socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) 05:25:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) [ 422.803710][T23759] name failslab, interval 1, probability 0, space 0, times 0 05:25:23 executing program 2: socketpair(0x28, 0x4, 0x0, &(0x7f0000001a80)) [ 422.841876][T23763] FAULT_INJECTION: forcing a failure. [ 422.841876][T23763] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 422.854041][T23759] CPU: 0 PID: 23759 Comm: syz-executor.0 Not tainted 5.11.0-syzkaller #0 [ 422.863342][T23759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 422.873408][T23759] Call Trace: [ 422.876674][T23759] dump_stack+0x116/0x15d [ 422.880999][T23759] should_fail+0x23c/0x250 [ 422.885408][T23759] __should_failslab+0x81/0x90 [ 422.890169][T23759] ? binder_get_thread+0x1e1/0x590 [ 422.895268][T23759] should_failslab+0x5/0x20 [ 422.899822][T23759] kmem_cache_alloc_trace+0x39/0x320 [ 422.905104][T23759] binder_get_thread+0x1e1/0x590 [ 422.910046][T23759] ? binder_poll+0x400/0x400 [ 422.914618][T23759] binder_ioctl+0x150/0xd70 [ 422.919117][T23759] ? tomoyo_file_ioctl+0x1c/0x20 [ 422.924126][T23759] ? binder_poll+0x400/0x400 [ 422.928762][T23759] __se_sys_ioctl+0xcb/0x140 [ 422.933402][T23759] __x64_sys_ioctl+0x3f/0x50 [ 422.938010][T23759] do_syscall_64+0x39/0x80 [ 422.942428][T23759] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 422.948390][T23759] RIP: 0033:0x465d99 [ 422.952277][T23759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 422.971879][T23759] RSP: 002b:00007fcfab121188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 422.980296][T23759] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 422.988255][T23759] RDX: 0000000020001540 RSI: 00000000c0306201 RDI: 0000000000000003 [ 422.996235][T23759] RBP: 00007fcfab1211d0 R08: 0000000000000000 R09: 0000000000000000 [ 423.004188][T23759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.012142][T23759] R13: 00007fff06ab6b7f R14: 00007fcfab121300 R15: 0000000000022000 [ 423.024069][T23763] CPU: 1 PID: 23763 Comm: syz-executor.3 Not tainted 5.11.0-syzkaller #0 [ 423.031970][T23765] FAULT_INJECTION: forcing a failure. 05:25:23 executing program 1: socketpair(0xa, 0x2, 0x0, &(0x7f0000001a80)) [ 423.031970][T23765] name failslab, interval 1, probability 0, space 0, times 0 [ 423.032513][T23763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.055096][T23763] Call Trace: [ 423.058451][T23763] dump_stack+0x116/0x15d [ 423.062781][T23763] should_fail+0x23c/0x250 [ 423.067392][T23763] should_fail_usercopy+0x16/0x20 [ 423.072496][T23763] _copy_to_user+0x1c/0x90 [ 423.077240][T23763] simple_read_from_buffer+0xab/0x120 [ 423.082622][T23763] proc_fail_nth_read+0xf6/0x140 [ 423.087575][T23763] ? rw_verify_area+0x136/0x250 05:25:23 executing program 1: socketpair(0xa, 0x2, 0x0, &(0x7f0000001a80)) [ 423.092727][T23763] ? proc_fault_inject_write+0x200/0x200 [ 423.098735][T23763] vfs_read+0x154/0x5d0 [ 423.102882][T23763] ? __fget_light+0x219/0x260 [ 423.107685][T23763] ? binder_ioctl+0x703/0xd70 [ 423.112357][T23763] ksys_read+0xce/0x180 [ 423.116515][T23763] __x64_sys_read+0x3e/0x50 [ 423.121014][T23763] do_syscall_64+0x39/0x80 [ 423.125521][T23763] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 423.131406][T23763] RIP: 0033:0x41901c 05:25:23 executing program 1: socketpair(0x0, 0x2, 0x0, &(0x7f0000001a80)) [ 423.135281][T23763] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 423.154876][T23763] RSP: 002b:00007f4e79afa170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 423.163285][T23763] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041901c [ 423.171244][T23763] RDX: 000000000000000f RSI: 00007f4e79afa1e0 RDI: 0000000000000004 [ 423.179201][T23763] RBP: 00007f4e79afa1d0 R08: 0000000000000000 R09: 0000000000000000 05:25:23 executing program 2: socketpair(0x28, 0xa, 0x0, &(0x7f0000001a80)) [ 423.187166][T23763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.195131][T23763] R13: 00007ffe6aa9682f R14: 00007f4e79afa300 R15: 0000000000022000 [ 423.239885][T23765] CPU: 0 PID: 23765 Comm: syz-executor.5 Not tainted 5.11.0-syzkaller #0 [ 423.248320][T23765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.255363][T23759] binder: 23756:23759 ioctl c0306201 20001540 returned -12 [ 423.258375][T23765] Call Trace: [ 423.258384][T23765] dump_stack+0x116/0x15d [ 423.258407][T23765] should_fail+0x23c/0x250 [ 423.277780][T23765] ? sock_alloc_inode+0x23/0x90 [ 423.282833][T23765] __should_failslab+0x81/0x90 [ 423.287622][T23765] ? sockfs_init_fs_context+0x70/0x70 [ 423.293020][T23765] should_failslab+0x5/0x20 [ 423.297560][T23765] kmem_cache_alloc+0x36/0x2e0 [ 423.302318][T23765] ? exc_page_fault+0x94/0x2a0 [ 423.307076][T23765] ? apparmor_socket_create+0x355/0x3a0 [ 423.312614][T23765] ? sockfs_init_fs_context+0x70/0x70 [ 423.317978][T23765] sock_alloc_inode+0x23/0x90 [ 423.322671][T23765] ? sockfs_init_fs_context+0x70/0x70 [ 423.328040][T23765] new_inode_pseudo+0x38/0x190 [ 423.332790][T23765] __sock_create+0x122/0x4f0 [ 423.337428][T23765] __sys_socketpair+0x180/0x800 [ 423.342336][T23765] ? ksys_write+0x157/0x180 [ 423.346834][T23765] ? fpregs_assert_state_consistent+0x7d/0x90 [ 423.352921][T23765] __x64_sys_socketpair+0x4e/0x60 [ 423.358043][T23765] do_syscall_64+0x39/0x80 [ 423.362534][T23765] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 423.368423][T23765] RIP: 0033:0x465d99 05:25:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:24 executing program 0 (fault-call:1 fault-nth:3): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:24 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:24 executing program 1: socketpair(0x0, 0x2, 0x0, &(0x7f0000001a80)) [ 423.372302][T23765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 423.391905][T23765] RSP: 002b:00007f3c6fb9d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 423.400392][T23765] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 423.408356][T23765] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000002c [ 423.416310][T23765] RBP: 00007f3c6fb9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 423.424264][T23765] R10: 0000000020001a80 R11: 0000000000000246 R12: 0000000000000001 [ 423.432219][T23765] R13: 00007ffce46267af R14: 00007f3c6fb9d300 R15: 0000000000022000 05:25:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 423.494600][T23797] FAULT_INJECTION: forcing a failure. [ 423.494600][T23797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 423.551789][T23797] CPU: 0 PID: 23797 Comm: syz-executor.0 Not tainted 5.11.0-syzkaller #0 [ 423.560262][T23797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.570309][T23797] Call Trace: [ 423.573588][T23765] socket: no more sockets [ 423.573583][T23797] dump_stack+0x116/0x15d [ 423.582222][T23797] should_fail+0x23c/0x250 [ 423.586647][T23797] should_fail_usercopy+0x16/0x20 [ 423.591683][T23797] _copy_from_user+0x1c/0xd0 [ 423.596307][T23797] binder_ioctl_write_read+0x6b/0x680 [ 423.601681][T23797] ? _raw_spin_unlock+0x22/0x40 [ 423.606543][T23797] ? binder_get_thread+0x4e9/0x590 [ 423.611643][T23797] ? binder_poll+0x400/0x400 [ 423.616366][T23797] binder_ioctl+0x25e/0xd70 [ 423.620856][T23797] ? tomoyo_file_ioctl+0x1c/0x20 [ 423.625819][T23797] ? binder_poll+0x400/0x400 [ 423.630401][T23797] __se_sys_ioctl+0xcb/0x140 [ 423.634995][T23797] __x64_sys_ioctl+0x3f/0x50 [ 423.639703][T23797] do_syscall_64+0x39/0x80 [ 423.644119][T23797] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 423.650059][T23797] RIP: 0033:0x465d99 [ 423.653941][T23797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 423.673575][T23797] RSP: 002b:00007fcfab121188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 423.681990][T23797] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 423.689971][T23797] RDX: 0000000020001540 RSI: 00000000c0306201 RDI: 0000000000000003 05:25:24 executing program 5 (fault-call:0 fault-nth:6): socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) 05:25:24 executing program 1: socketpair(0x0, 0x2, 0x0, &(0x7f0000001a80)) 05:25:24 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) 05:25:24 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) [ 423.697934][T23797] RBP: 00007fcfab1211d0 R08: 0000000000000000 R09: 0000000000000000 [ 423.705896][T23797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 423.713866][T23797] R13: 00007fff06ab6b7f R14: 00007fcfab121300 R15: 0000000000022000 05:25:24 executing program 2: socketpair(0x28, 0x2, 0x3, &(0x7f0000001a80)) [ 423.782901][T23813] FAULT_INJECTION: forcing a failure. [ 423.782901][T23813] name failslab, interval 1, probability 0, space 0, times 0 05:25:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 423.829456][T23813] CPU: 0 PID: 23813 Comm: syz-executor.5 Not tainted 5.11.0-syzkaller #0 [ 423.837884][T23813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 423.847929][T23813] Call Trace: [ 423.851196][T23813] dump_stack+0x116/0x15d [ 423.855566][T23813] should_fail+0x23c/0x250 [ 423.859979][T23813] ? security_inode_alloc+0x30/0x180 [ 423.865265][T23813] __should_failslab+0x81/0x90 [ 423.870048][T23813] should_failslab+0x5/0x20 [ 423.874546][T23813] kmem_cache_alloc+0x36/0x2e0 [ 423.879304][T23813] security_inode_alloc+0x30/0x180 [ 423.884411][T23813] inode_init_always+0x211/0x430 [ 423.889339][T23813] ? sockfs_init_fs_context+0x70/0x70 [ 423.894767][T23813] new_inode_pseudo+0x6f/0x190 [ 423.899529][T23813] __sock_create+0x122/0x4f0 [ 423.904137][T23813] __sys_socketpair+0x180/0x800 [ 423.908978][T23813] ? ksys_write+0x157/0x180 [ 423.913518][T23813] ? fpregs_assert_state_consistent+0x7d/0x90 [ 423.919673][T23813] __x64_sys_socketpair+0x4e/0x60 [ 423.924689][T23813] do_syscall_64+0x39/0x80 [ 423.929154][T23813] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 423.935036][T23813] RIP: 0033:0x465d99 [ 423.938921][T23813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 423.958519][T23813] RSP: 002b:00007f3c6fb9d188 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 423.966922][T23813] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 05:25:24 executing program 1: socketpair(0xa, 0x0, 0x0, &(0x7f0000001a80)) 05:25:24 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) [ 423.974887][T23813] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000002c [ 423.982873][T23813] RBP: 00007f3c6fb9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 423.990893][T23813] R10: 0000000020001a80 R11: 0000000000000246 R12: 0000000000000001 [ 423.998856][T23813] R13: 00007ffce46267af R14: 00007f3c6fb9d300 R15: 0000000000022000 05:25:24 executing program 0 (fault-call:1 fault-nth:4): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:24 executing program 2: socketpair(0x28, 0x2, 0x4, &(0x7f0000001a80)) 05:25:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4c01, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:24 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) [ 424.038952][T23826] binder: 23817:23826 ioctl 10 20001540 returned -22 [ 424.051900][T23797] binder: 23792:23797 ioctl c0306201 20001540 returned -14 [ 424.072114][T23813] socket: no more sockets 05:25:24 executing program 5 (fault-call:0 fault-nth:7): socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) 05:25:24 executing program 1: socketpair(0xa, 0x0, 0x0, &(0x7f0000001a80)) 05:25:24 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000012c0)}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) [ 424.142693][T23835] FAULT_INJECTION: forcing a failure. [ 424.142693][T23835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.165482][T23837] binder: 23833:23837 ioctl 4c01 20001540 returned -22 [ 424.165567][T23840] FAULT_INJECTION: forcing a failure. [ 424.165567][T23840] name fail_usercopy, interval 1, probability 0, space 0, times 0 05:25:24 executing program 2: socketpair(0x28, 0x2, 0x28, &(0x7f0000001a80)) [ 424.193461][T23835] CPU: 0 PID: 23835 Comm: syz-executor.0 Not tainted 5.11.0-syzkaller #0 [ 424.201885][T23835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.211935][T23835] Call Trace: [ 424.215254][T23835] dump_stack+0x116/0x15d [ 424.219661][T23835] should_fail+0x23c/0x250 [ 424.224070][T23835] should_fail_usercopy+0x16/0x20 [ 424.229081][T23835] _copy_from_user+0x1c/0xd0 [ 424.234040][T23835] binder_thread_write+0x70f/0x4080 [ 424.239237][T23835] ? should_fail+0xd6/0x250 [ 424.243733][T23835] binder_ioctl_write_read+0x11f/0x680 [ 424.249242][T23835] ? binder_poll+0x400/0x400 [ 424.253937][T23835] binder_ioctl+0x25e/0xd70 [ 424.258430][T23835] ? tomoyo_file_ioctl+0x1c/0x20 [ 424.263380][T23835] ? binder_poll+0x400/0x400 [ 424.267950][T23835] __se_sys_ioctl+0xcb/0x140 [ 424.272535][T23835] __x64_sys_ioctl+0x3f/0x50 [ 424.277181][T23835] do_syscall_64+0x39/0x80 [ 424.281675][T23835] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 424.287608][T23835] RIP: 0033:0x465d99 [ 424.291489][T23835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 424.311128][T23835] RSP: 002b:00007fcfab121188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.319532][T23835] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 424.327505][T23835] RDX: 0000000020001540 RSI: 00000000c0306201 RDI: 0000000000000003 [ 424.335462][T23835] RBP: 00007fcfab1211d0 R08: 0000000000000000 R09: 0000000000000000 05:25:24 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 424.343419][T23835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 424.351399][T23835] R13: 00007fff06ab6b7f R14: 00007fcfab121300 R15: 0000000000022000 [ 424.386683][T23840] CPU: 1 PID: 23840 Comm: syz-executor.5 Not tainted 5.11.0-syzkaller #0 [ 424.395139][T23840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.399697][T23835] binder: 23832:23835 ioctl c0306201 20001540 returned -14 [ 424.405241][T23840] Call Trace: [ 424.405249][T23840] dump_stack+0x116/0x15d [ 424.405286][T23840] should_fail+0x23c/0x250 [ 424.405304][T23840] should_fail_usercopy+0x16/0x20 [ 424.405324][T23840] _copy_to_user+0x1c/0x90 05:25:25 executing program 0 (fault-call:1 fault-nth:5): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 424.433859][T23840] simple_read_from_buffer+0xab/0x120 [ 424.439277][T23840] proc_fail_nth_read+0xf6/0x140 [ 424.444219][T23840] ? rw_verify_area+0x136/0x250 [ 424.449150][T23840] ? proc_fault_inject_write+0x200/0x200 [ 424.454834][T23840] vfs_read+0x154/0x5d0 [ 424.458983][T23840] ? __fget_light+0x219/0x260 [ 424.463664][T23840] ? put_unused_fd+0xef/0x100 [ 424.468685][T23840] ksys_read+0xce/0x180 [ 424.472837][T23840] __x64_sys_read+0x3e/0x50 [ 424.477429][T23840] do_syscall_64+0x39/0x80 [ 424.481892][T23840] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 424.487777][T23840] RIP: 0033:0x41901c [ 424.491660][T23840] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 424.511552][T23840] RSP: 002b:00007f3c6fb9d170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 424.520337][T23840] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041901c [ 424.528382][T23840] RDX: 000000000000000f RSI: 00007f3c6fb9d1e0 RDI: 0000000000000003 05:25:25 executing program 2: socketpair(0x28, 0x2, 0x300, &(0x7f0000001a80)) 05:25:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4d, 0x0, &(0x7f00000014c0)="cbf6310cb99075f23f2fd02f11e69bdd9d4416f92e5e86ad6c08a2ffffff7f46cf874cf473cffdca0cfa3162b64107f4839ce7aa723c57c8ad2a29101f40b3834205b71f472d3f7c392fe3255b"}) [ 424.536344][T23840] RBP: 00007f3c6fb9d1d0 R08: 0000000000000000 R09: 0000000000000000 [ 424.544308][T23840] R10: 0000000020001a80 R11: 0000000000000246 R12: 0000000000000001 [ 424.552303][T23840] R13: 00007ffce46267af R14: 00007f3c6fb9d300 R15: 0000000000022000 05:25:25 executing program 1: socketpair(0xa, 0x0, 0x0, &(0x7f0000001a80)) 05:25:25 executing program 2: socketpair(0x28, 0x2, 0x2000, &(0x7f0000001a80)) 05:25:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 424.595403][T23861] binder: 23858:23861 ioctl 541b 20001540 returned -22 [ 424.611536][T23859] FAULT_INJECTION: forcing a failure. [ 424.611536][T23859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.653037][T23859] CPU: 0 PID: 23859 Comm: syz-executor.0 Not tainted 5.11.0-syzkaller #0 [ 424.661531][T23859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.671583][T23859] Call Trace: [ 424.674854][T23859] dump_stack+0x116/0x15d [ 424.679192][T23859] should_fail+0x23c/0x250 [ 424.683662][T23859] should_fail_usercopy+0x16/0x20 [ 424.688680][T23859] _copy_to_user+0x1c/0x90 [ 424.693096][T23859] binder_ioctl_write_read+0x403/0x680 [ 424.698590][T23859] ? binder_poll+0x400/0x400 [ 424.703210][T23859] binder_ioctl+0x25e/0xd70 [ 424.707791][T23859] ? tomoyo_file_ioctl+0x1c/0x20 [ 424.712863][T23859] ? binder_poll+0x400/0x400 [ 424.717442][T23859] __se_sys_ioctl+0xcb/0x140 [ 424.722028][T23859] __x64_sys_ioctl+0x3f/0x50 [ 424.726693][T23859] do_syscall_64+0x39/0x80 [ 424.731102][T23859] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 424.736984][T23859] RIP: 0033:0x465d99 [ 424.740894][T23859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 424.760549][T23859] RSP: 002b:00007fcfab121188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 424.768952][T23859] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000465d99 [ 424.776907][T23859] RDX: 0000000020001540 RSI: 00000000c0306201 RDI: 0000000000000003 [ 424.784939][T23859] RBP: 00007fcfab1211d0 R08: 0000000000000000 R09: 0000000000000000 [ 424.792903][T23859] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 05:25:25 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) 05:25:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 424.800866][T23859] R13: 00007fff06ab6b7f R14: 00007fcfab121300 R15: 0000000000022000 [ 424.818690][T23859] binder: 23856:23859 ioctl c0306201 20001540 returned -14 05:25:25 executing program 2: socketpair(0x28, 0x2, 0x2800, &(0x7f0000001a80)) 05:25:25 executing program 0 (fault-call:1 fault-nth:6): r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:25 executing program 1: socketpair(0xa, 0x2, 0x0, 0x0) [ 424.856837][T23880] binder: 23878:23880 ioctl 541b 20001540 returned -22 05:25:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:25 executing program 5: socketpair(0x2, 0x0, 0x0, &(0x7f0000001a80)) 05:25:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 424.903634][T23885] FAULT_INJECTION: forcing a failure. [ 424.903634][T23885] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 424.952979][T23885] CPU: 0 PID: 23885 Comm: syz-executor.0 Not tainted 5.11.0-syzkaller #0 [ 424.961442][T23885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 424.971492][T23885] Call Trace: [ 424.974763][T23885] dump_stack+0x116/0x15d [ 424.979095][T23885] should_fail+0x23c/0x250 [ 424.983515][T23885] should_fail_usercopy+0x16/0x20 [ 424.988554][T23885] _copy_to_user+0x1c/0x90 [ 424.993001][T23885] simple_read_from_buffer+0xab/0x120 [ 424.998376][T23885] proc_fail_nth_read+0xf6/0x140 [ 425.003378][T23885] ? rw_verify_area+0x136/0x250 [ 425.008234][T23885] ? proc_fault_inject_write+0x200/0x200 [ 425.013928][T23885] vfs_read+0x154/0x5d0 [ 425.018080][T23885] ? __fget_light+0x219/0x260 [ 425.022762][T23885] ? binder_ioctl+0x703/0xd70 [ 425.027424][T23885] ksys_read+0xce/0x180 [ 425.031575][T23885] __x64_sys_read+0x3e/0x50 [ 425.036131][T23885] do_syscall_64+0x39/0x80 [ 425.040544][T23885] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 425.046439][T23885] RIP: 0033:0x41901c [ 425.050385][T23885] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 425.069982][T23885] RSP: 002b:00007fcfab121170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 425.078380][T23885] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 000000000041901c [ 425.086348][T23885] RDX: 000000000000000f RSI: 00007fcfab1211e0 RDI: 0000000000000004 [ 425.094313][T23885] RBP: 00007fcfab1211d0 R08: 0000000000000000 R09: 0000000000000000 05:25:25 executing program 2: socketpair(0x28, 0x2, 0x18100, &(0x7f0000001a80)) 05:25:25 executing program 1: socketpair(0xa, 0x2, 0x0, 0x0) 05:25:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:25 executing program 2: socketpair(0x28, 0x2, 0x200000, &(0x7f0000001a80)) 05:25:25 executing program 1: socketpair(0xa, 0x2, 0x0, 0x0) 05:25:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:25 executing program 2: socketpair(0x28, 0x2, 0x810100, &(0x7f0000001a80)) [ 425.102277][T23885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 425.110237][T23885] R13: 00007fff06ab6b7f R14: 00007fcfab121300 R15: 0000000000022000 05:25:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:25 executing program 5: socketpair(0x2c, 0x3, 0x0, &(0x7f0000001a80)) 05:25:25 executing program 2: socketpair(0x28, 0x2, 0x1000000, &(0x7f0000001a80)) 05:25:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x6364, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:25 executing program 2: socketpair(0x28, 0x2, 0x3000000, &(0x7f0000001a80)) 05:25:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:25 executing program 5: socketpair(0x2c, 0x4, 0x0, &(0x7f0000001a80)) 05:25:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8913, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 425.293189][T23929] binder: 23927:23929 ioctl 6364 20001540 returned -22 05:25:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:25 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 2: socketpair(0x28, 0x2, 0x4000000, &(0x7f0000001a80)) 05:25:26 executing program 5: socketpair(0x2c, 0xa, 0x0, &(0x7f0000001a80)) [ 425.380995][T23942] binder: 23940:23942 ioctl 10 20001540 returned -22 [ 425.388803][T23941] binder: 23939:23941 ioctl 8913 20001540 returned -22 05:25:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8914, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5451, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4c01, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5452, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 5: socketpair(0x2c, 0x300, 0x0, &(0x7f0000001a80)) 05:25:26 executing program 2: socketpair(0x28, 0x2, 0x28000000, &(0x7f0000001a80)) 05:25:26 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5452, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5451, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 425.498814][T23956] binder: 23953:23956 ioctl 4c01 20001540 returned -22 [ 425.506311][T23957] binder: 23950:23957 ioctl 8914 20001540 returned -22 05:25:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8933, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5452, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 5: socketpair(0x2c, 0xa00, 0x0, &(0x7f0000001a80)) 05:25:26 executing program 2: socketpair(0x28, 0x2, 0xfeffffff, &(0x7f0000001a80)) 05:25:26 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5451, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 425.627733][T23971] binder: 23970:23971 ioctl 8933 20001540 returned -22 [ 425.640433][T23972] binder: 23969:23972 ioctl 541b 20001540 returned -22 05:25:26 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400448c9, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 2: socketpair(0x28, 0x2, 0xfffffffe, &(0x7f0000001a80)) 05:25:26 executing program 5: socketpair(0x2c, 0x2000, 0x0, &(0x7f0000001a80)) 05:25:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 5: socketpair(0x2c, 0x18100, 0x0, &(0x7f0000001a80)) 05:25:26 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 425.745290][T23988] binder: 23983:23988 ioctl 400448c9 20001540 returned -22 05:25:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) getsockname$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x20) 05:25:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400448dd, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 5: socketpair(0x2c, 0x200000, 0x0, &(0x7f0000001a80)) [ 425.833337][T24001] binder: 23998:24001 ioctl 400448dd 20001540 returned -22 05:25:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400454ca, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 2: socketpair(0x2b, 0x4, 0xfffffffa, &(0x7f0000001a80)) 05:25:26 executing program 5: socketpair(0x2c, 0x810100, 0x0, &(0x7f0000001a80)) 05:25:26 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5452, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5451, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) [ 425.952973][T24013] binder: 24011:24013 ioctl 400454ca 20001540 returned -22 05:25:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 5: socketpair(0x2c, 0x3000000, 0x0, &(0x7f0000001a80)) 05:25:26 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5452, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5451, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 5: socketpair(0x2c, 0x4000000, 0x0, &(0x7f0000001a80)) 05:25:26 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x6, 0x105200) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) 05:25:26 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5452, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5451, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x6364, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 5: socketpair(0x2c, 0xa000000, 0x0, &(0x7f0000001a80)) 05:25:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x100, 0x70bd25, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4004) 05:25:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, 0x0) 05:25:26 executing program 5: socketpair(0x2c, 0xfeffffff, 0x0, &(0x7f0000001a80)) 05:25:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, 0x0) [ 426.221387][T24055] binder: 24051:24055 ioctl 6364 20001540 returned -22 05:25:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8913, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:26 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0x1000, 0x1007, &(0x7f0000000240)="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", &(0x7f0000002ac0)=""/4103, 0x4, 0x0, 0x68, 0x64, &(0x7f0000001240)="b4ed2c9780c9c308c0cfb35f6c6f54d4f9133cc2872e167fea194bb0edaf637cb51989c00be4635e8f813cd4bf7ffb809858f534cebf298449bbd3f4d5053ff16c293229244ea70ee8db732074d5bfb7b3d298645f6e3b58e141b68dbf90c3212ef60e89c7c04c00", &(0x7f00000000c0)="decca3cbcf0224187f64e053669049831fa071b73b84f57a666f5a8fe80877134444030d1ae0f5435628c00024f7912b32e6115c4171c10268beb40f20d284e45a487094b9b08b80526a89058a56942b6cbf4e3997f6bf8c222e0b50a4a8a3e8e385d494", 0x0, 0x5}, 0x48) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$TIOCSTI(r1, 0x5412, 0x81) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x101180) 05:25:26 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, 0x0) 05:25:26 executing program 5: socketpair(0x2c, 0xfffffffe, 0x0, &(0x7f0000001a80)) 05:25:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, 0x0) 05:25:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8914, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 426.354797][T24070] binder: 