cket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, 0x0, 0x800) 06:44:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000004c0)=0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000ec0)={0x508, 0x0, 0x0, [{{0x4, 0x2, 0xfffffffffffffc01, 0x40, 0x8, 0x4, {0x0, 0x4, 0x100000000, 0x7fffffff, 0x9, 0x8, 0x2, 0xffff, 0x9, 0xa000, 0xf00, r3, 0x0, 0x80000000, 0x4}}, {0x3, 0xc53a, 0x7, 0x6, 'ns/pid\x00'}}, {{0x3, 0x0, 0x0, 0xb7, 0x3, 0x4, {0x2, 0x8000, 0x8ff, 0xfffffffffffffff7, 0x8001, 0x0, 0x7, 0x6, 0x3e4, 0x4000, 0x81, r3, 0xee00, 0x8, 0x1}}, {0x4bb8, 0xffff, 0x7, 0xffff, 'ns/pid\x00'}}, {{0x1, 0x2, 0x1, 0x8, 0xfffffffc, 0x41, {0x5, 0xd4, 0x6, 0x7d, 0x6500000000000000, 0x2, 0xffff, 0x1ff, 0x2d, 0xc000, 0xff, 0x0, 0x0, 0x263, 0x8}}, {0x3, 0x9, 0x7, 0x6, 'ns/pid\x00'}}, {{0x6, 0x0, 0x9, 0x40, 0x1, 0x5, {0x6, 0x3f, 0x8, 0x7, 0x2, 0x9, 0x100, 0x6, 0x8, 0x1000, 0x253, r3, 0x0, 0xf01c, 0x8}}, {0x0, 0x6, 0x0, 0x4}}, {{0x6, 0x0, 0x2, 0x20, 0xb, 0x1, {0x2, 0x4, 0x3, 0x100000001, 0xc400000, 0x2, 0x5, 0x8, 0xffff, 0x8000, 0x3, 0x0, 0x0, 0x6, 0x2}}, {0x6, 0x5, 0x3, 0x1, '&-\''}}, {{0x6, 0x0, 0xfffffffffffffffc, 0x3, 0x5, 0x2, {0x2, 0x2, 0x1, 0x3ff, 0x1, 0x3f, 0x7fff, 0x3, 0x91a2, 0x2000, 0x333, 0x0, 0x0, 0x0, 0x3}}, {0x5, 0x1, 0x5, 0x3, '%%u\xf5['}}, {{0x1, 0x3, 0x303, 0xffff, 0x0, 0x0, {0x6, 0x5, 0x5, 0xb209, 0xfffffffffffffffd, 0xec7, 0x20, 0x6, 0x7, 0x1000, 0x101, r3, 0xee01, 0x6, 0x7}}, {0x6, 0x4, 0x7, 0x7, 'batadv\x00'}}, {{0x3, 0x2, 0x7, 0x2, 0x2, 0x2, {0x5, 0x6, 0x9, 0x1, 0xb7, 0x3, 0x75f, 0x2, 0x6, 0x6000, 0x2, r3, 0x0, 0x7, 0x6}}, {0x1, 0x2, 0x7, 0x100, 'ns/pid\x00'}}]}, 0x508) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="ffff0010", @ANYRES16=r4, @ANYBLOB="080028bd7000fbdbdf2510000000060028000000000058ff2f0000000000000030000100000008003b000900000008002c00fcffffff05002e0000000000000038000000000008003a00000000080a000900ffffffffffff0000"], 0x60}, 0x1, 0x0, 0x0, 0xc811}, 0x4040014) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f00000001c0)=[@exit_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}, @decrefs, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/240, 0xf0, 0x1, 0x8}, @fd, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}], 0xcc, 0x0, &(0x7f0000000240)="0c1c1ba2f9f3dcf2b9c6222dd7fb47f3ac6cac8de9d860e988bf5f1e9b7f4816dd0857e97683fdd77716e53886997948a45e5aaf2a52efad715751254ed42a091afc4aa97e17ed6ac0c5b49785d014bd4ae8122abf68bb481da3a58080b8121a0dd4ce4abdc94bbf5bf35195c53b317ac1c2de431e228c67704ecebce365ee0ae30224709b92966ae5872af2fc1488a066e15335cd41f357c5a99543d60be610d316702589333c20f18b1e3cb7149d6b919ae9f2aff2e0d632f11f4083b89d61d75b6fcf095202a1e8007cb1"}) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x50}}, 0x40) r7 = syz_genetlink_get_family_id$wireguard(0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000e80)={&(0x7f0000000340), 0xc, &(0x7f0000000e40)={&(0x7f0000000580)=ANY=[@ANYBLOB="04100000", @ANYRES16=r7, @ANYBLOB="020027bd7000fedbdf250000000008000100", @ANYRES32=r8, @ANYBLOB="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"], 0x458}}, 0x40001) 06:44:07 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000004c0)=0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000ec0)={0x508, 0x0, 0x0, [{{0x4, 0x2, 0xfffffffffffffc01, 0x40, 0x8, 0x4, {0x0, 0x4, 0x100000000, 0x7fffffff, 0x9, 0x8, 0x2, 0xffff, 0x9, 0xa000, 0xf00, r2, 0x0, 0x80000000, 0x4}}, {0x3, 0xc53a, 0x7, 0x6, 'ns/pid\x00'}}, {{0x3, 0x0, 0x0, 0xb7, 0x3, 0x4, {0x2, 0x8000, 0x8ff, 0xfffffffffffffff7, 0x8001, 0x0, 0x7, 0x6, 0x3e4, 0x4000, 0x81, r2, 0xee00, 0x8, 0x1}}, {0x4bb8, 0xffff, 0x7, 0xffff, 'ns/pid\x00'}}, {{0x1, 0x2, 0x1, 0x8, 0xfffffffc, 0x41, {0x5, 0xd4, 0x6, 0x7d, 0x6500000000000000, 0x2, 0xffff, 0x1ff, 0x2d, 0xc000, 0xff, 0x0, 0x0, 0x263, 0x8}}, {0x3, 0x9, 0x7, 0x6, 'ns/pid\x00'}}, {{0x6, 0x0, 0x9, 0x40, 0x1, 0x5, {0x6, 0x3f, 0x8, 0x7, 0x2, 0x9, 0x100, 0x6, 0x8, 0x1000, 0x253, r2, 0x0, 0xf01c, 0x8}}, {0x0, 0x6, 0x0, 0x4}}, {{0x6, 0x0, 0x2, 0x20, 0xb, 0x1, {0x2, 0x4, 0x3, 0x100000001, 0xc400000, 0x2, 0x5, 0x8, 0xffff, 0x8000, 0x3, 0x0, 0x0, 0x6, 0x2}}, {0x6, 0x5, 0x3, 0x1, '&-\''}}, {{0x6, 0x0, 0xfffffffffffffffc, 0x3, 0x5, 0x2, {0x2, 0x2, 0x1, 0x3ff, 0x1, 0x3f, 0x7fff, 0x3, 0x91a2, 0x2000, 0x333, 0x0, 0x0, 0x0, 0x3}}, {0x5, 0x1, 0x5, 0x3, '%%u\xf5['}}, {{0x1, 0x3, 0x303, 0xffff, 0x0, 0x0, {0x6, 0x5, 0x5, 0xb209, 0xfffffffffffffffd, 0xec7, 0x20, 0x6, 0x7, 0x1000, 0x101, r2, 0xee01, 0x6, 0x7}}, {0x6, 0x4, 0x7, 0x7, 'batadv\x00'}}, {{0x3, 0x2, 0x7, 0x2, 0x2, 0x2, {0x5, 0x6, 0x9, 0x1, 0xb7, 0x3, 0x75f, 0x2, 0x6, 0x6000, 0x2, r2, 0x0, 0x7, 0x6}}, {0x1, 0x2, 0x7, 0x100, 'ns/pid\x00'}}]}, 0x508) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="ffff0010", @ANYRES16=r3, @ANYBLOB="080028bd7000fbdbdf2510000000060028000000000058ff2f0000000000000030000100000008003b000900000008002c00fcffffff05002e0000000000000038000000000008003a00000000080a000900ffffffffffff0000"], 0x60}, 0x1, 0x0, 0x0, 0xc811}, 0x4040014) 06:44:07 executing program 5: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000004c0)=0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000ec0)={0x508, 0x0, 0x0, [{{0x4, 0x2, 0xfffffffffffffc01, 0x40, 0x8, 0x4, {0x0, 0x4, 0x100000000, 0x7fffffff, 0x9, 0x8, 0x2, 0xffff, 0x9, 0xa000, 0xf00, r2, 0x0, 0x80000000, 0x4}}, {0x3, 0xc53a, 0x7, 0x6, 'ns/pid\x00'}}, {{0x3, 0x0, 0x0, 0xb7, 0x3, 0x4, {0x2, 0x8000, 0x8ff, 0xfffffffffffffff7, 0x8001, 0x0, 0x7, 0x6, 0x3e4, 0x4000, 0x81, r2, 0xee00, 0x8, 0x1}}, {0x4bb8, 0xffff, 0x7, 0xffff, 'ns/pid\x00'}}, {{0x1, 0x2, 0x1, 0x8, 0xfffffffc, 0x41, {0x5, 0xd4, 0x6, 0x7d, 