24067:24070 ioctl 8913 20001540 returned -22 05:25:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, 0x0) 05:25:27 executing program 5: socketpair(0x2c, 0x1000000000000, 0x0, &(0x7f0000001a80)) 05:25:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, 0x0) 05:25:27 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) 05:25:27 executing program 5: socketpair(0x2c, 0x20000000000000, 0x0, &(0x7f0000001a80)) [ 426.442240][T24084] binder: 24083:24084 ioctl 8914 20001540 returned -22 05:25:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:25:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8933, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40186366, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, 0x0) 05:25:27 executing program 5: socketpair(0x2c, 0x81010000000000, 0x0, &(0x7f0000001a80)) 05:25:27 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000007000)={&(0x7f0000006f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000006fc0)={&(0x7f0000006f40)={0x5c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'batadv_slave_1\x00'}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4080}, 0x2) syz_open_dev$ttys(0xc, 0x2, 0x1) 05:25:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400448c9, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 426.566349][T24100] binder: 24096:24100 ioctl 40186366 20001540 returned -22 [ 426.571130][T24101] binder: 24099:24101 ioctl 8933 20001540 returned -22 05:25:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:25:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:27 executing program 5: socketpair(0x2c, 0x300000000000000, 0x0, &(0x7f0000001a80)) 05:25:27 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5452, 0x0) 05:25:27 executing program 2: socketpair(0x28, 0x2, 0xfffffffc, &(0x7f0000001a80)={0xffffffffffffffff}) recvmsg$can_j1939(r0, &(0x7f0000000100)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000080), 0x0, &(0x7f00000000c0)=""/22, 0x16}, 0x10002) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x2c}}, 0x0) recvmsg$can_j1939(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/127, 0x7f}, {&(0x7f0000000080)=""/60, 0x3c}, {&(0x7f0000000200)=""/49, 0x31}, {&(0x7f0000000240)=""/18, 0x12}], 0x4, &(0x7f00000002c0)=""/73, 0x49}, 0x10020) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000140)) 05:25:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x80086301, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 426.670810][T24113] binder: 24110:24113 ioctl 400448c9 20001540 returned -22 05:25:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:25:27 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5452, 0x0) 05:25:27 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendto$isdn(r0, &(0x7f0000000040)={0x5, 0x2, "e94bb43a98de72d99f05534a603820d164db21d947108fd94a9998a99debff84b996dde8e37aa8cab76d0c0ef6"}, 0x35, 0x400d1, &(0x7f0000000080)={0x22, 0x3f, 0x2, 0x8, 0x5}, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) 05:25:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400448dd, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:27 executing program 5: socketpair(0x2c, 0x400000000000000, 0x0, &(0x7f0000001a80)) [ 426.726555][T24125] binder: 24124:24125 ioctl 80086301 20001540 returned -22 05:25:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:27 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5452, 0x0) 05:25:27 executing program 5: socketpair(0x2c, 0xa00000000000000, 0x0, &(0x7f0000001a80)) 05:25:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x0, 0x0, 0x0}) [ 426.830166][T24135] binder: 24133:24135 ioctl 400448dd 20001540 returned -22 05:25:27 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, 0x0) 05:25:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400454ca, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:27 executing program 2: socketpair(0x27, 0x1, 0x401, &(0x7f0000001a80)) 05:25:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x0, 0x0, 0x0}) 05:25:27 executing program 5: socketpair(0x2c, 0x8000000000000000, 0x0, &(0x7f0000001a80)) 05:25:27 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, 0x0) 05:25:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:27 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x6161, @empty, 0x9}}, 0x0, 0x0, 0x1023, 0x0, "f6cb20d08eec6155b154d180bb58db732a1e52e203ddd0b9aae46a3010902a45e307a6f4c7c5a2a203ba04a98cf47a34202d9bb1b45f92f00364936de58521f0fdd38dcde08e7e20b859f04a239bd095"}, 0xd8) [ 426.945578][T24155] binder: 24150:24155 ioctl 400454ca 20001540 returned -22 05:25:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000001540)={0x0, 0x0, &(0x7f00000013c0), 0x0, 0x0, 0x0}) 05:25:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:27 executing program 5: socketpair(0x2c, 0xfeffffff00000000, 0x0, &(0x7f0000001a80)) 05:25:27 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, 0x0) 05:25:27 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0xff, 0x0, 0x401, 0xe35, 0xffffffffffffffff, 0xffffff48, [], 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x40) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000180)={r1, &(0x7f0000000040)="99ae2f8d0250d2be8bf2128a875c5d9116c1f8656ae66fc303a1b8e8831e1059ce348a5c4e4c2e7304378e104a9bf06659fda110933e962287a7c04649f56f78c4972e9dfaf01b34c66e94f4dbbc94f67ad6c2ea7fe3644b94fa7732f57e60887462a1d5cdb81b1d741883641ff9aaad29383d079a1a2764424f14889605056f3aac9bff28de907d509f3a67c3741843c891787c568a5a216d50eaa6fe2010d6c3b494", &(0x7f0000000100)=""/123}, 0x20) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000001c0)) 05:25:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:27 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5452, 0x0) 05:25:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:27 executing program 2: openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100, 0x2}) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) 05:25:27 executing program 5: socketpair(0x2c, 0xffffffff00000000, 0x0, &(0x7f0000001a80)) 05:25:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:27 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) 05:25:27 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5452, 0x0) 05:25:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:27 executing program 2: socketpair(0x28, 0x5, 0xfffffffc, &(0x7f0000000000)) [ 427.215090][T24192] binder: 24191:24192 ioctl c018620c 20001540 returned -22 05:25:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:27 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5452, 0x0) 05:25:27 executing program 2: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2fd, 0x442802) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) socketpair(0x10, 0x3, 0x2, &(0x7f0000001a80)) 05:25:27 executing program 5: socketpair(0x2c, 0x0, 0x3, &(0x7f0000001a80)) 05:25:27 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:27 executing program 5: socketpair(0x2c, 0x0, 0x4, &(0x7f0000001a80)) 05:25:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:28 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5452, 0x0) 05:25:28 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000000)={'gre0\x00', 0x0, 0x700, 0x80, 0xffff, 0x40, {{0x22, 0x4, 0x2, 0x0, 0x88, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast1, @multicast2, {[@cipso={0x86, 0x72, 0x2, [{0x5, 0x10, "aa94564d0f343e8c9d607ad04404"}, {0x7, 0x10, "7fe21d20c143e059e19a0307c2a7"}, {0x7, 0xb, "9905fea9758b7b5638"}, {0x7, 0x10, "ece566aedf3f0495af1ceeeb975b"}, {0x5, 0xa, "6384a26729805900"}, {0x5, 0x3, '3'}, {0x6, 0x3, "19"}, {0x0, 0xa, "aa3562344a67fd6f"}, {0x6, 0xe, "2d04f54841dd9295bb66d460"}, {0x0, 0x9, "365379923901f1"}]}, @end]}}}}}) 05:25:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:28 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:28 executing program 5: socketpair(0x2c, 0x0, 0xa, &(0x7f0000001a80)) 05:25:28 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2fd, 0x442802) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) socketpair(0x10, 0x3, 0x2, &(0x7f0000001a80)) 05:25:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40186366, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:28 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:28 executing program 2: socketpair(0x28, 0x2, 0x8, &(0x7f0000001a80)) 05:25:28 executing program 5: socketpair(0x2c, 0x0, 0x300, &(0x7f0000001a80)) 05:25:28 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2fd, 0x442802) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) socketpair(0x10, 0x3, 0x2, &(0x7f0000001a80)) [ 427.517076][T24241] binder: 24238:24241 ioctl 40186366 20001540 returned -22 [ 427.527022][T24242] binder: 24234:24242 ioctl c0306203 20001540 returned -22 05:25:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:28 executing program 2: setsockopt$PNPIPE_ENCAP(0xffffffffffffffff, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000080)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) 05:25:28 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:28 executing program 5: socketpair(0x2c, 0x0, 0xa00, &(0x7f0000001a80)) [ 427.637069][T24252] binder: 24251:24252 ioctl c0306205 20001540 returned -22 05:25:28 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2fd, 0x442802) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) socketpair(0x10, 0x3, 0x2, &(0x7f0000001a80)) 05:25:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x80086301, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0585609, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:28 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:28 executing program 5: socketpair(0x2c, 0x0, 0x2000, &(0x7f0000001a80)) 05:25:28 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:28 executing program 2: socketpair(0x28, 0x1, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'gretap0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB='gre0\x00'/16, @ANYRES32=0x0, @ANYBLOB="7800002000000003000000b74d60003400660000812f9078ac1414bb14aa0083179facb58c7406c11cd454a65359ae1414aa64010100ac1414aa64010100e00000014408894000000007"]}) setsockopt$inet_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0x2, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) recvmmsg(r2, &(0x7f00000056c0)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000180)=""/4096, 0x1000}], 0x1, &(0x7f00000011c0)=""/8, 0x8}, 0x6}, {{&(0x7f0000001200)=@hci, 0x80, &(0x7f0000001340)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000001280)=""/147, 0x93}], 0x2, &(0x7f0000001380)=""/114, 0x72}, 0x80}, {{&(0x7f0000001400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x80, &(0x7f0000001600)=[{&(0x7f0000001480)=""/116, 0x74}, {&(0x7f0000001500)=""/254, 0xfe}], 0x2}, 0xff}, {{&(0x7f0000001640)=@hci, 0x80, &(0x7f0000001780)=[{&(0x7f00000016c0)=""/188, 0xbc}], 0x1, &(0x7f00000017c0)=""/251, 0xfb}, 0x9}, {{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f00000018c0)=""/166, 0xa6}, {&(0x7f0000001980)=""/218, 0xda}], 0x2, &(0x7f0000002b00)=""/153, 0x99}, 0x4}, {{&(0x7f0000002bc0)=@tipc=@name, 0x80, &(0x7f0000002cc0)=[{&(0x7f0000002c40)=""/84, 0x54}], 0x1, &(0x7f0000002d00)=""/205, 0xcd}, 0x6bdf}, {{&(0x7f0000002e00)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000003fc0)=[{&(0x7f0000002e80)=""/37, 0x25}, {&(0x7f0000002ec0)=""/212, 0xd4}, {&(0x7f0000002fc0)=""/4096, 0x1000}], 0x3}, 0xbe}, {{&(0x7f0000004000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000005440)=[{&(0x7f0000004080)=""/4096, 0x1000}, {&(0x7f0000005080)=""/245, 0xf5}, {&(0x7f0000005180)=""/141, 0x8d}, {&(0x7f0000005240)=""/192, 0xc0}, {&(0x7f0000005300)=""/109, 0x6d}, {&(0x7f0000005940)=""/193, 0xc1}], 0x6}}, {{&(0x7f00000054c0)=@caif=@dgm, 0x80, &(0x7f0000005640)=[{&(0x7f0000005540)=""/199, 0xc7}], 0x1, &(0x7f0000005680)}, 0x1}], 0x9, 0x2202, &(0x7f0000005900)={0x77359400}) 05:25:28 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x2fd, 0x442802) socketpair(0x10, 0x3, 0x2, &(0x7f0000001a80)) 05:25:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 427.756608][T24271] binder: 24266:24271 ioctl 80086301 20001540 returned -22 [ 427.791838][T24273] binder: 24270:24273 ioctl c0585609 20001540 returned -22 05:25:28 executing program 5: socketpair(0x2c, 0x0, 0x18100, &(0x7f0000001a80)) 05:25:28 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xd000943d, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:28 executing program 1: syz_open_dev$ttys(0xc, 0x2, 0x1) socketpair(0x10, 0x3, 0x2, &(0x7f0000001a80)) 05:25:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:28 executing program 5: socketpair(0x2c, 0x0, 0x200000, &(0x7f0000001a80)) 05:25:28 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:28 executing program 1: socketpair(0x10, 0x3, 0x2, &(0x7f0000001a80)) 05:25:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 427.946615][T24291] binder: 24287:24291 ioctl d000943d 20001540 returned -22 05:25:29 executing program 2: socketpair(0x10, 0x1, 0x5, &(0x7f0000000000)) r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x8, 0x0, &(0x7f0000000080)=[@acquire={0x40046305, 0x1}], 0x5b, 0x0, &(0x7f00000000c0)="11b1ad1d933eb198c206e040bf93a1199b1f9878f1f52ff05befe61d566c4e3ed2a7ea6eb5278a754cf67d362ee2c357bac6b4ff36080e65b30e3489840526c4703ca227a13be4ac03f0aabf3b0685e7eaf7202994bdcd5ed9ce91"}) 05:25:29 executing program 5: socketpair(0x2c, 0x0, 0x810100, &(0x7f0000001a80)) 05:25:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x2, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:29 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:29 executing program 1: socketpair(0x0, 0x3, 0x2, &(0x7f0000001a80)) 05:25:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:29 executing program 5: socketpair(0x2c, 0x0, 0x3000000, &(0x7f0000001a80)) 05:25:29 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:29 executing program 1: socketpair(0x0, 0x3, 0x2, &(0x7f0000001a80)) 05:25:29 executing program 2: socketpair(0x1a, 0x3, 0x80000000, &(0x7f0000001a80)) 05:25:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x3, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 428.692794][T24322] binder: 24315:24322 unknown command 16456 [ 428.724742][T24322] binder: 24315:24322 ioctl c0306201 20001540 returned -22 05:25:29 executing program 5: socketpair(0x2c, 0x0, 0x4000000, &(0x7f0000001a80)) 05:25:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:29 executing program 1: socketpair(0x0, 0x3, 0x2, &(0x7f0000001a80)) 05:25:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) [ 428.779346][T24332] binder: 24329:24332 ioctl c018620c 20001540 returned -22 [ 428.793927][T24336] binder: 24331:24336 unknown command 64 [ 428.806215][T24336] binder: 24331:24336 ioctl c0306201 20001540 returned -22 05:25:29 executing program 2: socketpair(0x0, 0x2, 0x4, &(0x7f0000001a80)) 05:25:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x4, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:29 executing program 5: socketpair(0x2c, 0x0, 0xa000000, &(0x7f0000001a80)) [ 428.884772][T24345] binder: 24344:24345 ioctl c0046209 0 returned -22 05:25:29 executing program 1: socketpair(0x10, 0x0, 0x2, &(0x7f0000001a80)) 05:25:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:29 executing program 2: ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000001200)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000000200)={{r0, 0x800, 0x4, 0x800, 0xdb4, 0x1, 0x3, 0x5, 0x1, 0x3, 0x8, 0x6726, 0x40, 0x3, 0x81}}) 05:25:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) [ 428.931715][T24353] binder: 24352:24353 unknown command 0 [ 428.963910][T24353] binder: 24352:24353 ioctl c0306201 20001540 returned -22 05:25:29 executing program 5: socketpair(0x2c, 0x0, 0xfeffffff, &(0x7f0000001a80)) 05:25:29 executing program 1: socketpair(0x10, 0x0, 0x2, &(0x7f0000001a80)) 05:25:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x5, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:29 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001000)={0xffffffffffffffff, &(0x7f0000001ac0)="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"}, 0x20) ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64) 05:25:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 429.014270][T24366] binder: 24363:24366 ioctl c0046209 0 returned -22 05:25:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) 05:25:29 executing program 5: socketpair(0x2c, 0x0, 0xfffffffe, &(0x7f0000001a80)) 05:25:29 executing program 1: socketpair(0x10, 0x0, 0x2, &(0x7f0000001a80)) 05:25:29 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000005a40)={0x0, 0x0, &(0x7f0000005a00)={0x0, 0x8c}}, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x20, 0x1f, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) 05:25:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000001540)={0x4c, 0x0, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x6, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 429.098313][T24374] binder: 24369:24374 unknown command 0 [ 429.106368][T24375] binder: 24372:24375 ioctl c0306203 20001540 returned -22 [ 429.121427][T24374] binder: 24369:24374 ioctl c0306201 20001540 returned -22 [ 429.137581][T24380] binder: 24377:24380 ioctl c0046209 0 returned -22 05:25:29 executing program 5: ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000000)={[], 0x6, 0x421, 0x4, 0xffffffff, 0x10001, 0xffffffffffffffff}) socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) 05:25:29 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 05:25:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 05:25:29 executing program 1: socketpair(0x10, 0x3, 0x0, &(0x7f0000001a80)) 05:25:29 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x2, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 429.211271][T24390] binder: 24387:24390 ioctl c0306205 20001540 returned -22 05:25:29 executing program 5: socketpair(0x2c, 0xa, 0x0, &(0x7f0000001a80)) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, &(0x7f0000000000)) 05:25:29 executing program 1: socketpair(0x10, 0x3, 0x0, &(0x7f0000001a80)) 05:25:29 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) [ 429.264556][T24394] binder: 24393:24394 unknown command 0 [ 429.284273][T24394] binder: 24393:24394 ioctl c0306201 20001540 returned -22 [ 429.301197][T24406] binder: 24399:24406 unknown command 16456 05:25:29 executing program 2: socketpair(0x22, 0x3, 0x5, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = syz_open_dev$vcsa(&(0x7f0000001980)='/dev/vcsa#\x00', 0x1800, 0x204001) sendto$isdn(r2, &(0x7f00000019c0)={0x4, 0x5, "823fda55a3ecfc1e2f595bb8747e7f4da967bbf16d75fcb3cf2842c47ea32cfa968afc1057c5e73126308d69079c69c1c89c1ed81178a215d3e5c9511990b4fefd2cd127873de0a7d7abfb884d294955d43191c42d180b0b9ca4cb698d9588b52bf06e943c457f2d4ce1e5f152de46f49ba0c888f724d8555d99ec09eca4a551899c190505f5bb2342047da4deb990d9403d93bfea04e3d8211722baf7eed4a923551470b7e91044eab1148502ba26bd7502cffbe18a63797459e50bf8341b1d38930a5b378af729c4656d58afd3ce2ff7dc2e8d853688a2ea4ed6d01be4433ca6226a26fcd6057806"}, 0xf1, 0x44140, &(0x7f0000001ac0)={0x22, 0xff, 0x7, 0x1, 0x91}, 0x6) recvmsg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/203, 0xcb}], 0x1}, 0x1) 05:25:29 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5ae92f00005c348a680000000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000f9dbdf250600000006001b004e230000"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x1) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000380)=0x1a) bind$nfc_llcp(r0, &(0x7f0000000180)={0x27, 0x0, 0x0, 0x4, 0x3, 0x3, "781ae358766ccfdac54f0def721f4e4ee1d5881fe49695e8ed1368e7ba567f351c0424d145f79722557fbd9c443b198e22ff6b0ecf2b5b754170e42b0e83b9", 0x20}, 0x60) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r3, &(0x7f0000000200)="e184e5539dee09f1a6b226c8acac33ba9000acbc3c33807ddb77816d0a40c1c2fcb7c87bdfa3625fa12bcd2e0ee54f95bf04c19992bfb3f1d44a82209efe92bee0bc67b4f4af00e51201f6c89326c868e760dbbbc15b91d1ede6df41c08a2869eea8d038b980489b6f08a9e7ca0d4c595160c92bbbf7150784cf45be0a99ed74f8f36828b8a9c206bf99d57a84d42e16a9298b9d13a0da1913aff18b6e05a38df901c018696af22466440ee2e3010456fbd9faae0984b1516d10cf79c8f99d7f45fb533addc1ca95a18b0119de878c05e19089540db6cdaf2be7e7dc8b95d9367642a180626986f683ad31b3fa5ba8", &(0x7f0000000300)=@udp6=r0, 0x1}, 0x20) 05:25:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x7, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 429.333764][T24406] binder: 24399:24406 ioctl c0306201 20001540 returned -22 05:25:30 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) r0 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8001) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x64, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/178, 0xb2, 0x1, 0x31}, @flat=@handle={0x73682a85, 0x1000, 0x2}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}, @dead_binder_done, @free_buffer={0x40086303, r0}, @decrefs={0x40046307, 0x2}], 0x54, 0x0, &(0x7f0000000200)="988ef8c3b217ca949f8cfbb477212efe033895557cdd433816c541e1b1893212f46c9ffac79959a776105f2b3a27e9f6d7827d1c52f5446f2959f246598a97b9fe3aeabfada27189ca5726375d8ad0a645fe9cc2"}) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x20, 0x41) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000003b00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r2) 05:25:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x3, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 429.387408][T24415] binder: 24408:24415 ioctl c0046209 0 returned -22 [ 429.397679][T24417] binder: 24414:24417 unknown command 0 05:25:30 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x8000, 0x10000) write$USERIO_CMD_SET_PORT_TYPE(r1, &(0x7f0000000140)={0x1, 0x3}, 0x2) connect$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x4, 0x7, 0x8, "7f388d92433db3575c27673d058a1f011a169e06640a08cbad5b531738b4eae84df45561f9cfeac927dc2ff6faa8f3ca49e404b019586968536bc5e33861e5"}, 0x60) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000080)) setsockopt$inet_udp_int(r3, 0x11, 0x67, &(0x7f00000000c0)=0x3, 0x4) 05:25:30 executing program 1: socketpair(0x10, 0x3, 0x0, &(0x7f0000001a80)) 05:25:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) [ 429.433995][T24417] binder: 24414:24417 ioctl c0306201 20001540 returned -22 [ 429.463110][T24424] binder: 24419:24424 unknown command 64 05:25:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x8, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:30 executing program 2: socketpair(0x28, 0x2, 0x23, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0xffffffff, 0x505402) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r2, &(0x7f0000000140)="c2b72c8059ee496075cdb4dd0d2c38b37630a32fdf7b561cf0e291a63e6ab4e740c2421ccdc32fbbf03f378675a4ab6cbcac76af8e07c1969764819f33b1de6849c486177a7ebd78f10fc043cbff96a07bf416d71aaba60bcb3c25f498c258000423d742bc4f4b5991192fc8", &(0x7f00000001c0)=@udp6=r0, 0x1}, 0x20) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000040)) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) connect$phonet_pipe(r1, &(0x7f0000000000)={0x23, 0xb7, 0x40, 0xfe}, 0x10) 05:25:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x4, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 429.487248][T24424] binder: 24419:24424 ioctl c0306201 20001540 returned -22 [ 429.499172][T24432] binder: 24430:24432 ioctl c0046209 0 returned -22 05:25:30 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) 05:25:30 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000000), &(0x7f0000000040)=0x4) getsockopt$nfc_llcp(r1, 0x118, 0x0, &(0x7f00000000c0)=""/185, 0xb9) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) 05:25:30 executing program 1: socketpair(0x10, 0x3, 0x2, 0x0) [ 429.555068][T24434] binder: 24433:24434 unknown command 0 [ 429.565570][T24436] binder: 24435:24436 unknown command 0 [ 429.577679][T24436] binder: 24435:24436 ioctl c0306201 20001540 returned -22 [ 429.590567][T24434] binder: 24433:24434 ioctl c0306201 20001540 returned -22 05:25:30 executing program 1: socketpair(0x10, 0x3, 0x2, 0x0) 05:25:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x9, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:30 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, 0x0) 05:25:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x5, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:30 executing program 5: socketpair(0x2c, 0x4, 0x0, &(0x7f0000001a80)) [ 429.613760][T24447] binder: 24439:24447 ioctl c0046209 0 returned -22 05:25:30 executing program 2: openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x282, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) 05:25:30 executing program 1: socketpair(0x10, 0x3, 0x2, 0x0) 05:25:30 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, 0x0) [ 429.701380][T24457] binder: 24452:24457 unknown command 0 [ 429.707322][T24456] binder: 24450:24456 unknown command 0 [ 429.725990][T24457] binder: 24452:24457 ioctl c0306201 20001540 returned -22 [ 429.743014][T24456] binder: 24450:24456 ioctl c0306201 20001540 returned -22 05:25:30 executing program 1: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) r0 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8001) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x64, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/178, 0xb2, 0x1, 0x31}, @flat=@handle={0x73682a85, 0x1000, 0x2}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}, @dead_binder_done, @free_buffer={0x40086303, r0}, @decrefs={0x40046307, 0x2}], 0x54, 0x0, &(0x7f0000000200)="988ef8c3b217ca949f8cfbb477212efe033895557cdd433816c541e1b1893212f46c9ffac79959a776105f2b3a27e9f6d7827d1c52f5446f2959f246598a97b9fe3aeabfada27189ca5726375d8ad0a645fe9cc2"}) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x20, 0x41) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000003b00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r2) 05:25:30 executing program 2: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSTI(r0, 0x5412, 0x0) 05:25:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x6, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:30 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, 0x0) 05:25:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xa, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:30 executing program 2: socketpair(0x1d, 0x0, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) recvmsg(r0, &(0x7f0000000600)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000080)=""/135, 0x87}, {&(0x7f0000000140)=""/40, 0x28}, {&(0x7f0000000180)=""/43, 0x2b}, {&(0x7f00000001c0)=""/211, 0xd3}, {&(0x7f00000002c0)=""/133, 0x85}, {&(0x7f0000000380)=""/131, 0x83}, {&(0x7f0000000440)=""/1, 0x1}], 0x7, &(0x7f0000000500)=""/231, 0xe7}, 0x101) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(r1, &(0x7f0000001280)=[{{&(0x7f0000000680)=@tipc=@name, 0x80, &(0x7f0000000ac0)=[{&(0x7f0000000700)=""/177, 