0x6500000000000000, 0x2, 0xffff, 0x1ff, 0x2d, 0xc000, 0xff, 0x0, 0x0, 0x263, 0x8}}, {0x3, 0x9, 0x7, 0x6, 'ns/pid\x00'}}, {{0x6, 0x0, 0x9, 0x40, 0x1, 0x5, {0x6, 0x3f, 0x8, 0x7, 0x2, 0x9, 0x100, 0x6, 0x8, 0x1000, 0x253, r2, 0x0, 0xf01c, 0x8}}, {0x0, 0x6, 0x0, 0x4}}, {{0x6, 0x0, 0x2, 0x20, 0xb, 0x1, {0x2, 0x4, 0x3, 0x100000001, 0xc400000, 0x2, 0x5, 0x8, 0xffff, 0x8000, 0x3, 0x0, 0x0, 0x6, 0x2}}, {0x6, 0x5, 0x3, 0x1, '&-\''}}, {{0x6, 0x0, 0xfffffffffffffffc, 0x3, 0x5, 0x2, {0x2, 0x2, 0x1, 0x3ff, 0x1, 0x3f, 0x7fff, 0x3, 0x91a2, 0x2000, 0x333, 0x0, 0x0, 0x0, 0x3}}, {0x5, 0x1, 0x5, 0x3, '%%u\xf5['}}, {{0x1, 0x3, 0x303, 0xffff, 0x0, 0x0, {0x6, 0x5, 0x5, 0xb209, 0xfffffffffffffffd, 0xec7, 0x20, 0x6, 0x7, 0x1000, 0x101, r2, 0xee01, 0x6, 0x7}}, {0x6, 0x4, 0x7, 0x7, 'batadv\x00'}}, {{0x3, 0x2, 0x7, 0x2, 0x2, 0x2, {0x5, 0x6, 0x9, 0x1, 0xb7, 0x3, 0x75f, 0x2, 0x6, 0x6000, 0x2, r2, 0x0, 0x7, 0x6}}, {0x1, 0x2, 0x7, 0x100, 'ns/pid\x00'}}]}, 0x508) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="ffff0010", @ANYRES16=r3, @ANYBLOB="080028bd7000fbdbdf2510000000060028000000000058ff2f0000000000000030000100000008003b000900000008002c00fcffffff05002e0000000000000038000000000008003a00000000080a000900ffffffffffff0000"], 0x60}, 0x1, 0x0, 0x0, 0xc811}, 0x4040014) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 06:44:07 executing program 3: openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000000c0)) 06:44:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:07 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) getpid() openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) getegid() geteuid() socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:07 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000004c0)=0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000ec0)={0x508, 0x0, 0x0, [{{0x4, 0x2, 0xfffffffffffffc01, 0x40, 0x8, 0x4, {0x0, 0x4, 0x100000000, 0x7fffffff, 0x9, 0x8, 0x2, 0xffff, 0x9, 0xa000, 0xf00, r3, 0x0, 0x80000000, 0x4}}, {0x3, 0xc53a, 0x7, 0x6, 'ns/pid\x00'}}, {{0x3, 0x0, 0x0, 0xb7, 0x3, 0x4, {0x2, 0x8000, 0x8ff, 0xfffffffffffffff7, 0x8001, 0x0, 0x7, 0x6, 0x3e4, 0x4000, 0x81, r3, 0xee00, 0x8, 0x1}}, {0x4bb8, 0xffff, 0x7, 0xffff, 'ns/pid\x00'}}, {{0x1, 0x2, 0x1, 0x8, 0xfffffffc, 0x41, {0x5, 0xd4, 0x6, 0x7d, 0x6500000000000000, 0x2, 0xffff, 0x1ff, 0x2d, 0xc000, 0xff, 0x0, 0x0, 0x263, 0x8}}, {0x3, 0x9, 0x7, 0x6, 'ns/pid\x00'}}, {{0x6, 0x0, 0x9, 0x40, 0x1, 0x5, {0x6, 0x3f, 0x8, 0x7, 0x2, 0x9, 0x100, 0x6, 0x8, 0x1000, 0x253, r3, 0x0, 0xf01c, 0x8}}, {0x0, 0x6, 0x0, 0x4}}, {{0x6, 0x0, 0x2, 0x20, 0xb, 0x1, {0x2, 0x4, 0x3, 0x100000001, 0xc400000, 0x2, 0x5, 0x8, 0xffff, 0x8000, 0x3, 0x0, 0x0, 0x6, 0x2}}, {0x6, 0x5, 0x3, 0x1, '&-\''}}, {{0x6, 0x0, 0xfffffffffffffffc, 0x3, 0x5, 0x2, {0x2, 0x2, 0x1, 0x3ff, 0x1, 0x3f, 0x7fff, 0x3, 0x91a2, 0x2000, 0x333, 0x0, 0x0, 0x0, 0x3}}, {0x5, 0x1, 0x5, 0x3, '%%u\xf5['}}, {{0x1, 0x3, 0x303, 0xffff, 0x0, 0x0, {0x6, 0x5, 0x5, 0xb209, 0xfffffffffffffffd, 0xec7, 0x20, 0x6, 0x7, 0x1000, 0x101, r3, 0xee01, 0x6, 0x7}}, {0x6, 0x4, 0x7, 0x7, 'batadv\x00'}}, {{0x3, 0x2, 0x7, 0x2, 0x2, 0x2, {0x5, 0x6, 0x9, 0x1, 0xb7, 0x3, 0x75f, 0x2, 0x6, 0x6000, 0x2, r3, 0x0, 0x7, 0x6}}, {0x1, 0x2, 0x7, 0x100, 'ns/pid\x00'}}]}, 0x508) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000a00)=ANY=[@ANYBLOB="ffff0010", @ANYRES16=r4, @ANYBLOB="080028bd7000fbdbdf2510000000060028000000000058ff2f0000000000000030000100000008003b000900000008002c00fcffffff05002e0000000000000038000000000008003a00000000080a000900ffffffffffff0000"], 0x60}, 0x1, 0x0, 0x0, 0xc811}, 0x4040014) getsockopt$CAN_RAW_RECV_OWN_MSGS(0xffffffffffffffff, 0x65, 0x4, &(0x7f0000000380), &(0x7f00000003c0)=0x4) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f00000001c0)=[@exit_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}, @decrefs, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x13, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000100)={@ptr={0x70742a85, 0x0, &(0x7f0000000000)=""/240, 0xf0, 0x1, 0x8}, @fd, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x28, 0x40}}}], 0xcc, 0x0, &(0x7f0000000240)="0c1c1ba2f9f3dcf2b9c6222dd7fb47f3ac6cac8de9d860e988bf5f1e9b7f4816dd0857e97683fdd77716e53886997948a45e5aaf2a52efad715751254ed42a091afc4aa97e17ed6ac0c5b49785d014bd4ae8122abf68bb481da3a58080b8121a0dd4ce4abdc94bbf5bf35195c53b317ac1c2de431e228c67704ecebce365ee0ae30224709b92966ae5872af2fc1488a066e15335cd41f357c5a99543d60be610d316702589333c20f18b1e3cb7149d6b919ae9f2aff2e0d632f11f4083b89d61d75b6fcf095202a1e8007cb1"}) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r5, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_SET_MESH(r6, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x50}}, 0x40) r7 = syz_genetlink_get_family_id$wireguard(0x0) getsockopt$PNPIPE_IFINDEX(r6, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f0000000e80)={&(0x7f0000000340), 0xc, &(0x7f0000000e40)={&(0x7f0000000580)=ANY=[@ANYBLOB="04100000", @ANYRES16=r7, @ANYBLOB="020027bd7000fedbdf250000000008000100", @ANYRES32=r8, @ANYBLOB="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"], 0x458}}, 0x40001) 06:44:07 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000004c0)=0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000ec0)={0x508, 0x0, 0x0, [{{0x4, 0x2, 0xfffffffffffffc01, 0x40, 0x8, 0x4, {0x0, 0x4, 0x100000000, 0x7fffffff, 0x9, 0x8, 0x2, 0xffff, 0x9, 0xa000, 0xf00, r2, 0x0, 0x80000000, 0x4}}, {0x3, 0xc53a, 0x7, 0x6, 'ns/pid\x00'}}, {{0x3, 0x0, 0x0, 0xb7, 0x3, 0x4, {0x2, 0x8000, 0x8ff, 0xfffffffffffffff7, 0x8001, 0x0, 0x7, 0x6, 0x3e4, 0x4000, 0x81, r2, 