0xb1}, {&(0x7f00000007c0)=""/93, 0x5d}, {&(0x7f0000000840)=""/38, 0x26}, {&(0x7f0000000880)=""/93, 0x5d}, {&(0x7f0000000900)=""/205, 0xcd}, {&(0x7f0000000a00)=""/132, 0x84}], 0x6, &(0x7f0000000b40)=""/10, 0xa}, 0x6}, {{&(0x7f0000000b80)=@hci, 0x80, &(0x7f0000001100)=[{&(0x7f0000000c00)=""/160, 0xa0}, {&(0x7f0000000cc0)=""/210, 0xd2}, {&(0x7f0000000dc0)=""/64, 0x40}, {&(0x7f0000000e00)=""/205, 0xcd}, {&(0x7f0000000f00)=""/117, 0x75}, {&(0x7f0000000f80)=""/10, 0xa}, {&(0x7f0000000fc0)=""/190, 0xbe}, {&(0x7f0000001080)=""/5, 0x5}, {&(0x7f00000010c0)=""/58, 0x3a}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0xa, &(0x7f00000011c0)=""/176, 0xb0}, 0x8001}], 0x2, 0x100, &(0x7f0000001300)) 05:25:30 executing program 1: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) r0 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8001) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x64, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/178, 0xb2, 0x1, 0x31}, @flat=@handle={0x73682a85, 0x1000, 0x2}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}, @dead_binder_done, @free_buffer={0x40086303, r0}, @decrefs={0x40046307, 0x2}], 0x54, 0x0, &(0x7f0000000200)="988ef8c3b217ca949f8cfbb477212efe033895557cdd433816c541e1b1893212f46c9ffac79959a776105f2b3a27e9f6d7827d1c52f5446f2959f246598a97b9fe3aeabfada27189ca5726375d8ad0a645fe9cc2"}) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x20, 0x41) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000003b00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r2) 05:25:30 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) [ 429.860525][T24474] binder: 24471:24474 unknown command 0 [ 429.862587][T24473] binder: 24469:24473 unknown command 0 [ 429.892313][T24474] binder: 24471:24474 ioctl c0306201 20001540 returned -22 [ 429.894982][T24473] binder: 24469:24473 ioctl c0306201 20001540 returned -22 05:25:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x7, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:30 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) 05:25:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xb, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 429.966943][T24479] can_create: 3 callbacks suppressed [ 429.966956][T24479] can: request_module (can-proto-0) failed. [ 430.000341][T24488] binder: 24486:24488 unknown command 0 05:25:30 executing program 1: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) r0 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8001) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x64, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/178, 0xb2, 0x1, 0x31}, @flat=@handle={0x73682a85, 0x1000, 0x2}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}, @dead_binder_done, @free_buffer={0x40086303, r0}, @decrefs={0x40046307, 0x2}], 0x54, 0x0, &(0x7f0000000200)="988ef8c3b217ca949f8cfbb477212efe033895557cdd433816c541e1b1893212f46c9ffac79959a776105f2b3a27e9f6d7827d1c52f5446f2959f246598a97b9fe3aeabfada27189ca5726375d8ad0a645fe9cc2"}) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x20, 0x41) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000003b00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) getpgid(r2) 05:25:30 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, 0x0) [ 430.012671][T24488] binder: 24486:24488 ioctl c0306201 20001540 returned -22 [ 430.015019][T24490] binder: 24485:24490 unknown command 0 [ 430.053996][T24490] binder: 24485:24490 ioctl c0306201 20001540 returned -22 05:25:30 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x8, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:30 executing program 1: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) r0 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8001) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x64, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/178, 0xb2, 0x1, 0x31}, @flat=@handle={0x73682a85, 0x1000, 0x2}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}, @dead_binder_done, @free_buffer={0x40086303, r0}, @decrefs={0x40046307, 0x2}], 0x54, 0x0, &(0x7f0000000200)="988ef8c3b217ca949f8cfbb477212efe033895557cdd433816c541e1b1893212f46c9ffac79959a776105f2b3a27e9f6d7827d1c52f5446f2959f246598a97b9fe3aeabfada27189ca5726375d8ad0a645fe9cc2"}) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x20, 0x41) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/cuse\x00', 0x2, 0x0) getpgid(0x0) 05:25:30 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, 0x0) 05:25:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xc, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 430.146588][T24497] binder: 24496:24497 unknown command 0 [ 430.178228][T24497] binder: 24496:24497 ioctl c0306201 20001540 returned -22 [ 430.200583][T24502] binder: 24499:24502 unknown command 0 [ 430.217307][T24502] binder: 24499:24502 ioctl c0306201 20001540 returned -22 05:25:31 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x7) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x10001, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0xa, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0xb, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0xa, 0x6, 0xa, 0x4}, @exit, @alu={0x4, 0x1, 0xc, 0x6, 0x8, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, r2, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:31 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, 0x0) 05:25:31 executing program 1: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) r0 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8001) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x64, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/178, 0xb2, 0x1, 0x31}, @flat=@handle={0x73682a85, 0x1000, 0x2}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}, @dead_binder_done, @free_buffer={0x40086303, r0}, @decrefs={0x40046307, 0x2}], 0x54, 0x0, &(0x7f0000000200)="988ef8c3b217ca949f8cfbb477212efe033895557cdd433816c541e1b1893212f46c9ffac79959a776105f2b3a27e9f6d7827d1c52f5446f2959f246598a97b9fe3aeabfada27189ca5726375d8ad0a645fe9cc2"}) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x20, 0x41) getpgid(0x0) 05:25:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x9, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xd, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:31 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f00000000c0)=0xfdd9da31cda83279, 0x4) write$tcp_mem(r2, &(0x7f0000000040)={0x5, 0x20, 0x68}, 0x48) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f00000680c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, &(0x7f00000682c0)={0x7fff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {0x0}], 0x54, "4a63722c299b02"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000692c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f00000694c0)={{0x0, 0x7, 0xa56, 0x2, 0x0, 0x800000000000ed, 0x1, 0x5, 0x6c2b, 0x8, 0x1, 0x5, 0x1, 0x6, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f000006a4c0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, &(0x7f000006a6c0)={0x1000, [{}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "b87bab5e972caf"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f000006b6c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f000006c6c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, &(0x7f000006d6c0)={0xcd51, [{}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {0x0, r5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}], 0x99, "19f3421b98401a"}) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f000006e6c0)={{0x0, 0x2, 0x20, 0x6, 0x4, 0x9, 0x1, 0x20, 0x5, 0x0, 0x3, 0x7fffffff, 0x2, 0x0, 0x5a}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r3, 0xd000943e, &(0x7f000006f6c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000706c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000716c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f00000726c0)={0x3ff, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r13}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r4}, {}, {}, {0x0, r6}, {}, {0x0, r8}, {r9}, {0x0, r10}, {}, {0x0, r12}, {}, {}, {0x0, r14}, {0x0, r15}, {}, {r16}, {r17, r18}, {r19, r20}], 0x40, "8c8359ead969c5"}) [ 430.759776][T24484] can: request_module (can-proto-0) failed. 05:25:31 executing program 1: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) r0 = mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8001) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x64, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/178, 0xb2, 0x1, 0x31}, @flat=@handle={0x73682a85, 0x1000, 0x2}}, &(0x7f0000000140)={0x0, 0x18, 0x40}}}, @dead_binder_done, @free_buffer={0x40086303, r0}, @decrefs={0x40046307, 0x2}], 0x54, 0x0, &(0x7f0000000200)="988ef8c3b217ca949f8cfbb477212efe033895557cdd433816c541e1b1893212f46c9ffac79959a776105f2b3a27e9f6d7827d1c52f5446f2959f246598a97b9fe3aeabfada27189ca5726375d8ad0a645fe9cc2"}) getpgid(0x0) [ 430.815105][T24518] binder: 24514:24518 unknown command 0 [ 430.830071][T24523] binder: 24516:24523 unknown command 0 [ 430.837444][T24518] binder: 24514:24518 ioctl c0306201 20001540 returned -22 05:25:31 executing program 4: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0046209, 0x0) 05:25:31 executing program 2: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0xe1b, 0x3, 0x4, 0x70000, 0x5, {}, {0x2, 0x8, 0x5, 0x8, 0x9, 0x0, "a4fbf8df"}, 0x9, 0x3, @planes=&(0x7f0000000080)={0xfffffffd, 0xd77, @mem_offset=0x1, 0x2}, 0x4, 0x0, 0xffffffffffffffff}) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)={0x2, 0xd, 0x4, 0x20, 0x3, {0x77359400}, {0x5, 0xc, 0xf9, 0xd0, 0x6, 0x6, "b46ae2f4"}, 0xfff, 0x3, @offset=0x4, 0x2, 0x0, r0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000240)={0x6, 0x2, 0x4, 0xe000, 0x40, {}, {0x5, 0x8, 0x0, 0x7, 0x7f, 0x2, "b077cf12"}, 0x0, 0x4, @userptr=0xff, 0x6, 0x0, r2}) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x6, 0x2000) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) accept4$phonet_pipe(r3, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x180800) 05:25:31 executing program 5: bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00'}, 0x10) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e0, &(0x7f0000000000)) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0x4) r2 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x3ff, 0x900) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x8) 05:25:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xa, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 430.859273][T24523] binder: 24516:24523 ioctl c0306201 20001540 returned -22 05:25:31 executing program 1: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x8001) getpgid(0x0) 05:25:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xe, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:31 executing program 4: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x7) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x10001, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0xa, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0xb, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0xa, 0x6, 0xa, 0x4}, @exit, @alu={0x4, 0x1, 0xc, 0x6, 0x8, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, r2, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:31 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) recvmsg$can_j1939(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000000)=""/4096, 0x1000}, {&(0x7f0000001000)=""/185, 0xb9}, {&(0x7f00000010c0)=""/234, 0xea}], 0x3, &(0x7f0000001200)=""/103, 0x67}, 0x12020) [ 430.926336][T24534] binder: 24531:24534 unknown command 0 [ 430.955140][T24534] binder: 24531:24534 ioctl c0306201 20001540 returned -22 05:25:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xb, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:31 executing program 2: socketpair(0x18, 0x6, 0x8, &(0x7f0000000000)) 05:25:31 executing program 1: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) getpgid(0x0) 05:25:31 executing program 4: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x7) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x10001, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0xa, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0xb, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0xa, 0x6, 0xa, 0x4}, @exit, @alu={0x4, 0x1, 0xc, 0x6, 0x8, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, r2, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:31 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) socketpair(0x23, 0x4, 0x5, &(0x7f0000000080)) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000040), 0x4) [ 431.014402][T24546] binder: 24541:24546 unknown command 0 [ 431.048201][T24546] binder: 24541:24546 ioctl c0306201 20001540 returned -22 05:25:31 executing program 1: getpgid(0x0) 05:25:31 executing program 2: bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={&(0x7f0000000000)="96da185e1d2e237017744ec0fae5cb1cac5bec0f01cb984b4101d2c26161914c7214b0d75785a3a975c7f563de3fe3f14e117992c38c13acf3a7128971c44507ae515df1a0ca05d3d6e589a33a70b3f3ea986508b245dca7d3c049c256375129ace41dc64d63e80c89867d1661455802c9bbfa5608f27a116d8838396236326355b816bb852f42784fb8e8baa7affb8849d0edb5c8706f5c49ff0e9f3a9548c1708e8b579913b4cdaf260cddfb", &(0x7f00000000c0)=""/231, &(0x7f00000001c0)="5317d5c1564e9849831c2cb9b21a3250bab5cc67b5e1f21788e216f057fc51ad25c8722e4157800c5e298528469520cb0bfd9e3147644a04a1d7a4df7c273924566977cc1b2b70cea7ed719f2a82c951d2e242eeaa0bf13704ba048b1a5030b7bf0c5c705423776c4099d6b6992790c390f17567bb968d2b7723bfa8f905ea3b6c76dc69c997cac3d115f55c878567c5133b537c1c58cebd1a5536f0ab0c084a4525dce13b943ced3baf08e2d21081a4a6276a95542c86ced1e2cad382", &(0x7f0000000280)="949660b42d35dedb9c969dfff4178396119aec9cd0f4b25fd418a7d98e16884e0ba7e42cffab104daccdc6f306b4db734c2b91de6263c46975cdbfa25250a30a1b0bc9c7f7a2a918a86e53e13121f9adcb3648a2847a962ab404984a9d9ce4e7bb9daaf78bd4e2a01f2d1d66f74b5889cc54b7aaae5656b1982aaf1c8b14834bebc280255bf8d01904ff7d7302778899995617e2a8", 0x80000001}, 0x38) socketpair(0x5, 0x2, 0x0, &(0x7f0000001a80)) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1b, 0x5, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x325f, 0x0, 0x0, 0x0, 0x1}, [@alu={0x4, 0x1, 0xda320e4cd548380c, 0x4, 0x5, 0xffffffffffffffc0, 0x10}, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x2, 0xa7, &(0x7f0000000400)=""/167, 0x41100, 0x17, [], 0x0, 0x8, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x1, 0xe, 0x3, 0x989}, 0x10}, 0x78) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) 05:25:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x10, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 431.082678][T24554] binder: 24550:24554 unknown command 0 [ 431.100172][T24554] binder: 24550:24554 ioctl c0306201 20001540 returned -22 05:25:31 executing program 4: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x7) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x10001, 0x40800) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0xa, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0xb, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0xa, 0x6, 0xa, 0x4}, @exit, @alu={0x4, 0x1, 0xc, 0x6, 0x8, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, r2, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xc, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:31 executing program 1: ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f00000000c0)={0xe1b, 0x3, 0x4, 0x70000, 0x5, {}, {0x2, 0x8, 0x5, 0x8, 0x9, 0x0, "a4fbf8df"}, 0x9, 0x3, @planes=&(0x7f0000000080)={0xfffffffd, 0xd77, @mem_offset=0x1, 0x2}, 0x4, 0x0, 0xffffffffffffffff}) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) syz_open_dev$ptys(0xc, 0x3, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vim2m\x00', 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000180)={0x2, 0xd, 0x4, 0x20, 0x3, {0x77359400}, {0x5, 0xc, 0xf9, 0xd0, 0x6, 0x6, "b46ae2f4"}, 0xfff, 0x3, @offset=0x4, 0x2, 0x0, r0}) ioctl$vim2m_VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000240)={0x6, 0x2, 0x4, 0xe000, 0x40, {}, {0x5, 0x8, 0x0, 0x7, 0x7f, 0x2, "b077cf12"}, 0x0, 0x4, @userptr=0xff, 0x6, 0x0, r2}) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) syz_open_dev$loop(&(0x7f00000002c0)='/dev/loop#\x00', 0x6, 0x2000) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) accept4$phonet_pipe(r3, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x180800) 05:25:31 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) [ 431.171896][T24570] binder: 24564:24570 unknown command 0 [ 431.191638][T24570] binder: 24564:24570 ioctl c0306201 20001540 returned -22 05:25:31 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001000)={'vcan0\x00'}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000000)={{0x0, 0x400, 0x8, 0x0, 0x5, 0x7, 0xffffff0000000000, 0x7, 0xfff, 0xf8000, 0x8, 0x6, 0x2, 0x9, 0x2}}) 05:25:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x11, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:31 executing program 4: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x7) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0xa, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0xb, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0xa, 0x6, 0xa, 0x4}, @exit, @alu={0x4, 0x1, 0xc, 0x6, 0x8, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) [ 431.233995][T24577] binder: 24576:24577 unknown command 0 [ 431.254617][T24577] binder: 24576:24577 ioctl c0306201 20001540 returned -22 05:25:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x10, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:31 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000000)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000200)={0x0, r2, "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", "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"}) 05:25:31 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) r0 = socket$can_j1939(0x1d, 0x2, 0x7) recvmmsg(r0, &(0x7f0000002280)=[{{&(0x7f0000000000)=@caif, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/24, 0x18}, {&(0x7f00000000c0)=""/124, 0x7c}, {&(0x7f0000000140)=""/12, 0xc}, {&(0x7f0000000180)=""/197, 0xc5}], 0x4, &(0x7f00000002c0)=""/55, 0x37}, 0x4}, {{&(0x7f0000000300)=@ipx, 0x80, &(0x7f0000000880)=[{&(0x7f0000000380)=""/200, 0xc8}, {&(0x7f0000000480)=""/52, 0x34}, {&(0x7f00000004c0)=""/12, 0xc}, {&(0x7f0000000500)=""/151, 0x97}, {&(0x7f00000005c0)=""/67, 0x43}, {&(0x7f0000000640)=""/148, 0x94}, {&(0x7f0000000700)=""/81, 0x51}, {&(0x7f0000000780)=""/203, 0xcb}], 0x8, &(0x7f0000000900)=""/31, 0x1f}, 0x200}, {{0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000001940)=""/181, 0xb5}, {&(0x7f0000001ac0)=""/161, 0xa1}, {&(0x7f0000001b80)=""/176, 0xb0}, {&(0x7f0000001a00)=""/113, 0x71}, {&(0x7f0000001c40)=""/43, 0x2b}], 0x6, &(0x7f0000001d00)=""/250, 0xfa}, 0x3}, {{&(0x7f0000001e00)=@hci, 0x80, &(0x7f0000002140)=[{&(0x7f0000001e80)=""/196, 0xc4}, {&(0x7f0000001f80)=""/56, 0x38}, {&(0x7f0000001fc0)=""/30, 0x1e}, {&(0x7f0000002000)=""/53, 0x35}, {&(0x7f0000002040)=""/30, 0x1e}, {&(0x7f0000002080)=""/130, 0x82}], 0x6, &(0x7f00000021c0)=""/169, 0xa9}, 0x80}], 0x4, 0x41, &(0x7f0000002380)={0x77359400}) 05:25:31 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xd, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 431.301912][T24588] binder: 24583:24588 unknown command 0 [ 431.324293][T24588] binder: 24583:24588 ioctl c0306201 20001540 returned -22 05:25:31 executing program 4: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x7) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0xa, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0xb, 0x1, 0x0, r1}, @jmp={0x5, 0x0, 0xa, 0x6, 0xa, 0x4}, @exit, @alu={0x4, 0x1, 0xc, 0x6, 0x8, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x12, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 2: write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="63203f7123d701000000"], 0xa) socketpair(0x28, 0xa, 0xfffffffd, &(0x7f0000001a80)) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xffffffffffffffe1, 0x80) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r1, &(0x7f0000000140)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000001ac0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r1, &(0x7f00000000c0)={0x18, 0x0, r2, {0x10000}}, 0x18) write$cgroup_devices(r0, &(0x7f0000000080)={'c', ' *:* ', 'rw\x00'}, 0x9) read$FUSE(r0, &(0x7f0000003b00)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_WRITE(r0, &(0x7f0000005b40)={0x18, 0x0, r3, {0x3}}, 0x18) [ 431.367571][T24594] binder: 24591:24594 unknown command 0 [ 431.382086][T24598] binder: 24597:24598 unknown command 0 [ 431.396618][T24594] binder: 24591:24594 ioctl c0306201 20001540 returned -22 [ 431.409119][T24598] binder: 24597:24598 ioctl c0306201 20001540 returned -22 05:25:32 executing program 5: pipe2$9p(&(0x7f0000000000), 0x4800) socketpair(0x1e, 0x2, 0x25ae, &(0x7f0000000040)) 05:25:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xe, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x10, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 4: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x7) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0xa, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0xb}, @jmp={0x5, 0x0, 0xa, 0x6, 0xa, 0x4}, @exit, @alu={0x4, 0x1, 0xc, 0x6, 0x8, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) [ 431.432811][T24602] binder: 24601:24602 unknown command 0 [ 431.453294][T24602] binder: 24601:24602 ioctl c0306201 20001540 returned -22 05:25:32 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) r0 = socket$isdn(0x22, 0x3, 0x26) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000000)=0x5) 05:25:32 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0xa62f, 0x100) r0 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x7, 0x2480) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000080)={r0, 0x1, 0x1000, 0x2000}) 05:25:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x25, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 431.524827][T24612] binder: 24611:24612 unknown command 0 [ 431.535404][T24612] binder: 24611:24612 ioctl c0306201 20001540 returned -22 [ 431.550431][T24617] binder: 24614:24617 unknown command 0 [ 431.563762][T24617] binder: 24614:24617 ioctl c0306201 20001540 returned -22 05:25:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x44, 0x0, &(0x7f0000000140)=[@reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r0}, @flat=@binder={0x73622a85, 0xb, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/4, 0x4, 0x1, 0x9}}, &(0x7f0000000100)={0x0, 0x18, 0x30}}}], 0xd4, 0x0, &(0x7f00000001c0)="a49a66b755fce46eb7b4e8ca17863fe02f5c0b20347e56fe3ee92670f81eaaa5d5868e2ae68614ed5e26a8fecdcebde82af95827d0992cc16449e3d6f62f18a9bbb8753f02452a02f7888310a8d131a66cbb8af49b2fbb6961d1e868b5671f5191a6501be514564dc64ed774d3f948f00108729a98df2fc1132f6cb59af7bc54bb6c8f7d652b31843cfeec742573eff69943c4bb1cea1ce4b362daf1310c9af663bf02089365b4b5a4503c48bad3db467a304c7020b210c153597b6fdc0e40abe358a192d436ca9c28a079128c253f03640d0e09"}) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000000)=0x8, 0x4) 05:25:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x10, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0xc0200, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, 0xffffffffffffffff) ioctl$TIOCSERGETLSR(r2, 0x5459, &(0x7f0000000140)) openat$userio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/userio\x00', 0x100, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0)={0x0, 0x3}, 0x2) setsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f0000000080)=0x1, 0x4) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000040)={0x0, 0x1}, 0x2) 05:25:32 executing program 4: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0xa, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0xb}, @jmp={0x5, 0x0, 0xa, 0x6, 0xa, 0x4}, @exit, @alu={0x4, 0x1, 0xc, 0x6, 0x8, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) [ 431.590220][T24624] binder: 24623:24624 unknown command 0 [ 431.621731][T24624] binder: 24623:24624 ioctl c0306201 20001540 returned -22 05:25:32 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x10, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 2: socketpair(0x18, 0x80000, 0x0, &(0x7f0000000000)) [ 431.640400][T24632] binder: 24627:24632 unknown command 0 [ 431.674417][T24632] binder: 24627:24632 ioctl c0306201 20001540 returned -22 05:25:32 executing program 5: socketpair(0x2c, 0x3, 0x0, &(0x7f0000001a80)) 05:25:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x5c, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 4: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0xa, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0xb}, @jmp={0x5, 0x0, 0xa, 0x6, 0xa, 0x4}, @exit, @alu={0x4, 0x1, 0xc, 0x6, 0x8, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) [ 431.692902][T24638] binder: 24637:24638 unknown command 0 [ 431.707604][T24638] binder: 24637:24638 ioctl c0306201 20001540 returned -22 05:25:32 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$MISDN_TIME_STAMP(r0, 0x0, 0x1, &(0x7f00000000c0), &(0x7f0000000040)=0x4) write$USERIO_CMD_REGISTER(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x40}, 0x2) 05:25:32 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x10, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x11, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 4: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0xa, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0xb}, @jmp={0x5, 0x0, 0xa, 0x6, 0xa, 0x4}, @exit, @alu={0x4, 0x1, 0xc, 0x6, 0x8, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x300, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 2: syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x4, 0x2c0300) ioctl$LOOP_SET_BLOCK_SIZE(0xffffffffffffffff, 0x4c09, 0x9) 05:25:32 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) recvmsg(r0, &(0x7f0000000480)={&(0x7f0000000100)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000180)=""/155, 0x9b}, {&(0x7f0000000240)=""/157, 0x9d}, {&(0x7f0000000300)=""/245, 0xf5}], 0x3, &(0x7f0000000440)=""/20, 0x14}, 0x40010123) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'veth1\x00'}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x30}, 0x1, 0x0, 0x0, 0x8080}, 0x8000) 05:25:32 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x10, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0xa, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0xb}, @jmp={0x5, 0x0, 0xa, 0x6, 0xa, 0x4}, @exit, @alu={0x4, 0x1, 0xc, 0x6, 0x8, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:32 executing program 5: socketpair(0xa, 0x6, 0x0, &(0x7f0000000000)) setsockopt$nfc_llcp_NFC_LLCP_RW(0xffffffffffffffff, 0x118, 0x0, &(0x7f0000000040)=0xfffffffe, 