0xee00, 0x8, 0x1}}, {0x4bb8, 0xffff, 0x7, 0xffff, 'ns/pid\x00'}}, {{0x1, 0x2, 0x1, 0x8, 0xfffffffc, 0x41, {0x5, 0xd4, 0x6, 0x7d, 0x6500000000000000, 0x2, 0xffff, 0x1ff, 0x2d, 0xc000, 0xff, 0x0, 0x0, 0x263, 0x8}}, {0x3, 0x9, 0x7, 0x6, 'ns/pid\x00'}}, {{0x6, 0x0, 0x9, 0x40, 0x1, 0x5, {0x6, 0x3f, 0x8, 0x7, 0x2, 0x9, 0x100, 0x6, 0x8, 0x1000, 0x253, r2, 0x0, 0xf01c, 0x8}}, {0x0, 0x6, 0x0, 0x4}}, {{0x6, 0x0, 0x2, 0x20, 0xb, 0x1, {0x2, 0x4, 0x3, 0x100000001, 0xc400000, 0x2, 0x5, 0x8, 0xffff, 0x8000, 0x3, 0x0, 0x0, 0x6, 0x2}}, {0x6, 0x5, 0x3, 0x1, '&-\''}}, {{0x6, 0x0, 0xfffffffffffffffc, 0x3, 0x5, 0x2, {0x2, 0x2, 0x1, 0x3ff, 0x1, 0x3f, 0x7fff, 0x3, 0x91a2, 0x2000, 0x333, 0x0, 0x0, 0x0, 0x3}}, {0x5, 0x1, 0x5, 0x3, '%%u\xf5['}}, {{0x1, 0x3, 0x303, 0xffff, 0x0, 0x0, {0x6, 0x5, 0x5, 0xb209, 0xfffffffffffffffd, 0xec7, 0x20, 0x6, 0x7, 0x1000, 0x101, r2, 0xee01, 0x6, 0x7}}, {0x6, 0x4, 0x7, 0x7, 'batadv\x00'}}, {{0x3, 0x2, 0x7, 0x2, 0x2, 0x2, {0x5, 0x6, 0x9, 0x1, 0xb7, 0x3, 0x75f, 0x2, 0x6, 0x6000, 0x2, r2, 0x0, 0x7, 0x6}}, {0x1, 0x2, 0x7, 0x100, 'ns/pid\x00'}}]}, 0x508) syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') 06:44:07 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) getuid() read$FUSE(r0, &(0x7f0000000d80)={0x2020}, 0x2020) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000000c0)) read$FUSE(r0, &(0x7f0000002dc0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004e00)={0x2020}, 0x2020) getegid() 06:44:07 executing program 3: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 06:44:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:07 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) getpid() openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) getegid() geteuid() bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:07 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000004c0)=0x0) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000ec0)={0x508, 0x0, 0x0, [{{0x4, 0x2, 0xfffffffffffffc01, 0x40, 0x8, 0x4, {0x0, 0x4, 0x100000000, 0x7fffffff, 0x9, 0x8, 0x2, 0xffff, 0x9, 0xa000, 0xf00, r2, 0x0, 0x80000000, 0x4}}, {0x3, 0xc53a, 0x7, 0x6, 'ns/pid\x00'}}, {{0x3, 0x0, 0x0, 0xb7, 0x3, 0x4, {0x2, 0x8000, 0x8ff, 0xfffffffffffffff7, 0x8001, 0x0, 0x7, 0x6, 0x3e4, 0x4000, 0x81, r2, 0xee00, 0x8, 0x1}}, {0x4bb8, 0xffff, 0x7, 0xffff, 'ns/pid\x00'}}, {{0x1, 0x2, 0x1, 0x8, 0xfffffffc, 0x41, {0x5, 0xd4, 0x6, 0x7d, 0x6500000000000000, 0x2, 0xffff, 0x1ff, 0x2d, 0xc000, 0xff, 0x0, 0x0, 0x263, 0x8}}, {0x3, 0x9, 0x7, 0x6, 'ns/pid\x00'}}, {{0x6, 0x0, 0x9, 0x40, 0x1, 0x5, {0x6, 0x3f, 0x8, 0x7, 0x2, 0x9, 0x100, 0x6, 0x8, 0x1000, 0x253, r2, 0x0, 0xf01c, 0x8}}, {0x0, 0x6, 0x0, 0x4}}, {{0x6, 0x0, 0x2, 0x20, 0xb, 0x1, {0x2, 0x4, 0x3, 0x100000001, 0xc400000, 0x2, 0x5, 0x8, 0xffff, 0x8000, 0x3, 0x0, 0x0, 0x6, 0x2}}, {0x6, 