0x4) [ 431.830320][T24655] binder: 24653:24655 unknown command 0 [ 431.843766][T24655] binder: 24653:24655 ioctl c0306201 20001540 returned -22 05:25:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x500, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x12, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) accept4$phonet_pipe(r0, 0x0, &(0x7f0000000000), 0x800) 05:25:32 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x10, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) 05:25:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x600, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_buf(r0, 0x6, 0xe, &(0x7f0000000000)=""/18, &(0x7f0000000040)=0x12) 05:25:32 executing program 5: socketpair(0x2a, 0x0, 0x0, &(0x7f0000001a80)) [ 431.972426][T24674] binder: 24671:24674 unknown command 0 [ 431.988198][T24674] binder: 24671:24674 ioctl c0306201 20001540 returned -22 05:25:32 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) 05:25:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x25, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x10, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x700, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 5: socketpair(0x3, 0x0, 0x0, &(0x7f0000001a80)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', r0) 05:25:32 executing program 2: socketpair(0x28, 0x6, 0x3, &(0x7f0000000000)) 05:25:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x900, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) 05:25:32 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x10, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040032be4635c65992071329bd7000fddbdf25020000000c000643ba3325376b8cce61039e0b3e7d6aad72c351c6a12e2548df2022e05d02e0bf04de431b"], 0x20}, 0x1, 0x0, 0x0, 0x48001}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)={&(0x7f0000000100)='./file0\x00', 0x0, 0x8}, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000005a40)={0x0, 0x0, &(0x7f0000005a00)={0x0, 0x8c}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x40, 0x0, 0x2, 0x70bd2c, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffa}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x7}]}, 0x40}, 0x1, 0x0, 0x0, 0x2004044}, 0x20000040) [ 432.107342][T24695] binder: 24692:24695 unknown command 0 [ 432.140564][T24695] binder: 24692:24695 ioctl c0306201 20001540 returned -22 05:25:32 executing program 5: socketpair(0x4, 0x5, 0x3, &(0x7f0000001400)={0xffffffffffffffff}) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000001540)={&(0x7f0000001440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001500)={&(0x7f0000001480)={0x48, 0x0, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x4}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffffc}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x400}, 0x9801) socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) 05:25:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x5c, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) sendto$isdn(r0, &(0x7f0000003cc0)=ANY=[@ANYBLOB="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"], 0x1008, 0x0, &(0x7f0000001040)={0x22, 0x1, 0x4, 0x1f, 0x1}, 0x6) r1 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xffff, 0x264800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x118, 0x0, &(0x7f0000000c80)=[@transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000a00)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/59, 0x3b, 0x1, 0x22}, @ptr={0x70742a85, 0x0, &(0x7f00000006c0)=""/23, 0x0, 0x1, 0x30}, @flat=@weak_handle={0x77682a85, 0xa}}, &(0x7f0000000640)={0x0, 0x28, 0x48}}, 0x40}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000008c0)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32, @ANYBLOB="000000000000003f00003aa47dd8c62f62a4536872000085616466000000000600000000000000010000000000000015000000000000000100000000"], &(0x7f0000000b00)={0x0, 0x18, 0x38}}}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000a80)={@ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/75, 0xffffffffffffffa9, 0x0, 0xc}, @flat=@weak_handle={0x77682a85, 0xa, 0x3}, @fda={0x66646185, 0x2, 0x1, 0x2c}}, &(0x7f0000000700)={0x0, 0x20, 0x38}}}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000940)={@fda={0x66646185, 0x0, 0x0, 0x28}, @fd, @flat=@binder={0x73622a85, 0x0, 0x1}}, &(0x7f00000009c0)={0x0, 0x4, 0x38}}}], 0xca, 0x0, &(0x7f0000000740)="805595288c9960eac425d00bce326e8ad9759befea38fb41c44cdb26c2db39d001d8fcb3b12fb65926297e482878b5905c0a523df6aba9670ed95066d666599603cce01327e8935fa3e3cbe39e62c9ab7cfa3b893b1a8ef48212c9cf3ca22be39ccb3d8fc736d9a6219afda04507c0de88782635b26596ebb4a80ffbf1a923749ba06155746b2e1b8542ee3c05302d8d64d836b23b101bc841b729cbc6fe28a3e67dd5423390ee372f8a40f38fda3ddc32625cc9bf6bbce66ec53a5bb328993e42b833dbcfff6b8d91ad"}) ioctl$TIOCSERGETLSR(r0, 0x5459, &(0x7f0000000080)) getsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000300), &(0x7f0000000340)=0x4) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0xffffffff, 0xa4002) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000005a40)={0x0, 0x0, &(0x7f0000005a00)={0x0, 0x8c}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) socketpair(0x6, 0x4, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000004c0)='nbd\x00', r2) r5 = syz_open_dev$vcsa(&(0x7f0000000500)='/dev/vcsa#\x00', 0xfffffffffffffffa, 0x4201) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="00012dbd7000fcdbdf25030000001c00078008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r5, @ANYBLOB="08000100fd4728866aae4236d5a60275266b215469eb296ab76cb8ac279e5d274854947b491a29ce76d440c22c9728c7c30c41adddde7158a207d4d33ca507226e170acebb717bc164ab1e4a815b838f8856f0bc63c4cdaa7367416769392188527995ced41cd2", @ANYRES32=r1, @ANYBLOB="0c00050020000000000000000c000800ff030000000000000c0003000600000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000005a40)={0x0, 0x0, &(0x7f0000005a00)={0x0, 0x8c}}, 0x0) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00', r2) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, r7, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x8004) 05:25:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xa, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0xb}, @jmp={0x5, 0x0, 0xa, 0x6, 0xa, 0x4}, @exit, @alu={0x4, 0x1, 0xc, 0x6, 0x8, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:32 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x10, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xa00, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x300, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x10, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:32 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xa, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0xb}, @jmp={0x5, 0x0, 0xa, 0x6, 0xa, 0x4}, @exit, @alu={0x4, 0x1, 0xc, 0x6, 0x8, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:32 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x500, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x4000) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000040)={r0, 0x0, 0xfffff000, 0xfffff000}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000000)='./file0\x00', 0x0, 0x4a2ce2d3edd754c3}, 0x10) 05:25:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xb00, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 5: socketpair(0x2c, 0x4, 0x0, &(0x7f0000001a80)) 05:25:33 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x10, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x0, 0xa, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0xb}, @jmp={0x5, 0x0, 0xa, 0x6, 0xa, 0x4}, @exit, @alu={0x4, 0x1, 0xc, 0x6, 0x8, 0xfffffffffffffff4, 0xffffffffffffffff}, @map_val={0x18, 0xb, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x600, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 2: ioctl$TIOCSISO7816(0xffffffffffffffff, 0xc0285443, &(0x7f0000000000)={0x7, 0x1, 0xffff, 0x1, 0xba8ca294}) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) 05:25:33 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r2, 0xd000943d, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r2, 0xd0009411, &(0x7f0000000240)={{0x0, 0x6, 0x4, 0x7, 0x5, 0x5, 0xffffffffffff0001, 0xff, 0x101, 0x101, 0x0, 0x0, 0x5e4, 0x800000000000, 0x6}}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000080), 0xfffffffffffffe2a) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000)='l2tp\x00', r0) 05:25:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xc00, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 1: syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001540)={0x4c, 0x10, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x700, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:33 executing program 2: openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0) r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) 05:25:33 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) r3 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x5, 0x44800) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r4, 0xd000943d, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r4) socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) 05:25:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xd00, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x900, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', r0) sendmsg$L2TP_CMD_SESSION_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x78, r1, 0x100, 0x70bd28, 0x25dfdbfa, {}, [@L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x1}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x3f}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond_slave_0\x00'}, @L2TP_ATTR_FD={0x8, 0x17, @l2tp6}, @L2TP_ATTR_UDP_ZERO_CSUM6_TX={0x5, 0x21, 0x1}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x3}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x78}, 0x1, 0x0, 0x0, 0x844}, 0x8080) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) 05:25:33 executing program 5: getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:25:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xa00, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xe00, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) [ 432.681442][T24775] binder: 24771:24775 ioctl c0306201 0 returned -14 05:25:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:33 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) clock_gettime(0x0, &(0x7f0000000840)={0x0, 0x0}) recvmmsg(r0, &(0x7f00000007c0)=[{{&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000080)=""/105, 0x69}, {&(0x7f0000000100)=""/3, 0x3}, {&(0x7f0000000140)=""/21, 0x15}, {&(0x7f0000000180)=""/72, 0x48}, {&(0x7f0000000980)=""/27, 0x1b}, {&(0x7f0000000240)=""/194, 0xc2}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000000380)=""/40, 0x28}], 0x8, &(0x7f0000000440)=""/123, 0x7b}, 0x5}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000004c0)=""/165, 0xa5}, {&(0x7f0000000580)=""/51, 0x33}, {&(0x7f00000005c0)=""/99, 0x63}, {&(0x7f0000000640)=""/160, 0xa0}], 0x4, &(0x7f0000000740)=""/119, 0x77}, 0x58e}], 0x2, 0x40000020, &(0x7f0000000880)={r1, r2+60000000}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000900)={0xffffffffffffff32, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r4}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e24}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x28}}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast2}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x81}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private0}, @L2TP_ATTR_PROTO_VERSION={0x0, 0x7, 0x2}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x2000c004}, 0x4000840) 05:25:33 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000005a40)={0x0, 0x0, &(0x7f0000005a00)={0x0, 0x8c}}, 0x0) sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xfff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x8000000) 05:25:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x8, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0xb}, @jmp={0x5, 0x0, 0xa, 0x6, 0xa, 0x4}, @exit, @alu={0x4, 0x1, 0xc, 0x6, 0x8, 0xfffffffffffffff4, 0xffffffffffffffff}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x1100, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xb00, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 432.814318][T24794] binder: 24789:24794 ioctl c0306201 0 returned -14 05:25:33 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000001600)='/dev/cuse\x00', 0x2, 0x0) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000001480)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000080)=""/90, 0x5a}, {&(0x7f0000000100)=""/111, 0x6f}, {&(0x7f0000000180)=""/91, 0x5b}, {&(0x7f0000000200)=""/216, 0xd8}, {&(0x7f0000000300)=""/73, 0x49}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/44, 0x2c}], 0x7, &(0x7f0000001440)=""/16, 0x10}, 0x550dbb9594ba816e) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000016c0)={r2, &(0x7f0000001640), &(0x7f0000001680)=""/14}, 0x20) getsockopt$nfc_llcp(r1, 0x118, 0x3, &(0x7f00000014c0)=""/183, 0xb7) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000001580), &(0x7f00000015c0)=0x4) 05:25:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 05:25:33 executing program 5: socketpair(0x25, 0x8000c, 0x3ff, &(0x7f0000001a80)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) 05:25:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x1200, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xc00, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x7, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0xb}, @jmp={0x5, 0x0, 0xa, 0x6, 0xa, 0x4}, @exit], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:33 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) socket$inet6_sctp(0xa, 0x1, 0x84) syz_open_dev$tty1(0xc, 0x4, 0x3) timer_create(0x0, &(0x7f0000000000)={0x0, 0xc}, &(0x7f0000000040)) syz_open_dev$ttys(0xc, 0x2, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2) 05:25:33 executing program 5: socketpair(0x2c, 0x6, 0x8, &(0x7f0000000000)) 05:25:33 executing program 2: sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'bond0\x00'}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000000}, 0x4010) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) 05:25:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0}) [ 432.947156][T24812] binder: 24807:24812 ioctl c0306201 0 returned -14 05:25:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xd00, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x2500, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x6, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0xb}, @jmp={0x5, 0x0, 0xa, 0x6, 0xa, 0x4}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:33 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) socket$phonet_pipe(0x23, 0x5, 0x2) 05:25:33 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) r1 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, 0xffffffffffffffff) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x8000) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0xa8, 0x0, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2}, @NBD_ATTR_SOCKETS={0x2c, 0x7, 0x0, 0x1, [{0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r0}, {0x8, 0x1, r0}]}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x101}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x63e4}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xab}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x5}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x4000800}, 0x50011) 05:25:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0}) 05:25:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x5c00, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xe00, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x5, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}, @map={0x18, 0xb}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:33 executing program 5: mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x80000, &(0x7f0000002180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRESOCT=0x0, @ANYBLOB="2c77660000c238", @ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="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"]) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) socket$inet_udp(0x2, 0x2, 0x0) write$FUSE_POLL(r0, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2a93dca0}}, 0x8) 05:25:33 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) sendto$isdn(0xffffffffffffffff, &(0x7f0000000000)={0x9, 0x9, "9e416689aae8b94bb3af6886a6835e8407cf9633f351b455c3869252abd3d535fd441cef5553686613ada860dbb3c40416476f95d5315d5acb048adfd3984115a6e24f7baaf343d2eb198b87714ebc5763d68096bd57ad1adadff347451ecebf10dd7b90cfe377385548aac837ac5636e50033e0b24eb2ca7c00b00a2ae9ba9386df4f5dd06c17f66f96c91fff3fc226b67fde498ebe4d239918ffa7a6fe6a4f67214c679e15188921554b7f8e209743139e3d8bf6f24fc2958014a9f01794b749ffff"}, 0xcb, 0x8001, 0x0, 0x0) 05:25:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x1100, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0}) 05:25:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xff00, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x1200, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 2: sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00087000f07bf48f6ff2db8c0b236b61ff000000000000000000000c000f00010001000000000008000a000300000006001a0031210000080011000d00000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 05:25:33 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x10, &(0x7f00000013c0), 0x0, 0x0, 0x0}) 05:25:33 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x3, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x6}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:33 executing program 5: socketpair(0x11, 0x80000, 0xd1c3, &(0x7f0000001a80)) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000240)={'syztnl2\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x1, 0x700, 0x1f, 0x40, {{0x18, 0x4, 0x1, 0x31, 0x60, 0x67, 0x0, 0x7, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, {[@cipso={0x86, 0x4a, 0x3, [{0x6, 0x2}, {0x5, 0x6, "7e64b1ae"}, {0x1, 0x9, "7fe2b42cf845e4"}, {0x5, 0x7, "522038048c"}, {0x5, 0x7, "1ec00a9198"}, {0x0, 0x4, "d9d9"}, {0x7, 0x2}, {0x0, 0x11, "3ee15cd8591b868989e37497628a25"}, {0x5, 0xe, "58376226ac21daf1ccbebf88"}]}]}}}}}) syz_usb_connect$cdc_ncm(0x2, 0x70, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x2, 0x1, 0xdf, 0xc0, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "a120"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x4, 0x8, 0x401, 0x8}, {0x6, 0x24, 0x1a, 0x0, 0x11}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x9, 0x1}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200, 0x6, 0x3c, 0x2}}, {{0x9, 0x5, 0x3, 0x2, 0x38, 0x0, 0x5, 0x1}}}}}}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000080)={0xa, 0x6, 0x300, 0x2, 0x4, 0x0, 0x20, 0x2}, 0x5, &(0x7f00000000c0)={0x5, 0xf, 0x5}, 0x7, [{0xfb, &(0x7f0000000300)=@string={0xfb, 0x3, "db715acd9e9f063be2e4f24d24fac0927144a18c4374857fc0cf6a7e5081ab3f4301bd6c9446cfa4a9e03ebf63e08d5d8e10700e924800ee6cb21fd93715a0169c4b767402b63497a792c340f2e04382bcbed3881a4794b07df34b93aebbfea940115cc39ad2268d90f7441e55a5a34a4ab9748d5bb76811091bdf295e85b2801e85a75bfe2d5345ac43da43934b54e120c22a632c364d1ce2f50be57a1f65fc33f42aec04c86afba2be976f3146f63e3096501a3e87653e6e565ffc2b5e4e1f00dad7ae86a294f9e38fba73a667f18f221d527bd6939736afde3b9966ecea9d7b9d407daf6c4db9df284535cf43122d46526c9d3ab8013728"}}, {0x4, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000140)=@lang_id={0x4, 0x3, 0x443}}, {0x4f, &(0x7f0000000400)=@string={0x4f, 0x3, "c1d6433238d78cfbca912fc54c2815d3b1b00cadd0fcba2f72941483ec1381a79143d80d7dd3b16a0cad1354f53bcefec56ddfd2d6e3f72afe85a655867bcb898e1de2cb8db2712fa727449784"}}, {0x4, &(0x7f0000000180)=@lang_id={0x4}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x813}}]}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000700), &(0x7f0000000740)=0x14) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x20, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x4c050) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000580)={'erspan0\x00', r1, 0x7, 0x8000, 0x58, 0x9, {{0x6, 0x4, 0x0, 0x7, 0x18, 0x64, 0x0, 0x83, 0x29, 0x0, @private=0xa010101, @multicast2, {[@noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000002c0)={'syztnl1\x00', &(0x7f0000000280)={'gre0\x00', r1, 0x40, 0x8, 0x1, 0x101, {{0x8, 0x4, 0x0, 0x1c, 0x20, 0x67, 0x0, 0x3, 0x29, 0x0, @private=0xa010102, @multicast1, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x7, 0x45, [@dev={0xac, 0x14, 0x14, 0x2e}]}]}}}}}) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, 0x0, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80010}, 0x20000000) 05:25:33 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f00000001c0)={[], 0x96, 0x1000, 0x41598eab, 0x3, 0x8}) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800100a2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082abd7000fedbdf25050000000c00060000000000000000000c00060002000000000000000c00050002000000000000000c00060000000000000000000c00030005000000000000002400078008000100", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB], 0x74}, 0x1, 0x0, 0x0, 0x40100}, 0x45) 05:25:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x2500, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xfeffff, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:34 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x1, &(0x7f0000000000)=@raw=[@generic={0x0, 0x4, 0x6, 0x7c00, 0x4}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) [ 433.328225][ T3299] ieee802154 phy0 wpan0: encryption failed: -22 [ 433.334516][ T3299] ieee802154 phy1 wpan1: encryption failed: -22 05:25:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x10, &(0x7f00000013c0), 0x0, 0x0, 0x0}) 05:25:34 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8000, @mcast2, 0x3ff, 0x4}, 0x20) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x4, 0x3, 0x7, 0x8, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r4, &(0x7f0000000240)="d6f543b74050494204daf54c6ba9f161c64b984ad227d92266e2f71f61f43e4fec563195d203cf154e2b866cb62683c744a7fcc37cd64df6425c667795599a0da037770fb312c8f994510cf97f02b1cb013e8fe4151c8fae3e03e64bde6d53edcb84aa3433f0d0b6b027042199e85bf7f8b97cb048193939f80a053e37d3fc00e735fca82b164a31a7acfd9ab9adf89217769fbe9ec2fd332c7e87d5e2b39f0ca3f654e9be829cc872a4756f"}, 0x20) r5 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x2280) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000480)={&(0x7f0000000300)="9b9ed19667515938a09f2d0ec0ba4e35b01cdaa90d3ef5465188399e0cb3a0a50ba041b951b51647a8a867afd816b14c664d75b751eadd06aff53d2fc3a1872ce4759e74", &(0x7f00000001c0)=""/36, &(0x7f0000000380)="75a0196737bfc9ff94b661c755f0ee1ac1e88a328b204238940473b532decb8de28dcf8d2a9a98cbb548a514510eaac24957bc79db5f34d13798b79eda478c967e5bb675dc9323dcb26c898096fbdc60e7bfe64d043d63d239b7a9971191c52a610caee3450837edff2fc5236a522882dbbba177c3136b8c81aca3e18111b2518e8fb73dd168a293410b0ed98741ffbf972afddc01154d09d1069fdc3cb1b0c5c0182269ac84ae8a044f359f295f55c8b010370026745c664aef65b3fb90f698e8e91a35e135be9852ac0e52b98cc5fd", &(0x7f0000000580)="34a5bddb08dab65644b84d601109351242bf7907b8fbb70978cba616413cfd92d1159a341387b11f382ce304cef4a2f1f46630893e87c85758daac03e92d66f106af920a29d769e1e3fac73269ca44eec7182757d030344e73e7853be383dd971b7eef538c0795d632f3c6baa26da652ff515553fb1266e679dcc18732c48371192a3d8c06d69488b6eb43d1d2a39fff379747413dc885225288735811c3acdfd5bc676e19e51e90b961ba3f7fb3718da446d9629612ee62c96548555a4e510c8e8ac8abfef9b8a067", 0x0, r4}, 0x38) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000000c0), 0x2) 05:25:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x1000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:34 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x0, &(0x7f0000000000), &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x5c00, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:34 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x0, 0x10, &(0x7f00000013c0), 0x0, 0x0, 0x0}) 05:25:34 executing program 2: socketpair(0x4, 0x2, 0x9, &(0x7f0000001a80)) [ 433.678022][ T8637] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 434.108027][ T8637] usb 6-1: not running at top speed; connect to a high speed hub [ 434.198045][ T8637] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 434.388409][ T8637] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 434.397460][ T8637] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.406117][ T8637] usb 6-1: Product: у [ 434.410556][ T8637] usb 6-1: Manufacturer: ࠄ [ 434.415134][ T8637] usb 6-1: SerialNumber: 훁㉃휸ﮌ释씯⡌팕낱괌ﳐ⾺鑲茔Ꮼꞁ䎑ෘ퍽檱괌吓㯵ﻎ淅틟⫷藾喦箆觋ᶎ쯢늍⽱➧靄 [ 434.748048][ T8637] cdc_ncm 6-1:1.0: bind() failure [ 434.756411][ T8637] cdc_ncm 6-1:1.1: bind() failure [ 434.764633][ T8637] usb 6-1: USB disconnect, device number 14 [ 435.437956][ T34] usb 6-1: new full-speed USB device number 15 using dummy_hcd [ 435.837991][ T34] usb 6-1: not running at top speed; connect to a high speed hub [ 435.928264][ T34] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 436.098382][ T34] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 436.107612][ T34] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.117620][ T34] usb 6-1: Product: у [ 436.122826][ T34] usb 6-1: Manufacturer: ࠄ [ 436.127400][ T34] usb 6-1: SerialNumber: 훁㉃휸ﮌ释씯⡌팕낱괌ﳐ⾺鑲茔Ꮼꞁ䎑ෘ퍽檱괌吓㯵ﻎ淅틟⫷藾喦箆觋ᶎ쯢늍⽱➧靄 05:25:36 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x7) 05:25:36 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x0, &(0x7f0000000000), &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x2000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xfeffff, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:36 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8000, @mcast2, 0x3ff, 0x4}, 0x20) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x4, 0x3, 0x7, 0x8, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r4, &(0x7f0000000240)="d6f543b74050494204daf54c6ba9f161c64b984ad227d92266e2f71f61f43e4fec563195d203cf154e2b866cb62683c744a7fcc37cd64df6425c667795599a0da037770fb312c8f994510cf97f02b1cb013e8fe4151c8fae3e03e64bde6d53edcb84aa3433f0d0b6b027042199e85bf7f8b97cb048193939f80a053e37d3fc00e735fca82b164a31a7acfd9ab9adf89217769fbe9ec2fd332c7e87d5e2b39f0ca3f654e9be829cc872a4756f"}, 0x20) r5 