0x5, 0x3, 0x1, '&-\''}}, {{0x6, 0x0, 0xfffffffffffffffc, 0x3, 0x5, 0x2, {0x2, 0x2, 0x1, 0x3ff, 0x1, 0x3f, 0x7fff, 0x3, 0x91a2, 0x2000, 0x333, 0x0, 0x0, 0x0, 0x3}}, {0x5, 0x1, 0x5, 0x3, '%%u\xf5['}}, {{0x1, 0x3, 0x303, 0xffff, 0x0, 0x0, {0x6, 0x5, 0x5, 0xb209, 0xfffffffffffffffd, 0xec7, 0x20, 0x6, 0x7, 0x1000, 0x101, r2, 0xee01, 0x6, 0x7}}, {0x6, 0x4, 0x7, 0x7, 'batadv\x00'}}, {{0x3, 0x2, 0x7, 0x2, 0x2, 0x2, {0x5, 0x6, 0x9, 0x1, 0xb7, 0x3, 0x75f, 0x2, 0x6, 0x6000, 0x2, r2, 0x0, 0x7, 0x6}}, {0x1, 0x2, 0x7, 0x100, 'ns/pid\x00'}}]}, 0x508) 06:44:07 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) getuid() read$FUSE(r0, &(0x7f0000000d80)={0x2020}, 0x2020) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000000c0)) read$FUSE(r0, &(0x7f0000002dc0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004e00)={0x2020}, 0x2020) getegid() 06:44:07 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = getegid() r3 = geteuid() r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002440)=ANY=[@ANYBLOB="b00200009e2c9b9b52feb3b6062e669564643f4ebbe5660763da24aa4b1b5abeb4e062c4aaf2f8874bc5b99db1704aa49ee2f350d8be32795535cac227a5768a8b3bcb73265f927028d2317fb04d7d34c9256296ce54d2eacf55e4ea45391924d2830895dab82410b6a21de6039de27b7a8c95ad921b", @ANYRES64=0x0, @ANYBLOB="060000000000000002000000000000000300000000000000000000000000000000000000c000000002000000000000000600000000000000070000000000000005000000000000005000000000000000060000000000000000020000a7ffffff030000000060000020000000", @ANYRES16=r4, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=r3, @ANYRESOCT=r2, @ANYBLOB="01000100f20d0000000000000300000000000000000000000000400010000000010000002f6465762f696e7075742f6d6963650002000000000000000200000000000000934900000000000007000000000000000900000004000000020000000000000008000000000000003f0f000000000000000000000100000000000000000000006c0e00000000000027a9000004000000001000000060000007000000", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1700000002000000000000000000000000000000239a00000000000010000000870700002f6465762f696e7075742f6d69636500"], 0x2b0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x44800) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x401081) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, r5, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff, r5}, 0x78) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000002c00)={0x10c, 0x0, &(0x7f0000002a80)=[@clear_death={0x400c630f, 0x1}, @acquire_done={0x40106309, 0x3}, @increfs_done={0x40106308, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r6}, @flat=@binder={0x73622a85, 0x10a, 0x2}, @fd={0x66642a85, 0x0, r7}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002800)={@fda={0x66646185, 0x5, 0x1, 0x29}, @fd={0x66642a85, 0x0, r8}, @fd={0x66642a85, 