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x2280) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000480)={&(0x7f0000000300)="9b9ed19667515938a09f2d0ec0ba4e35b01cdaa90d3ef5465188399e0cb3a0a50ba041b951b51647a8a867afd816b14c664d75b751eadd06aff53d2fc3a1872ce4759e74", &(0x7f00000001c0)=""/36, &(0x7f0000000380)="75a0196737bfc9ff94b661c755f0ee1ac1e88a328b204238940473b532decb8de28dcf8d2a9a98cbb548a514510eaac24957bc79db5f34d13798b79eda478c967e5bb675dc9323dcb26c898096fbdc60e7bfe64d043d63d239b7a9971191c52a610caee3450837edff2fc5236a522882dbbba177c3136b8c81aca3e18111b2518e8fb73dd168a293410b0ed98741ffbf972afddc01154d09d1069fdc3cb1b0c5c0182269ac84ae8a044f359f295f55c8b010370026745c664aef65b3fb90f698e8e91a35e135be9852ac0e52b98cc5fd", &(0x7f0000000580)="34a5bddb08dab65644b84d601109351242bf7907b8fbb70978cba616413cfd92d1159a341387b11f382ce304cef4a2f1f46630893e87c85758daac03e92d66f106af920a29d769e1e3fac73269ca44eec7182757d030344e73e7853be383dd971b7eef538c0795d632f3c6baa26da652ff515553fb1266e679dcc18732c48371192a3d8c06d69488b6eb43d1d2a39fff379747413dc885225288735811c3acdfd5bc676e19e51e90b961ba3f7fb3718da446d9629612ee62c96548555a4e510c8e8ac8abfef9b8a067", 0x0, r4}, 0x38) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000000c0), 0x2) 05:25:36 executing program 2: socketpair(0x28, 0x2, 0x7fff, &(0x7f0000001a80)) 05:25:37 executing program 2: socketpair(0xb, 0x5, 0x5, &(0x7f0000000000)) 05:25:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x0, &(0x7f0000000000), &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x3000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x1000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:37 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) clock_gettime(0x0, &(0x7f0000001400)={0x0, 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000001500)='l2tp\x00', r3) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [], 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x40) recvmmsg(r0, &(0x7f00000012c0)=[{{&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/36, 0x24}], 0x1, &(0x7f0000000100)=""/239, 0xef}, 0x6}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000200)=""/66, 0x42}, {&(0x7f0000000280)=""/109, 0x6d}, {&(0x7f0000000300)=""/205, 0xcd}], 0x3, &(0x7f0000000440)=""/231, 0xe7}, 0x9}, {{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000000880)=[{&(0x7f00000005c0)=""/2, 0x2}, {&(0x7f0000000600)=""/181, 0xb5}, {&(0x7f00000006c0)=""/128, 0x80}, {&(0x7f0000000740)=""/11, 0xb}, {&(0x7f0000000780)=""/6, 0x6}, {&(0x7f00000007c0)=""/178, 0xb2}], 0x6, &(0x7f0000000900)=""/30, 0x1e}, 0xf08b}, {{0x0, 0x0, &(0x7f0000000d80)=[{&(0x7f0000000940)=""/251, 0xfb}, {&(0x7f0000001580)=""/182, 0xb6}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000000b00)=""/222, 0xde}, {&(0x7f0000002ac0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/76, 0x4c}, {&(0x7f0000000c80)=""/210, 0xd2}], 0x7, &(0x7f0000003ac0)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000000e00)=@can, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000e80)=""/249, 0xf9}, {&(0x7f0000000f80)=""/178, 0xb2}, {&(0x7f0000001040)=""/161, 0xa1}, {&(0x7f0000001100)=""/23, 0x17}, {&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000001140)=""/80, 0x50}, {&(0x7f0000005ac0)=""/4096, 0x1000}], 0x7, &(0x7f0000000a40)=""/118, 0x76}, 0x2}], 0x5, 0x2000, &(0x7f0000001440)={r1, r2+60000000}) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) ioctl$LOOP_CLR_FD(r4, 0x4c01) timerfd_settime(r4, 0x0, &(0x7f0000001480)={{0x77359400}, {0x77359400}}, &(0x7f00000014c0)) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000001540)=0x4, 0x4) 05:25:37 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8000, @mcast2, 0x3ff, 0x4}, 0x20) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x4, 0x3, 0x7, 0x8, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r4, &(0x7f0000000240)="d6f543b74050494204daf54c6ba9f161c64b984ad227d92266e2f71f61f43e4fec563195d203cf154e2b866cb62683c744a7fcc37cd64df6425c667795599a0da037770fb312c8f994510cf97f02b1cb013e8fe4151c8fae3e03e64bde6d53edcb84aa3433f0d0b6b027042199e85bf7f8b97cb048193939f80a053e37d3fc00e735fca82b164a31a7acfd9ab9adf89217769fbe9ec2fd332c7e87d5e2b39f0ca3f654e9be829cc872a4756f"}, 0x20) r5 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x2280) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000480)={&(0x7f0000000300)="9b9ed19667515938a09f2d0ec0ba4e35b01cdaa90d3ef5465188399e0cb3a0a50ba041b951b51647a8a867afd816b14c664d75b751eadd06aff53d2fc3a1872ce4759e74", &(0x7f00000001c0)=""/36, &(0x7f0000000380)="75a0196737bfc9ff94b661c755f0ee1ac1e88a328b204238940473b532decb8de28dcf8d2a9a98cbb548a514510eaac24957bc79db5f34d13798b79eda478c967e5bb675dc9323dcb26c898096fbdc60e7bfe64d043d63d239b7a9971191c52a610caee3450837edff2fc5236a522882dbbba177c3136b8c81aca3e18111b2518e8fb73dd168a293410b0ed98741ffbf972afddc01154d09d1069fdc3cb1b0c5c0182269ac84ae8a044f359f295f55c8b010370026745c664aef65b3fb90f698e8e91a35e135be9852ac0e52b98cc5fd", &(0x7f0000000580)="34a5bddb08dab65644b84d601109351242bf7907b8fbb70978cba616413cfd92d1159a341387b11f382ce304cef4a2f1f46630893e87c85758daac03e92d66f106af920a29d769e1e3fac73269ca44eec7182757d030344e73e7853be383dd971b7eef538c0795d632f3c6baa26da652ff515553fb1266e679dcc18732c48371192a3d8c06d69488b6eb43d1d2a39fff379747413dc885225288735811c3acdfd5bc676e19e51e90b961ba3f7fb3718da446d9629612ee62c96548555a4e510c8e8ac8abfef9b8a067", 0x0, r4}, 0x38) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000000c0), 0x2) [ 436.397913][ T34] cdc_ncm 6-1:1.0: bind() failure [ 436.417234][ T34] cdc_ncm 6-1:1.1: bind() failure 05:25:37 executing program 2: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f0000000140)={0x2020}, 0x2020) write$FUSE_POLL(r0, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x364}}, 0x18) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) 05:25:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x1, &(0x7f0000000000)=@raw=[@generic={0x0, 0x0, 0x6, 0x7c00, 0x4}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x4000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 436.459332][ T34] usb 6-1: USB disconnect, device number 15 05:25:37 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8000, @mcast2, 0x3ff, 0x4}, 0x20) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x4, 0x3, 0x7, 0x8, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) r4 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r4, &(0x7f0000000240)="d6f543b74050494204daf54c6ba9f161c64b984ad227d92266e2f71f61f43e4fec563195d203cf154e2b866cb62683c744a7fcc37cd64df6425c667795599a0da037770fb312c8f994510cf97f02b1cb013e8fe4151c8fae3e03e64bde6d53edcb84aa3433f0d0b6b027042199e85bf7f8b97cb048193939f80a053e37d3fc00e735fca82b164a31a7acfd9ab9adf89217769fbe9ec2fd332c7e87d5e2b39f0ca3f654e9be829cc872a4756f"}, 0x20) r5 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x2280) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000480)={&(0x7f0000000300)="9b9ed19667515938a09f2d0ec0ba4e35b01cdaa90d3ef5465188399e0cb3a0a50ba041b951b51647a8a867afd816b14c664d75b751eadd06aff53d2fc3a1872ce4759e74", &(0x7f00000001c0)=""/36, &(0x7f0000000380)="75a0196737bfc9ff94b661c755f0ee1ac1e88a328b204238940473b532decb8de28dcf8d2a9a98cbb548a514510eaac24957bc79db5f34d13798b79eda478c967e5bb675dc9323dcb26c898096fbdc60e7bfe64d043d63d239b7a9971191c52a610caee3450837edff2fc5236a522882dbbba177c3136b8c81aca3e18111b2518e8fb73dd168a293410b0ed98741ffbf972afddc01154d09d1069fdc3cb1b0c5c0182269ac84ae8a044f359f295f55c8b010370026745c664aef65b3fb90f698e8e91a35e135be9852ac0e52b98cc5fd", &(0x7f0000000580)="34a5bddb08dab65644b84d601109351242bf7907b8fbb70978cba616413cfd92d1159a341387b11f382ce304cef4a2f1f46630893e87c85758daac03e92d66f106af920a29d769e1e3fac73269ca44eec7182757d030344e73e7853be383dd971b7eef538c0795d632f3c6baa26da652ff515553fb1266e679dcc18732c48371192a3d8c06d69488b6eb43d1d2a39fff379747413dc885225288735811c3acdfd5bc676e19e51e90b961ba3f7fb3718da446d9629612ee62c96548555a4e510c8e8ac8abfef9b8a067", 0x0, r4}, 0x38) ioctl$LOOP_CHANGE_FD(r5, 0x4c06, 0xffffffffffffffff) write$USERIO_CMD_SET_PORT_TYPE(r3, &(0x7f00000000c0), 0x2) 05:25:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x2000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x1, &(0x7f0000000000)=@raw=[@generic={0x0, 0x0, 0x0, 0x7c00, 0x4}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x5000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:37 executing program 2: socketpair(0x9, 0x4, 0x0, &(0x7f0000000040)) 05:25:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x3000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:37 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8000, @mcast2, 0x3ff, 0x4}, 0x20) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x4, 0x3, 0x7, 0x8, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f0000000240)="d6f543b74050494204daf54c6ba9f161c64b984ad227d92266e2f71f61f43e4fec563195d203cf154e2b866cb62683c744a7fcc37cd64df6425c667795599a0da037770fb312c8f994510cf97f02b1cb013e8fe4151c8fae3e03e64bde6d53edcb84aa3433f0d0b6b027042199e85bf7f8b97cb048193939f80a053e37d3fc00e735fca82b164a31a7acfd9ab9adf89217769fbe9ec2fd332c7e87d5e2b39f0ca3f654e9be829cc872a4756f"}, 0x20) r4 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x2280) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000480)={&(0x7f0000000300)="9b9ed19667515938a09f2d0ec0ba4e35b01cdaa90d3ef5465188399e0cb3a0a50ba041b951b51647a8a867afd816b14c664d75b751eadd06aff53d2fc3a1872ce4759e74", &(0x7f00000001c0)=""/36, &(0x7f0000000380)="75a0196737bfc9ff94b661c755f0ee1ac1e88a328b204238940473b532decb8de28dcf8d2a9a98cbb548a514510eaac24957bc79db5f34d13798b79eda478c967e5bb675dc9323dcb26c898096fbdc60e7bfe64d043d63d239b7a9971191c52a610caee3450837edff2fc5236a522882dbbba177c3136b8c81aca3e18111b2518e8fb73dd168a293410b0ed98741ffbf972afddc01154d09d1069fdc3cb1b0c5c0182269ac84ae8a044f359f295f55c8b010370026745c664aef65b3fb90f698e8e91a35e135be9852ac0e52b98cc5fd", &(0x7f0000000580)="34a5bddb08dab65644b84d601109351242bf7907b8fbb70978cba616413cfd92d1159a341387b11f382ce304cef4a2f1f46630893e87c85758daac03e92d66f106af920a29d769e1e3fac73269ca44eec7182757d030344e73e7853be383dd971b7eef538c0795d632f3c6baa26da652ff515553fb1266e679dcc18732c48371192a3d8c06d69488b6eb43d1d2a39fff379747413dc885225288735811c3acdfd5bc676e19e51e90b961ba3f7fb3718da446d9629612ee62c96548555a4e510c8e8ac8abfef9b8a067", 0x0, r3}, 0x38) ioctl$LOOP_CHANGE_FD(r4, 0x4c06, 0xffffffffffffffff) 05:25:37 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x300, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x814) socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) 05:25:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x4000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:37 executing program 2: socketpair(0x8, 0x2, 0x0, &(0x7f0000001a80)) 05:25:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x6000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:37 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x1, &(0x7f0000000000)=@raw=[@generic={0x0, 0x0, 0x0, 0x0, 0x4}], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:37 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8000, @mcast2, 0x3ff, 0x4}, 0x20) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x4, 0x3, 0x7, 0x8, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f0000000240)="d6f543b74050494204daf54c6ba9f161c64b984ad227d92266e2f71f61f43e4fec563195d203cf154e2b866cb62683c744a7fcc37cd64df6425c667795599a0da037770fb312c8f994510cf97f02b1cb013e8fe4151c8fae3e03e64bde6d53edcb84aa3433f0d0b6b027042199e85bf7f8b97cb048193939f80a053e37d3fc00e735fca82b164a31a7acfd9ab9adf89217769fbe9ec2fd332c7e87d5e2b39f0ca3f654e9be829cc872a4756f"}, 0x20) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x2280) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000480)={&(0x7f0000000300)="9b9ed19667515938a09f2d0ec0ba4e35b01cdaa90d3ef5465188399e0cb3a0a50ba041b951b51647a8a867afd816b14c664d75b751eadd06aff53d2fc3a1872ce4759e74", &(0x7f00000001c0)=""/36, &(0x7f0000000380)="75a0196737bfc9ff94b661c755f0ee1ac1e88a328b204238940473b532decb8de28dcf8d2a9a98cbb548a514510eaac24957bc79db5f34d13798b79eda478c967e5bb675dc9323dcb26c898096fbdc60e7bfe64d043d63d239b7a9971191c52a610caee3450837edff2fc5236a522882dbbba177c3136b8c81aca3e18111b2518e8fb73dd168a293410b0ed98741ffbf972afddc01154d09d1069fdc3cb1b0c5c0182269ac84ae8a044f359f295f55c8b010370026745c664aef65b3fb90f698e8e91a35e135be9852ac0e52b98cc5fd", &(0x7f0000000580)="34a5bddb08dab65644b84d601109351242bf7907b8fbb70978cba616413cfd92d1159a341387b11f382ce304cef4a2f1f46630893e87c85758daac03e92d66f106af920a29d769e1e3fac73269ca44eec7182757d030344e73e7853be383dd971b7eef538c0795d632f3c6baa26da652ff515553fb1266e679dcc18732c48371192a3d8c06d69488b6eb43d1d2a39fff379747413dc885225288735811c3acdfd5bc676e19e51e90b961ba3f7fb3718da446d9629612ee62c96548555a4e510c8e8ac8abfef9b8a067", 0x0, r3}, 0x38) 05:25:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x7000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 5: socketpair(0x2c, 0x3, 0x0, &(0x7f0000001a80)) socketpair(0x27, 0xa, 0xffff, &(0x7f0000000000)) 05:25:38 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@L2TP_ATTR_MTU={0x6, 0x1c, 0x5}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @mcast2}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x2}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x58}}, 0x14) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8810}, 0x20000045) 05:25:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x5000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000080)='GPL\x00', 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:38 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8000, @mcast2, 0x3ff, 0x4}, 0x20) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x4, 0x3, 0x7, 0x8, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f0000000240)="d6f543b74050494204daf54c6ba9f161c64b984ad227d92266e2f71f61f43e4fec563195d203cf154e2b866cb62683c744a7fcc37cd64df6425c667795599a0da037770fb312c8f994510cf97f02b1cb013e8fe4151c8fae3e03e64bde6d53edcb84aa3433f0d0b6b027042199e85bf7f8b97cb048193939f80a053e37d3fc00e735fca82b164a31a7acfd9ab9adf89217769fbe9ec2fd332c7e87d5e2b39f0ca3f654e9be829cc872a4756f"}, 0x20) syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x7, 0x2280) 05:25:38 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0xffffffffffffd404, 0x40840) setsockopt$PNPIPE_ENCAP(r0, 0x113, 0x1, &(0x7f0000000000), 0x4) 05:25:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x6000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x8000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x1, &(0x7f0000000000)=@raw=[@generic], 0x0, 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:38 executing program 5: socketpair(0x23, 0x80000, 0x0, &(0x7f0000001a80)) 05:25:38 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8000, @mcast2, 0x3ff, 0x4}, 0x20) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x4, 0x3, 0x7, 0x8, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r3, &(0x7f0000000240)="d6f543b74050494204daf54c6ba9f161c64b984ad227d92266e2f71f61f43e4fec563195d203cf154e2b866cb62683c744a7fcc37cd64df6425c667795599a0da037770fb312c8f994510cf97f02b1cb013e8fe4151c8fae3e03e64bde6d53edcb84aa3433f0d0b6b027042199e85bf7f8b97cb048193939f80a053e37d3fc00e735fca82b164a31a7acfd9ab9adf89217769fbe9ec2fd332c7e87d5e2b39f0ca3f654e9be829cc872a4756f"}, 0x20) 05:25:38 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) accept$nfc_llcp(r0, &(0x7f0000000000), &(0x7f0000000080)=0x60) 05:25:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x1, &(0x7f0000000000)=@raw=[@generic], 0x0, 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x9000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x7000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8000, @mcast2, 0x3ff, 0x4}, 0x20) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x4, 0x3, 0x7, 0x8, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, 0xffffffffffffffff) 05:25:38 executing program 5: getsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:25:38 executing program 2: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/userio\x00', 0x14002, 0x0) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000040)={0x0, 0x6}, 0x2) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) 05:25:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x1, &(0x7f0000000000)=@raw=[@generic], 0x0, 0x7, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xa000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x8000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 5: socketpair(0x2c, 0xa, 0x4, &(0x7f0000001a80)) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) 05:25:38 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8000, @mcast2, 0x3ff, 0x4}, 0x20) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x4, 0x3, 0x7, 0x8, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) 05:25:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000080)='GPL\x00', 0x0, 0xd, &(0x7f00000000c0)=""/13, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:38 executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmsg(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/11, 0xb}], 0x1}, 0x0) socketpair(0x22, 0x2, 0x5, &(0x7f0000001a80)) 05:25:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xb000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 5: socketpair(0x1e, 0x5, 0x9c41, &(0x7f0000000000)) 05:25:38 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8000, @mcast2, 0x3ff, 0x4}, 0x20) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x4, 0x3, 0x7, 0x8, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) 05:25:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x9000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:38 executing program 2: socketpair(0x2b, 0x4, 0x20, &(0x7f0000000000)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) 05:25:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xc000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xa000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000003c40)=[{{&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/213, 0xd5}, {&(0x7f0000000180)=""/159, 0x9f}, {&(0x7f0000000240)=""/178, 0xb2}, {&(0x7f0000000300)=""/14, 0xe}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/21, 0x15}, {&(0x7f00000003c0)=""/40, 0x28}, {&(0x7f0000000400)=""/163, 0xa3}], 0x8, &(0x7f0000000540)=""/4096, 0x1000}, 0x7}, {{&(0x7f0000001540)=@alg, 0x80, &(0x7f0000002ac0)=[{&(0x7f00000015c0)=""/109, 0x6d}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000001640)}, {&(0x7f0000001680)=""/209, 0xd1}, {&(0x7f0000001780)=""/156, 0x9c}, {&(0x7f0000001840)=""/235, 0xeb}, {&(0x7f0000001940)=""/31, 0x1f}, {&(0x7f0000001980)=""/215, 0xd7}], 0x8, &(0x7f0000002b40)=""/242, 0xf2}, 0x92f7}, {{&(0x7f0000002c40)=@qipcrtr, 0x80, &(0x7f0000003140)=[{&(0x7f0000002cc0)=""/3, 0x3}, {&(0x7f0000002d00)=""/167, 0xa7}, {&(0x7f0000002dc0)=""/1, 0x1}, {&(0x7f0000002e00)=""/10, 0xa}, {&(0x7f0000002e40)=""/193, 0xc1}, {&(0x7f0000002f40)=""/25, 0x19}, {&(0x7f0000002f80)=""/72, 0x48}, {&(0x7f0000003000)=""/32, 0x20}, {&(0x7f0000003040)=""/214, 0xd6}], 0x9, &(0x7f0000003200)=""/222, 0xde}, 0x6}, {{&(0x7f0000003300)=@nfc_llcp, 0x80, &(0x7f0000003640)=[{&(0x7f0000003380)=""/46, 0x2e}, {&(0x7f00000033c0)=""/131, 0x83}, {&(0x7f0000003480)=""/134, 0x86}, {&(0x7f0000003540)=""/119, 0x77}, {&(0x7f00000035c0)=""/98, 0x62}], 0x5}, 0x2}, {{&(0x7f00000036c0)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000003800)=[{&(0x7f0000003740)=""/138, 0x8a}], 0x1, &(0x7f0000003840)=""/157, 0x9d}, 0x9}, {{0x0, 0x0, &(0x7f0000003980)=[{&(0x7f0000003900)=""/57, 0x39}, {&(0x7f0000003940)}], 0x2, &(0x7f00000039c0)=""/14, 0xe}, 0x2}, {{&(0x7f0000003a00)=@in={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000003c00)=[{&(0x7f0000003a80)=""/147, 0x93}, {&(0x7f0000003b40)=""/186, 0xba}], 0x2}, 0x40}], 0x7, 0x40012100, &(0x7f0000003e00)={0x77359400}) bpf$MAP_CREATE(0x0, &(0x7f0000000340)={0x10, 0x100, 0x1, 0x60a9, 0x189, 0xffffffffffffffff, 0x7fff, [], 0x0, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x40) 05:25:38 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8000, @mcast2, 0x3ff, 0x4}, 0x20) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x4, 0x3, 0x7, 0x8, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) 05:25:38 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) read$FUSE(0xffffffffffffffff, &(0x7f0000001ac0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0x0, r1, {0x0, 0x10}}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xc, 0xb1f1, 0x6, 0xe4, 0x0, r0, 0x8001, [], 0x0, r0, 0x5, 0x4, 0x3}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x28, &(0x7f0000000100)}, 0x10) 05:25:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xd000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xb000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8000, @mcast2, 0x3ff, 0x4}, 0x20) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x4, 0x3, 0x7, 0x8, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) 05:25:38 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xffffffffffffffaf, 0x100) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x17, 0x5, 0x6e, 0x1000, 0x0, r1, 0xffff, [], 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x5}, 0x40) 05:25:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:38 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) recvmsg$can_j1939(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000000)=""/152, 0x98}, {&(0x7f00000000c0)=""/239, 0xef}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000200)=""/252, 0xfc}, {&(0x7f0000000300)=""/255, 0xff}], 0x5, &(0x7f0000000480)=""/53, 0x35}, 0x0) 05:25:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xe000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xc000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8000, @mcast2, 0x3ff, 0x4}, 0x20) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x4, 0x3, 0x7, 0x8, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) 05:25:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:38 executing program 5: ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000000)={0xffffffffffffffff, 0x1, 0x1000, 0x1000000}) socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) 05:25:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xd000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x2a}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x1) 05:25:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x10000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8000, @mcast2, 0x3ff, 0x4}, 0x20) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x4, 0x3, 0x7, 0x8, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000040)='./file0\x00', r1}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) 05:25:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000180)={0x5, 0x4, 0x8, 0x20}, 0x10, 0xffffffffffffffff}, 0x78) 05:25:38 executing program 2: r0 = accept$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sendmmsg$nfc_llcp(r0, &(0x7f0000002b40)=[{&(0x7f0000000300)={0x27, 0x0, 0x2, 0x1, 0x20, 0x6f, "075a318cd7fe31fdfcf582a1ec719c3dc0733160021c265069cb840f5ec01b029b11113590157a7dd9910e9a345c4457d90cbaa909f7d60f6136af93435e94", 0x1f}, 0x60, &(0x7f00000004c0)=[{&(0x7f0000000380)="a17b1cf3bf21acb9626e1224569013b35bb1f73a2f946655a44031c08b2089ecd7ae188a78def2a4825d57671afb3d090ae402ed2abba13d6e59d3828892c4e3ebf2190ab639f0cd6ffbc00c7bbe4a94a1df8656b33370b400a5a3fdb70e8a8014b57afad36a53eb2ed6468d225fc8ffa3b7c1939c74215b5adc8afc2fe5468534926b306f498507265dabfa070e9ac88468777add587453d37333ac08", 0x9d}, {&(0x7f0000000440)="6db03da5f90b0630093a530825b7996e66b0606b4e3b5d56fc4bc6cd8d33fb43c0c54ed34e9874bf7abe78cc4ce0cc2a7e745a2df6c9fff9ad5d8e38b82b915b9a1b9a6906178d80e3318433112a6dd0e361597613cac2e599234ea8cbf277abb3b4", 0x62}], 0x2, &(0x7f0000000500)={0x100, 0x3a, 0x9, "237290d770367ce23cfea247326f2567c98d4035bc4ee07a78018e34a515bc7bf0075543c56b72b789f26b7c5392fb76bcda8287428aa6d6cd716d0d3d92b42d7d0949b2c8658586d917e8886bf0b3d79e488982a49124dec80553f630842dc19ffdf27060535e7138a547c11ca0cd2aee739f25b1d0d3a52b32f82f6685fa0e315455c0305470b96494bfdc95a10287239913523f65d2b4933ac7f23728eab0969f2063c775bb131fa1c2d6f68b362be756c4fe6ab13453b3e2766c05f0e2c1fdb72240f1963a68708cf3d1647c15c35d5e816e4244e22fc5165a5c65d5c20f3cde18c23137f2dce2394c21"}, 0x100, 0x10}, {&(0x7f0000000600)={0x27, 0x0, 0x2, 0x3, 0x8, 0x81, "e32c1431a9ae433e1bc8989c3baa76274e5c37575ff2b0091708b27fa6cb152563999b9f782d6092e9428cb4c8ab09003917d8eb034cf2c230937034d01eca", 0x2d}, 0x60, &(0x7f0000000780)=[{&(0x7f0000000680)="81c78afafa80bcd3268b346c4684b6bca4b7ad77ab0afbd8325115bb039f29369b0b33f957a112dc8c75e29a8ccbb1ee17bff21d476ecae78d6187d48f7fe8105f4d1cc47899a9f299436894df6bf0ee377530aa549b5e9adf0ffe4e77086318eafe2b8a0d8692072555af0ebf016935d6284631498e7061dfc07097ea9ecc6b8baf8ce1c6f9e81f9c578299898d086d530972aa8f55682a43f90dec74a02aae2b5738452622d8962328dcca8d2f7e497eb55b86d961a064a0c050f73eff4fb3a3e9", 0xc2}, {0x0}], 0x2, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1010, 0x448d0}, {&(0x7f0000001800)={0x27, 0x0, 0x1, 0x6, 0xfe, 0x7, "8fb643bb615ae3aabef088e9ddf1449a9c2fed15034bbd42e75723e9c563053a43b2d34af9b29110429eb5b101874fa957c04b62216840c90e1ab9b823b042", 0x12}, 0x60, &(0x7f0000001ac0)=[{&(0x7f0000001880)="f75ea00ab8a17dd76d2fe479272504c2d804ca5a2e39222fa079a630453a4db85584e5b87d088fc05a47478a17488af0a0fed500b7c0bc94e62bea254cf1b0f609cbae", 0x43}, {&(0x7f0000001900)="e89a8b96f6d0022f21578ac3faa6523b437277ff001d288b73f8e6d03788bda737fe37d9615aa66755576ed907a5dc1d786cf2e93281e085577a4a9b6896e6abe0dcf597e74c5987b08fe654afaaee07d4548f982b7b41549ad36c9880f83859e0580045acf40dfaf0f4d10c6b9e29a8aeafa69e256c8143fc6d167a108144360ca55f838c", 0x85}, {&(0x7f00000019c0)}, {&(0x7f0000001a00)="4808372ae0ea7c069a3a2ef4a3162eee254c42f53618b2e21b197ecab63bf17e189a4c55856ba893500c911cd2292f042e88500a400166b53673fcb888405d65f78b7366957464e6836db9d849e76cf0210799509439", 0x56}], 0x4, &(0x7f0000001b00)={0x1010, 0x88, 0x2220, "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"}, 0x1010}], 0x3, 0x80) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040)='nbd\x00', 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000005a40)={0x0, 0x0, &(0x7f0000005a00)={0x0, 0x8c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000002d80)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002d40)={&(0x7f0000002d00)={0x14, r1, 0x2, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0xd1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, r1, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8}, {0x8, 0x1, r3}]}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffc00}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x189e}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x14}, 0x10) sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0xffffffffffffff85, r1, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x240440a5) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_STATUS(r4, &(0x7f0000005a40)={0x0, 0x0, &(0x7f0000005a00)={0x0, 0x8c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000002c80)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002c40)={&(0x7f0000002c00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="08002bbd7000fddbdf25010000000c000200ffffff7f00000004"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40850) 05:25:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x11000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040)='l2tp\x00', r0) getsockopt$nfc_llcp(0xffffffffffffffff, 0x118, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000004dc0)='/dev/ttyS3\x00', 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000009400)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000007940)={0xfffffffffffffffe}, 0x1, 0x0, 0x0, 0x4000010}, 0x40080) recvmmsg(r0, &(0x7f0000009140)=[{{&(0x7f0000000140)=@generic, 0x80, &(0x7f00000003c0), 0x3, &(0x7f0000000400)=""/4, 0x4}, 0x2}, {{&(0x7f0000000440)=@hci, 0x80, &(0x7f00000017c0)=[{&(0x7f00000004c0)}, {&(0x7f0000000500)=""/192, 0xc0}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/179, 0xfffffe23}, {&(0x7f0000001680)=""/157, 0x9d}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000001740)=""/97, 0x61}], 0x7}, 0x3e00000}, {{0x0, 0x0, &(0x7f0000003bc0)=[{&(0x7f0000001840)=""/173, 0xad}, {&(0x7f0000001900)=""/101, 0x65}, {&(0x7f0000001980)=""/9, 0x9}, {&(0x7f00000019c0)=""/42, 0x2a}, {&(0x7f0000001a00)=""/16, 0x10}, {&(0x7f0000002ac0)=""/249, 0xf9}, {&(0x7f0000002bc0)=""/4096, 0x1000}], 0x7, &(0x7f00000001c0)=""/88, 0x4a}}, {{&(0x7f0000003cc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000003dc0)=[{&(0x7f0000001a40)=""/61, 0x3d}, {&(0x7f0000003d40)=""/123, 0x7b}], 0x2, &(0x7f0000003e00)=""/39, 0x27}, 0x1}, {{&(0x7f0000003e40)=@ax25={{0x3, @netrom}, [@default, @remote, @remote, @default, @default, @netrom, @default, @default]}, 0x80, &(0x7f00000050c0)=[{&(0x7f0000003ec0)=""/85, 0x55}, {&(0x7f0000003f40)=""/238, 0xee}, {&(0x7f0000004040)=""/4096, 0x1000}, {&(0x7f0000005040)=""/126, 0x7e}], 0x4, &(0x7f0000005100)=""/150, 0x96}, 0x10000}, {{&(0x7f00000051c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000006500)=[{&(0x7f0000005240)=""/178, 0xb2}, {&(0x7f0000005300)=""/193, 0xc1}, {&(0x7f0000005400)=""/152, 0x98}, {&(0x7f00000054c0)=""/4096, 0x1000}, {&(0x7f00000064c0)=""/4, 0x4}], 0x5, &(0x7f0000006580)=""/58, 0x3a}, 0x7}, {{&(0x7f00000065c0)=@tipc, 0x80, &(0x7f0000007800)=[{&(0x7f0000006640)=""/4096, 0x1000}, {&(0x7f0000007640)=""/143, 0x8f}, {&(0x7f0000007700)=""/237, 0xed}], 0x3, &(0x7f0000007840)=""/65, 0x41}, 0xe295}, {{&(0x7f00000078c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007940), 0x0, &(0x7f0000007980)=""/180, 0xb4}, 0x100}, {{&(0x7f0000007a40)=@generic, 0x80, &(0x7f0000007c80)=[{&(0x7f0000007ac0)=""/179, 0xb3}, {&(0x7f0000007b80)=""/204, 0xcc}], 0x2, &(0x7f0000007cc0)=""/102, 0x66}, 0x7f}, {{&(0x7f0000007d40)=@ipx, 0x80, &(0x7f0000009000)=[{&(0x7f0000007dc0)=""/61, 0x3d}, {&(0x7f0000009440)=""/224, 0xe0}, {&(0x7f0000007f00)=""/4096, 0x1000}, {&(0x7f0000008f00)=""/210, 0xd2}], 0x4, &(0x7f0000009040)=""/206, 0xce}, 0x4}], 0xa, 0x20, &(0x7f00000093c0)={0x77359400}) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x4, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_FD={0x8, 0x17, @udp=r0}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x100}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0x34}}, 0x4004800) 05:25:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xe000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x17, 0x1, &(0x7f0000000000)=@raw=[@generic], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 05:25:38 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8000, @mcast2, 0x3ff, 0x4}, 0x20) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x8, 0x4, 0x3, 0x7, 0x8, 0x1, 0x3, [], 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x3}, 0x40) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) 05:25:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x12000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8000, @mcast2, 0x3ff, 0x4}, 0x20) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) 05:25:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x10000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:38 executing program 4: socketpair(0x2b, 0x4, 0x20, &(0x7f0000000000)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) 05:25:38 executing program 2: socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 05:25:38 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) r0 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0xc0c00) accept4$nfc_llcp(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x60, 0x800) 05:25:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140)='nbd\x00', 0xffffffffffffffff) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', r0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r1, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4800) getgroups(0x8, &(0x7f00000000c0)=[0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0xee01, 0xee00]) getgroups(0x5, &(0x7f0000000000)=[0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, r2]) socketpair(0x28, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) getsockopt$MISDN_TIME_STAMP(r3, 0x0, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040050}, 0x4) 05:25:39 executing program 4: socketpair(0x2b, 0x4, 0x20, &(0x7f0000000000)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) 05:25:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x25000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x11000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:39 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x8000, @mcast2, 0x3ff, 0x4}, 0x20) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) 05:25:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 05:25:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x12000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x5c000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:39 executing program 2: syz_extract_tcp_res(&(0x7f0000000000), 0x7ff, 0x9) socketpair(0x28, 0x0, 0x0, &(0x7f0000001a80)) 05:25:39 executing program 4: socketpair(0x2b, 0x4, 0x20, &(0x7f0000000000)) r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) 05:25:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) getgroups(0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0]) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='9p\x00', 0x426204a, &(0x7f00000000c0)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r1}}, {@privport='privport'}, {@cachetag={'cachetag'}}, {@version_9p2000='version=9p2000'}, {@cache_none='cache=none'}, {@cache_mmap='cache=mmap'}, {@access_uid={'access', 0x3d, 0xffffffffffffffff}}, {@version_u='version=9p2000.u'}, {@loose='loose'}]}}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x10) socketpair(0x2c, 0x0, 0x0, &(0x7f0000001a80)) 05:25:39 executing program 1: r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) 05:25:39 executing program 4: socketpair(0x2b, 0x4, 0x20, &(0x7f0000000000)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 05:25:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xfdfdffff, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x25000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:39 executing program 5: socketpair(0xa, 0x5, 0x0, &(0x7f0000001a80)) 05:25:39 executing program 1: openat$userio(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/userio\x00', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) 05:25:39 executing program 2: socketpair(0x18, 0xd, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', &(0x7f0000000000)={'gretap0\x00', 0x0, 0x8000, 0x1, 0x100, 0x0, {{0x16, 0x4, 0x0, 0x7, 0x80, 0x68, 0x0, 0x6d, 0x2f, 0x0, @private=0xa010102, @remote, {[@timestamp={0x44, 0x4, 0x53, 0x0, 0x6}, @lsrr={0x83, 0xf, 0x32, [@rand_addr=0x64010101, @local, @rand_addr=0x64010100]}, @noop, @timestamp_addr={0x44, 0x4, 0x26}, @generic={0x86, 0x0, "d9cc09bc0761438b1dd7b96829"}]}}}}}) 05:25:39 executing program 4: socketpair(0x2b, 0x4, 0x20, &(0x7f0000000000)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 05:25:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) 05:25:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x5c000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xff000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:39 executing program 2: write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, &(0x7f0000000000)={0x1, 0x1}, 0x2) r0 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, 0xffffffffffffffff) bind$isdn(r0, &(0x7f0000000040)={0x22, 0x2, 0xe1, 0x31, 0x8}, 0x6) r1 = syz_open_dev$sg(&(0x7f0000000080)='/dev/sg#\x00', 0x5, 0x88101) ioctl$SCSI_IOCTL_GET_PCI(r1, 0x5387, &(0x7f00000000c0)) socketpair(0x28, 0x802, 0x0, &(0x7f0000001a80)) 05:25:39 executing program 4: socketpair(0x2b, 0x4, 0x20, &(0x7f0000000000)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 05:25:39 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) 05:25:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xfdfdffff, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xfffffdfd, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:39 executing program 2: socketpair(0x18, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'gretap0\x00', &(0x7f0000000080)={'syztnl2\x00', r1, 0x8000, 0x7, 0x75b, 0x10001, {{0x21, 0x4, 0x2, 0x7, 0x84, 0x66, 0x0, 0x1, 0x29, 0x0, @multicast1, @multicast2, {[@ssrr={0x89, 0x1f, 0xc5, [@remote, @broadcast, @empty, @private=0xa010101, @private=0xa010100, @rand_addr=0x64010101, @broadcast]}, @timestamp_addr={0x44, 0x34, 0x99, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7ff}, {@remote, 0x3ff}, {@loopback, 0x8}, {@multicast2}, {@remote, 0x5}, {@multicast1, 0xffff}]}, @generic={0x83, 0xa, "c2ecba806bcf9440"}, @generic={0x1db, 0x11, "a3c6a9e48596606e1779636f0fbc48"}]}}}}}) r2 = syz_open_dev$vcsa(&(0x7f0000000200)='/dev/vcsa#\x00', 0x401, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0)='l2tp\x00', r2) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x7}]}, 0x44}}, 0x80) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, 0xffffffffffffffff) setsockopt$MISDN_TIME_STAMP(r2, 0x0, 0x1, &(0x7f0000000000), 0x4) 05:25:39 executing program 4: r0 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCXONC(r0, 0x540a, 0x2) 05:25:39 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) 05:25:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xfffffdfd, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xfffffe00, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:39 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x3, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) 05:25:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xfffffe00, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:39 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 05:25:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0x1000000000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 05:25:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x10022, &(0x7f0000000540)={0x0, 0x3938700}) 05:25:39 executing program 4: syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 05:25:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001540)={0x4c, 0xfeffff00000000, &(0x7f00000013c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 439.221164][ T8] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.346262][ T8] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.459959][ T8] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 439.585582][ T8] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.670702][ T8] device hsr_slave_0 left promiscuous mode [ 440.677059][ T8] device hsr_slave_1 left promiscuous mode [ 440.683537][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.690976][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 440.698773][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.706270][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 440.715425][ T8] device bridge_slave_1 left promiscuous mode [ 440.722192][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 440.730493][ T8] device bridge_slave_0 left promiscuous mode [ 440.736673][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 440.746508][ T8] device veth1_macvtap left promiscuous mode [ 440.752596][ T8] device veth0_macvtap left promiscuous mode [ 440.758759][ T8] device veth1_vlan left promiscuous mode [ 440.764530][ T8] device veth0_vlan left promiscuous mode [ 441.387791][ T8] team0 (unregistering): Port device team_slave_1 removed [ 441.397030][ T8] team0 (unregistering): Port device team_slave_0 removed [ 441.406203][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 441.417245][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 441.441444][ T8] bond0 (unregistering): Released all slaves [ 441.581491][T25309] IPVS: ftp: loaded support on port[0] = 21 [ 441.633564][T25309] chnl_net:caif_netlink_parms(): no params data found [ 441.661526][T25309] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.668674][T25309] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.676067][T25309] device bridge_slave_0 entered promiscuous mode [ 441.684021][T25309] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.691251][T25309] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.698743][T25309] device bridge_slave_1 entered promiscuous mode [ 441.713561][T25309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.723926][T25309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 441.739948][T25309] team0: Port device team_slave_0 added [ 441.746446][T25309] team0: Port device team_slave_1 added [ 441.759863][T25309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 441.766790][T25309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.792754][T25309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 441.804418][T25309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 441.812249][T25309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 441.838131][T25309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 441.859265][T25309] device hsr_slave_0 entered promiscuous mode [ 441.865817][T25309] device hsr_slave_1 entered promiscuous mode [ 441.875112][T25309] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 441.883777][T25309] Cannot create hsr debugfs directory [ 441.917111][T25309] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.924144][T25309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 441.931394][T25309] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.938415][T25309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 441.975622][T25309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 441.988150][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 441.998801][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.006332][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.019139][T25309] 8021q: adding VLAN 0 to HW filter on device team0 [ 442.030654][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 442.039070][ T3667] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.046069][ T3667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 442.069238][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 442.079420][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.086439][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 442.095793][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 442.106064][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 442.115322][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 442.127791][T25309] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 442.139377][T25309] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 442.146851][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 442.155499][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 442.169672][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 442.176993][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 442.187800][T25309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 442.228401][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 442.237032][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 442.246440][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 442.254482][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 442.263954][T25309] device veth0_vlan entered promiscuous mode [ 442.274014][T25309] device veth1_vlan entered promiscuous mode [ 442.288794][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 442.296514][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 442.306597][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 442.316998][T25309] device veth0_macvtap entered promiscuous mode [ 442.325694][T25309] device veth1_macvtap entered promiscuous mode [ 442.337439][T25309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 442.348172][T25309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.358096][T25309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 442.369220][T25309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.380008][T25309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 442.390893][T25309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.401319][T25309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 442.411821][T25309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.421690][T25309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 442.432314][T25309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.443218][T25309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 442.451492][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 442.461095][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 442.471104][T25309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 442.481533][T25309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.491447][T25309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 442.502331][T25309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.513341][T25309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 442.524959][T25309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.535068][T25309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 442.545625][T25309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.555442][T25309] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 442.566015][T25309] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 442.576772][T25309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 442.585399][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 442.620747][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.635662][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.657583][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 442.667503][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 442.675388][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 442.682861][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 443.530730][ T8] device hsr_slave_0 left promiscuous mode [ 443.536870][ T8] device hsr_slave_1 left promiscuous mode [ 443.543936][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 443.551824][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 443.559676][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 443.567033][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 443.574713][ T8] device bridge_slave_1 left promiscuous mode [ 443.580877][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 443.589170][ T8] device bridge_slave_0 left promiscuous mode [ 443.595310][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.604698][ T8] device veth1_macvtap left promiscuous mode [ 443.611237][ T8] device veth0_macvtap left promiscuous mode [ 443.617203][ T8] device veth1_vlan left promiscuous mode [ 443.622942][ T8] device veth0_vlan left promiscuous mode [ 444.258702][ T8] team0 (unregistering): Port device team_slave_1 removed [ 444.269225][ T8] team0 (unregistering): Port device team_slave_0 removed [ 444.278838][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.289834][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.313667][ T8] bond0 (unregistering): Released all slaves [ 445.025756][T25567] IPVS: ftp: loaded support on port[0] = 21 [ 445.082992][T25567] chnl_net:caif_netlink_parms(): no params data found [ 445.110234][T25567] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.117366][T25567] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.125404][T25567] device bridge_slave_0 entered promiscuous mode [ 445.133183][T25567] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.140349][T25567] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.149085][T25567] device bridge_slave_1 entered promiscuous mode [ 445.162873][T25567] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.175135][T25567] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.191989][T25567] team0: Port device team_slave_0 added [ 445.198584][T25567] team0: Port device team_slave_1 added [ 445.210428][T25567] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.217355][T25567] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.243889][T25567] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.255942][T25567] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.263042][T25567] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.289376][T25567] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.309856][T25567] device hsr_slave_0 entered promiscuous mode [ 445.316237][T25567] device hsr_slave_1 entered promiscuous mode [ 445.322752][T25567] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.330811][T25567] Cannot create hsr debugfs directory [ 445.357280][T25567] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.364317][T25567] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.371551][T25567] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.378579][T25567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.389051][ T3831] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.398246][ T3831] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.426667][T25567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.437335][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 445.445910][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 445.455281][T25567] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.464127][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 445.473793][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 445.482622][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.489707][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.500442][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 445.508823][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 445.516950][ T3831] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.523962][ T3831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.544028][T25567] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 445.554433][T25567] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.565590][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 445.574336][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 445.583035][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 445.591727][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 445.600134][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 445.608932][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 445.617223][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 445.626006][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 445.634189][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 445.642417][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 445.651741][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 445.660255][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 445.676737][T25567] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.683864][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 445.693918][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 445.728191][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 445.736569][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 445.745480][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 445.753578][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 445.763041][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 445.771154][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 445.780061][T25567] device veth0_vlan entered promiscuous mode [ 445.790465][T25567] device veth1_vlan entered promiscuous mode [ 445.806752][T25567] device veth0_macvtap entered promiscuous mode [ 445.813722][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 445.822065][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 445.830064][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 445.838413][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 445.846734][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 445.857201][T25567] device veth1_macvtap entered promiscuous mode [ 445.869139][T25567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 445.879710][T25567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.890217][T25567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 445.901085][T25567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.912238][T25567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 445.923192][T25567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.933430][T25567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 445.943865][T25567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.953938][T25567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 445.964669][T25567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.975322][T25567] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.982897][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 445.991010][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 445.999311][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 446.009881][T25567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 446.021146][T25567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.031287][T25567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 446.042017][T25567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.052152][T25567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 446.062600][T25567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.072608][T25567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 446.083139][T25567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.093027][T25567] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 446.103617][T25567] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 446.115710][T25567] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 446.124772][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 446.133277][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 446.174471][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.189195][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.199966][ T24] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.208305][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 446.216643][ T24] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.227008][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 447.120267][T19728] device hsr_slave_0 left promiscuous mode [ 447.126429][T19728] device hsr_slave_1 left promiscuous mode [ 447.134361][T19728] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 447.142347][T19728] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 447.150378][T19728] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 447.158269][T19728] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 447.166094][T19728] device bridge_slave_1 left promiscuous mode [ 447.172538][T19728] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.180080][T19728] device bridge_slave_0 left promiscuous mode [ 447.186329][T19728] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.196372][T19728] device veth1_macvtap left promiscuous mode [ 447.202369][T19728] device veth0_macvtap left promiscuous mode [ 447.209800][T19728] device veth1_vlan left promiscuous mode [ 447.215511][T19728] device veth0_vlan left promiscuous mode [ 447.850094][T19728] team0 (unregistering): Port device team_slave_1 removed [ 447.859603][T19728] team0 (unregistering): Port device team_slave_0 removed [ 447.869275][T19728] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 447.879648][T19728] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 447.903608][T19728] bond0 (unregistering): Released all slaves [ 448.542607][T25817] IPVS: ftp: loaded support on port[0] = 21 [ 448.598808][T25817] chnl_net:caif_netlink_parms(): no params data found [ 448.625553][T25817] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.632652][T25817] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.641194][T25817] device bridge_slave_0 entered promiscuous mode [ 448.649441][T25817] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.656478][T25817] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.663993][T25817] device bridge_slave_1 entered promiscuous mode [ 448.678211][T25817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 448.689807][T25817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 448.705159][T25817] team0: Port device team_slave_0 added [ 448.712326][T25817] team0: Port device team_slave_1 added [ 448.723989][T25817] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 448.731155][T25817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.757080][T25817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 448.769103][T25817] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 448.776094][T25817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 448.802777][T25817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 448.823491][T25817] device hsr_slave_0 entered promiscuous mode [ 448.829906][T25817] device hsr_slave_1 entered promiscuous mode [ 448.836147][T25817] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 448.843720][T25817] Cannot create hsr debugfs directory [ 448.869994][T25817] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.877034][T25817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.884290][T25817] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.891319][T25817] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.921199][T25817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.932862][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 448.941846][ T34] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.950092][ T34] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.963498][T25817] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.972132][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 448.981728][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 448.990408][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.997458][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.007097][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 449.015544][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 449.025162][ T9798] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.032192][ T9798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.042977][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 449.058122][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 449.066790][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 449.076463][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 449.086098][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 449.095200][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 449.103730][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 449.116976][T25817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 449.127415][T25817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 449.139408][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 449.147927][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 449.156226][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 449.164401][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 449.172701][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 449.189593][T25817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.197057][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 449.204584][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 449.237610][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 449.245971][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 449.255337][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 449.263659][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 449.273168][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 449.281902][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 449.291111][T25817] device veth0_vlan entered promiscuous mode [ 449.301676][T25817] device veth1_vlan entered promiscuous mode [ 449.316343][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 449.326388][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 449.335421][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 449.344994][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 449.356133][T25817] device veth0_macvtap entered promiscuous mode [ 449.364692][T25817] device veth1_macvtap entered promiscuous mode [ 449.376727][T25817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 449.387944][T25817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.397879][T25817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 449.408808][T25817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.419298][T25817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 449.429785][T25817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.439699][T25817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 449.450104][T25817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.459943][T25817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 449.470342][T25817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.480830][T25817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.488466][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 449.496487][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 449.504403][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 449.514098][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 449.525439][T25817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 449.536629][T25817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.547062][T25817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 449.557644][T25817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.568259][T25817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 449.578924][T25817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.589679][T25817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 449.600287][T25817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.610673][T25817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 449.621229][T25817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.631753][T25817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.640611][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 449.649431][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 449.681277][ T238] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.694545][ T238] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.712443][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 449.730224][ T238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.738704][ T238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.746162][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 450.650410][ T8] device hsr_slave_0 left promiscuous mode [ 450.656643][ T8] device hsr_slave_1 left promiscuous mode [ 450.662916][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 450.670342][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 450.677972][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 450.685445][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 450.694807][ T8] device bridge_slave_1 left promiscuous mode [ 450.701265][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.709177][ T8] device bridge_slave_0 left promiscuous mode [ 450.715276][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 450.724480][ T8] device veth1_macvtap left promiscuous mode [ 450.730584][ T8] device veth0_macvtap left promiscuous mode [ 450.736585][ T8] device veth1_vlan left promiscuous mode [ 450.742353][ T8] device veth0_vlan left promiscuous mode [ 451.387119][ T8] team0 (unregistering): Port device team_slave_1 removed [ 451.396266][ T8] team0 (unregistering): Port device team_slave_0 removed [ 451.406966][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 451.418971][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 451.443635][ T8] bond0 (unregistering): Released all slaves [ 452.061185][T26066] IPVS: ftp: loaded support on port[0] = 21 [ 452.118743][T26066] chnl_net:caif_netlink_parms(): no params data found [ 452.146660][T26066] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.153913][T26066] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.161548][T26066] device bridge_slave_0 entered promiscuous mode [ 452.169565][T26066] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.176620][T26066] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.184147][T26066] device bridge_slave_1 entered promiscuous mode [ 452.197980][T26066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.208376][T26066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.223935][T26066] team0: Port device team_slave_0 added [ 452.230867][T26066] team0: Port device team_slave_1 added [ 452.243281][T26066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 452.250743][T26066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.277308][T26066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 452.289133][T26066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 452.296046][T26066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.322076][T26066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.342051][T26066] device hsr_slave_0 entered promiscuous mode [ 452.348540][T26066] device hsr_slave_1 entered promiscuous mode [ 452.354842][T26066] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.363104][T26066] Cannot create hsr debugfs directory [ 452.389331][T26066] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.396426][T26066] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.403697][T26066] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.410820][T26066] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.440024][T26066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 452.451661][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 452.461635][ T3667] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.472257][ T3667] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.484232][T26066] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.494191][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 452.503705][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.510769][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 452.527477][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 452.536023][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 452.544921][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.552059][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 452.559818][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 452.568580][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 452.577476][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 452.585806][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 452.594333][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 452.603087][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 452.612364][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 452.622371][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 452.631853][ T34] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 452.643087][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 452.651257][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 452.659949][T26066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 452.673842][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 452.681962][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 452.692886][T26066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.729583][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 452.738070][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 452.750319][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 452.758500][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 452.767667][T26066] device veth0_vlan entered promiscuous mode [ 452.776958][T26066] device veth1_vlan entered promiscuous mode [ 452.783693][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 452.791571][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 452.799163][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 452.816908][T26066] device veth0_macvtap entered promiscuous mode [ 452.823590][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 452.832100][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 452.840940][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 452.850470][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 452.861064][T26066] device veth1_macvtap entered promiscuous mode [ 452.874878][T26066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 452.885451][T26066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.895273][T26066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 452.905947][T26066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.915855][T26066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 452.926302][T26066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.936210][T26066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 452.946657][T26066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.956653][T26066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 452.967985][T26066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 452.978548][T26066] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 452.986327][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 452.994474][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 453.003410][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 453.013698][T26066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 453.024275][T26066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.034257][T26066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 453.044875][T26066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.054701][T26066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 453.065110][T26066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.075035][T26066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 453.086195][T26066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.096166][T26066] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 453.106618][T26066] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 453.117132][T26066] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 453.125080][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 453.133913][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 453.175493][T11356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.190112][T11356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.203498][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 453.207549][T19728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.221450][T19728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.229064][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 454.110099][T11356] device hsr_slave_0 left promiscuous mode [ 454.116237][T11356] device hsr_slave_1 left promiscuous mode [ 454.124771][T11356] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 454.132258][T11356] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 454.139961][T11356] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 454.147775][T11356] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 454.155619][T11356] device bridge_slave_1 left promiscuous mode [ 454.161838][T11356] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.169328][T11356] device bridge_slave_0 left promiscuous mode [ 454.175417][T11356] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.186042][T11356] device veth1_macvtap left promiscuous mode [ 454.192944][T11356] device veth0_macvtap left promiscuous mode [ 454.199047][T11356] device veth1_vlan left promiscuous mode [ 454.204756][T11356] device veth0_vlan left promiscuous mode [ 454.845917][T11356] team0 (unregistering): Port device team_slave_1 removed [ 454.854914][T11356] team0 (unregistering): Port device team_slave_0 removed [ 454.865097][T11356] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 454.875970][T11356] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 454.900690][T11356] bond0 (unregistering): Released all slaves [ 455.578354][T26316] IPVS: ftp: loaded support on port[0] = 21 [ 455.639588][T26316] chnl_net:caif_netlink_parms(): no params data found [ 455.668002][T26316] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.675081][T26316] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.682538][T26316] device bridge_slave_0 entered promiscuous mode [ 455.690489][T26316] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.697525][T26316] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.705055][T26316] device bridge_slave_1 entered promiscuous mode [ 455.720279][T26316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 455.730746][T26316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 455.747114][T26316] team0: Port device team_slave_0 added [ 455.753796][T26316] team0: Port device team_slave_1 added [ 455.766766][T26316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.773705][T26316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.800402][T26316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.811908][T26316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.818898][T26316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.845657][T26316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.865274][T26316] device hsr_slave_0 entered promiscuous mode [ 455.871857][T26316] device hsr_slave_1 entered promiscuous mode [ 455.878339][T26316] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 455.885865][T26316] Cannot create hsr debugfs directory [ 455.912244][T26316] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.919262][T26316] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.926451][T26316] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.933522][T26316] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.958393][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 455.966110][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.982010][T26316] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.992578][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 456.001199][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 456.010470][T26316] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.019916][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 456.029154][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 456.037719][ T3831] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.044747][ T3831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.055556][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 456.065578][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 456.075015][ T9798] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.082073][ T9798] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.097190][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 456.105712][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 456.115141][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 456.123909][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 456.132425][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 456.140874][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 456.151252][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 456.163365][T26316] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 456.173797][T26316] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.186106][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 456.195172][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 456.203882][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 456.213634][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 456.223506][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 456.239901][T26316] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.247530][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 456.254948][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 456.288495][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 456.296844][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 456.314866][T26316] device veth0_vlan entered promiscuous mode [ 456.321196][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 456.330136][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 456.338585][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 456.346096][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 456.357621][T26316] device veth1_vlan entered promiscuous mode [ 456.372030][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 456.380166][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 456.388104][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 456.396236][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 456.406979][T26316] device veth0_macvtap entered promiscuous mode [ 456.415700][T26316] device veth1_macvtap entered promiscuous mode [ 456.428490][T26316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 456.439000][T26316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.449018][T26316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 456.459586][T26316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.469439][T26316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 456.479891][T26316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.489752][T26316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 456.500171][T26316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.510075][T26316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 456.521251][T26316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.532552][T26316] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.541747][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 456.551510][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 456.560854][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 456.569955][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 456.580368][T26316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 456.590947][T26316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.600767][T26316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 456.611586][T26316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.621872][T26316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 456.632428][T26316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.642302][T26316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 456.652726][T26316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.662730][T26316] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 456.673149][T26316] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 456.683699][T26316] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.691562][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 456.701088][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 456.744756][T19728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.752693][T19728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.766496][ T238] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.781683][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 456.783215][ T238] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.796522][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 457.651660][ T238] device hsr_slave_0 left promiscuous mode [ 457.657955][ T238] device hsr_slave_1 left promiscuous mode [ 457.663961][ T238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.671534][ T238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.679902][ T238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 457.687445][ T238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 457.694977][ T238] device bridge_slave_1 left promiscuous mode [ 457.701105][ T238] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.708574][ T238] device bridge_slave_0 left promiscuous mode [ 457.714728][ T238] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.725530][ T238] device veth1_macvtap left promiscuous mode [ 457.732551][ T238] device veth0_macvtap left promiscuous mode [ 457.739255][ T238] device veth1_vlan left promiscuous mode [ 457.745032][ T238] device veth0_vlan left promiscuous mode [ 458.378192][ T238] team0 (unregistering): Port device team_slave_1 removed [ 458.387938][ T238] team0 (unregistering): Port device team_slave_0 removed [ 458.397683][ T238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 458.408752][ T238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 458.432486][ T238] bond0 (unregistering): Released all slaves [ 459.101641][T26565] IPVS: ftp: loaded support on port[0] = 21 [ 459.159172][T26565] chnl_net:caif_netlink_parms(): no params data found [ 459.187575][T26565] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.194712][T26565] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.203762][T26565] device bridge_slave_0 entered promiscuous mode [ 459.212061][T26565] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.219198][T26565] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.226608][T26565] device bridge_slave_1 entered promiscuous mode [ 459.241142][T26565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.251515][T26565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.267597][T26565] team0: Port device team_slave_0 added [ 459.274175][T26565] team0: Port device team_slave_1 added [ 459.286725][T26565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.293741][T26565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.319714][T26565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.331466][T26565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.338860][T26565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.365163][T26565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.385049][T26565] device hsr_slave_0 entered promiscuous mode [ 459.391444][T26565] device hsr_slave_1 entered promiscuous mode [ 459.398079][T26565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 459.405663][T26565] Cannot create hsr debugfs directory [ 459.432598][T26565] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.439649][T26565] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.446939][T26565] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.453981][T26565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.484966][T26565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.496507][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 459.507779][ T3667] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.515256][ T3667] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.528497][T26565] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.538716][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 459.549014][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 459.557265][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.564271][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.578140][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 459.586637][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 459.596208][ T8664] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.603442][ T8664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.614071][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 459.625144][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 459.637023][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 459.645152][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 459.656857][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 459.673248][T26565] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 459.683692][T26565] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 459.695202][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 459.704117][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 459.714465][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 459.723494][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 459.732495][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 459.740746][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 459.751333][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 459.763368][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 459.772614][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 459.783967][T26565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 459.825057][T26565] device veth0_vlan entered promiscuous mode [ 459.832216][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 459.841832][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 459.850682][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 459.860306][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 459.868937][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 459.876715][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 459.888427][T26565] device veth1_vlan entered promiscuous mode [ 459.904057][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 459.912050][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 459.920072][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 459.928736][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 459.940266][T26565] device veth0_macvtap entered promiscuous mode [ 459.949214][T26565] device veth1_macvtap entered promiscuous mode [ 459.962074][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 459.972856][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 459.982715][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 459.993129][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.002990][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 460.013420][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.023257][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 460.033939][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.044319][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 460.055130][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.066111][T26565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 460.074228][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 460.082215][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 460.090129][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 460.098977][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 460.109971][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 460.120407][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.130366][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 460.141093][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.151118][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 460.162154][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.171974][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 460.182510][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.192620][T26565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 460.203755][T26565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 460.214511][T26565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 460.222074][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 460.230996][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 460.271640][T11356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.284326][T11356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.294023][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 460.317228][T11356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 460.325039][T11356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 460.332505][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 461.160508][ T238] device hsr_slave_0 left promiscuous mode [ 461.168299][ T238] device hsr_slave_1 left promiscuous mode [ 461.174686][ T238] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 461.182327][ T238] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.190024][ T238] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 461.197414][ T238] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 461.204969][ T238] device bridge_slave_1 left promiscuous mode [ 461.211200][ T238] bridge0: port 2(bridge_slave_1) entered disabled state [ 461.218706][ T238] device bridge_slave_0 left promiscuous mode [ 461.224800][ T238] bridge0: port 1(bridge_slave_0) entered disabled state [ 461.235311][ T238] device veth1_macvtap left promiscuous mode [ 461.241346][ T238] device veth0_macvtap left promiscuous mode [ 461.247398][ T238] device veth1_vlan left promiscuous mode [ 461.253197][ T238] device veth0_vlan left promiscuous mode [ 461.893532][ T238] team0 (unregistering): Port device team_slave_1 removed [ 461.902641][ T238] team0 (unregistering): Port device team_slave_0 removed [ 461.913151][ T238] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 461.923877][ T238] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 461.948701][ T238] bond0 (unregistering): Released all slaves [ 462.627673][T26815] IPVS: ftp: loaded support on port[0] = 21 [ 462.683873][T26815] chnl_net:caif_netlink_parms(): no params data found [ 462.713455][T26815] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.720719][T26815] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.730475][T26815] device bridge_slave_0 entered promiscuous mode [ 462.739460][T26815] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.746482][T26815] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.753963][T26815] device bridge_slave_1 entered promiscuous mode [ 462.768789][T26815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.779249][T26815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.795846][T26815] team0: Port device team_slave_0 added [ 462.803139][T26815] team0: Port device team_slave_1 added [ 462.815759][T26815] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.824067][T26815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.850593][T26815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.862523][T26815] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.870069][T26815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.896229][T26815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.917794][T26815] device hsr_slave_0 entered promiscuous mode [ 462.924290][T26815] device hsr_slave_1 entered promiscuous mode [ 462.931768][T26815] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.939322][T26815] Cannot create hsr debugfs directory [ 462.964870][T26815] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.971909][T26815] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.979186][T26815] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.986260][T26815] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.015445][T26815] 8021q: adding VLAN 0 to HW filter on device bond0 [ 463.024252][ T3831] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.033073][ T3831] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.048162][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 463.055678][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 463.068051][T26815] 8021q: adding VLAN 0 to HW filter on device team0 [ 463.078934][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 463.087975][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 463.096062][ T8664] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.103078][ T8664] bridge0: port 1(bridge_slave_0) entered forwarding state [ 463.110866][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 463.119342][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 463.128435][ T8664] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.135431][ T8664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 463.147645][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 463.156786][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 463.167292][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 463.175860][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 463.184674][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 463.194661][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 463.204672][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 463.216818][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 463.224820][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 463.237669][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 463.245763][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 463.255361][T26815] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 463.269134][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 463.276488][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 463.289024][T26815] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 463.326176][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 463.334636][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 463.349554][T26815] device veth0_vlan entered promiscuous mode [ 463.356634][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 463.364537][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 463.374952][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 463.383959][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 463.396122][T26815] device veth1_vlan entered promiscuous mode [ 463.411219][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 463.419234][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 463.428327][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 463.437377][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 463.447956][T26815] device veth0_macvtap entered promiscuous mode [ 463.456140][T26815] device veth1_macvtap entered promiscuous mode [ 463.469922][T26815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 463.481214][T26815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.491052][T26815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 463.501736][T26815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.511557][T26815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 463.522263][T26815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.532139][T26815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 463.542693][T26815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.552535][T26815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 463.563004][T26815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.573615][T26815] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.582769][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 463.592268][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 463.601442][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 463.611246][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 463.622833][T26815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 463.633309][T26815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.643219][T26815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 463.653674][T26815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.664310][T26815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 463.675432][T26815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.685237][T26815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 463.695878][T26815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.706400][T26815] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 463.717380][T26815] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 463.728034][T26815] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.735533][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 463.744453][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 463.781281][T11356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.796524][T11356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.804285][ T3831] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 463.823370][T19728] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.832855][T19728] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 463.840401][ T9798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 464.680608][ T8] device hsr_slave_0 left promiscuous mode [ 464.686748][ T8] device hsr_slave_1 left promiscuous mode [ 464.692759][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.701772][ T8] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.710048][ T8] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.718954][ T8] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.726891][ T8] device bridge_slave_1 left promiscuous mode [ 464.733025][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.742903][ T8] device bridge_slave_0 left promiscuous mode [ 464.749488][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.760014][ T8] device veth1_macvtap left promiscuous mode [ 464.765980][ T8] device veth0_macvtap left promiscuous mode [ 464.772143][ T8] device veth1_vlan left promiscuous mode [ 464.777909][ T8] device veth0_vlan left promiscuous mode [ 465.410974][ T8] team0 (unregistering): Port device team_slave_1 removed [ 465.419929][ T8] team0 (unregistering): Port device team_slave_0 removed [ 465.429678][ T8] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.440767][ T8] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.466101][ T8] bond0 (unregistering): Released all slaves [ 466.134345][T27065] IPVS: ftp: loaded support on port[0] = 21 [ 466.198911][T27065] chnl_net:caif_netlink_parms(): no params data found [ 466.226271][T27065] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.233361][T27065] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.241590][T27065] device bridge_slave_0 entered promiscuous mode [ 466.249828][T27065] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.256911][T27065] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.264184][T27065] device bridge_slave_1 entered promiscuous mode [ 466.278640][T27065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.289316][T27065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.305514][T27065] team0: Port device team_slave_0 added [ 466.312650][T27065] team0: Port device team_slave_1 added [ 466.324502][T27065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.331443][T27065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.358120][T27065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.369785][T27065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.376785][T27065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.402814][T27065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.423515][T27065] device hsr_slave_0 entered promiscuous mode [ 466.429895][T27065] device hsr_slave_1 entered promiscuous mode [ 466.437233][T27065] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.445295][T27065] Cannot create hsr debugfs directory [ 466.472673][T27065] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.479712][T27065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.486948][T27065] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.494022][T27065] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.502924][T12052] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.511910][T12052] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.542393][T27065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 466.553147][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 466.561997][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 466.571531][T27065] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.580639][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 466.589616][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 466.598014][ T3667] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.605013][ T3667] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.617998][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 466.626310][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 466.634474][ T8664] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.641488][ T8664] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.651529][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 466.663113][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 466.681104][T27065] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 466.691853][T27065] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 466.702907][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 466.711834][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 466.720349][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 466.728991][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 466.737588][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 466.746245][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 466.754269][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 466.764072][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 466.772245][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 466.780100][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 466.793462][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 466.802133][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 466.814042][T27065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 466.848196][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 466.856716][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 466.874189][T27065] device veth0_vlan entered promiscuous mode [ 466.880537][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 466.892026][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 466.902275][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 466.911730][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 466.924045][T27065] device veth1_vlan entered promiscuous mode [ 466.939811][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 466.948285][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 466.956257][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 466.964634][ T8664] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 466.974281][T27065] device veth0_macvtap entered promiscuous mode [ 466.983167][T27065] device veth1_macvtap entered promiscuous mode [ 466.994905][T27065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 467.005455][T27065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.015418][T27065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 467.025937][T27065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.035859][T27065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 467.046272][T27065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.056973][T27065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 467.067415][T27065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.077207][T27065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 467.087629][T27065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.098243][T27065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.105747][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 467.113684][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 467.122293][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 467.131171][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 467.142464][T27065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 467.153982][T27065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.164266][T27065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 467.175681][T27065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.185488][T27065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 467.195902][T27065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.205787][T27065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 467.216287][T27065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.226245][T27065] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 467.236658][T27065] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.248187][T27065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.256159][T12052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 467.264674][T12052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 467.286856][T12052] ================================================================== [ 467.294942][T12052] BUG: KCSAN: data-race in skb_queue_tail / wg_packet_handshake_receive_worker [ 467.303875][T12052] [ 467.306182][T12052] write to 0xffff88811fb86bf0 of 4 bytes by interrupt on cpu 1: [ 467.313796][T12052] skb_queue_tail+0x80/0xa0 [ 467.318297][T12052] wg_packet_receive+0x507/0xcc0 [ 467.318852][ T1966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.323229][T12052] wg_receive+0x4a/0x70 [ 467.335133][T12052] udp_queue_rcv_one_skb+0x6dc/0x7e0 [ 467.340750][T12052] udp_queue_rcv_skb+0xd2/0x450 [ 467.346424][T12052] __udp4_lib_rcv+0x135a/0x1ac0 [ 467.351266][T12052] udp_rcv+0x1d/0x20 [ 467.355151][T12052] ip_protocol_deliver_rcu+0x1f9/0x3e0 [ 467.355798][ T1966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.360594][T12052] ip_local_deliver+0x1d6/0x2a0 [ 467.360617][T12052] ip_rcv+0x1a6/0x250 [ 467.376937][T12052] __netif_receive_skb+0x8b/0x1b0 [ 467.381955][T12052] process_backlog+0x23f/0x3e0 [ 467.386713][T12052] napi_poll+0x181/0x630 [ 467.391056][T12052] net_rx_action+0x17a/0x490 [ 467.392008][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 467.396341][T12052] __do_softirq+0x13c/0x2c3 [ 467.396359][T12052] run_ksoftirqd+0x13/0x20 [ 467.396374][T12052] smpboot_thread_fn+0x34f/0x520 [ 467.404696][ T1966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.408013][T12052] kthread+0x20b/0x230 [ 467.408034][T12052] ret_from_fork+0x1f/0x30 [ 467.408051][T12052] [ 467.408055][T12052] read to 0xffff88811fb86bf0 of 4 bytes by task 12052 on cpu 0: [ 467.408068][T12052] wg_packet_handshake_receive_worker+0xdd/0x450 [ 467.408097][T12052] process_one_work+0x3e1/0x950 [ 467.408114][T12052] worker_thread+0x616/0xa70 [ 467.408127][T12052] kthread+0x20b/0x230 [ 467.408144][T12052] ret_from_fork+0x1f/0x30 [ 467.426420][ T1966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.429449][T12052] [ 467.429452][T12052] Reported by Kernel Concurrency Sanitizer on: [ 467.429458][T12052] CPU: 0 PID: 12052 Comm: kworker/0:5 Not tainted 5.11.0-syzkaller #0 [ 467.429473][T12052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.434082][ T3667] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 467.436163][T12052] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 467.518985][T12052] ================================================================== [ 467.527036][T12052] Kernel panic - not syncing: panic_on_warn set ... [ 467.533592][T12052] CPU: 0 PID: 12052 Comm: kworker/0:5 Not tainted 5.11.0-syzkaller #0 [ 467.541715][T12052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 467.551745][T12052] Workqueue: wg-kex-wg2 wg_packet_handshake_receive_worker [ 467.558924][T12052] Call Trace: [ 467.562186][T12052] dump_stack+0x116/0x15d [ 467.566497][T12052] panic+0x1e7/0x5fa [ 467.570367][T12052] ? vprintk_emit+0x2e2/0x360 [ 467.575023][T12052] kcsan_report+0x67b/0x680 [ 467.579505][T12052] ? kcsan_setup_watchpoint+0x472/0x4d0 [ 467.585029][T12052] ? wg_packet_handshake_receive_worker+0xdd/0x450 [ 467.591510][T12052] ? process_one_work+0x3e1/0x950 [ 467.596770][T12052] ? worker_thread+0x616/0xa70 [ 467.601506][T12052] ? kthread+0x20b/0x230 [ 467.605724][T12052] ? ret_from_fork+0x1f/0x30 [ 467.610338][T12052] ? _raw_spin_lock_irqsave+0x25/0x90 [ 467.615684][T12052] kcsan_setup_watchpoint+0x472/0x4d0 [ 467.621034][T12052] ? skb_dequeue+0xb3/0xd0 [ 467.625426][T12052] wg_packet_handshake_receive_worker+0xdd/0x450 [ 467.631731][T12052] process_one_work+0x3e1/0x950 [ 467.636556][T12052] worker_thread+0x616/0xa70 [ 467.641120][T12052] ? finish_task_switch+0xc0/0x2a0 [ 467.646205][T12052] ? process_one_work+0x950/0x950 [ 467.651240][T12052] kthread+0x20b/0x230 [ 467.655285][T12052] ? process_one_work+0x950/0x950 [ 467.660282][T12052] ? kthread_blkcg+0x80/0x80 [ 467.664882][T12052] ret_from_fork+0x1f/0x30 [ 467.669749][T12052] Kernel Offset: disabled [ 467.674054][T12052] Rebooting in 86400 seconds..