0x0, r9}}, &(0x7f0000002880)={0x0, 0x20, 0x38}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000029c0)={@flat=@handle={0x73682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f00000028c0)=""/234, 0xea, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000003940)=""/4096, 0x1000, 0x1, 0x17}}, &(0x7f0000002a40)={0x0, 0x18, 0x40}}}], 0x20, 0x0, &(0x7f0000002bc0)="a236028c4762fdddffed98895995c3c9c4ebc9cfc3ad76c985ff0b654102bd69"}) 06:44:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:07 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) getpid() openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) getegid() bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:07 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:07 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f00000004c0)) 06:44:07 executing program 5: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) getuid() read$FUSE(r0, &(0x7f0000000d80)={0x2020}, 0x2020) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000000c0)) read$FUSE(r0, &(0x7f0000002dc0)={0x2020}, 0x2020) read$FUSE(r0, &(0x7f0000004e00)={0x2020}, 0x2020) getegid() 06:44:07 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = getegid() r3 = geteuid() r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002440)=ANY=[@ANYBLOB="b00200009e2c9b9b52feb3b6062e669564643f4ebbe5660763da24aa4b1b5abeb4e062c4aaf2f8874bc5b99db1704aa49ee2f350d8be32795535cac227a5768a8b3bcb73265f927028d2317fb04d7d34c9256296ce54d2eacf55e4ea45391924d2830895dab82410b6a21de6039de27b7a8c95ad921b", @ANYRES64=0x0, @ANYBLOB="060000000000000002000000000000000300000000000000000000000000000000000000c000000002000000000000000600000000000000070000000000000005000000000000005000000000000000060000000000000000020000a7ffffff030000000060000020000000", @ANYRES16=r4, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=r3, @ANYRESOCT=r2, @ANYBLOB="01000100f20d0000000000000300000000000000000000000000400010000000010000002f6465762f696e7075742f6d6963650002000000000000000200000000000000934900000000000007000000000000000900000004000000020000000000000008000000000000003f0f000000000000000000000100000000000000000000006c0e00000000000027a9000004000000001000000060000007000000", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0100000009000000000000000200000000000000000000000000000010000000020000002f6465762f696e7075742f6d6963650003000000000000007f0000000000000008000000000000008946ffffffffffff000200000200000005000000000000000400ea000000000000040000000000000006000000002000000800000000000000edc00000000000000080000001000000ffffffff00c00000080000191aae52ea5f8d4c1f5c436eb8c31c116f91a311297b4af025ba0fbd54641ebe9f5a3555e8416500e6aeb3449c319ff5d35930b39164b6764ce6ed74e57ff9250e369b3e49158b6ab260be521b5cd5373660f628bbe2069c84d181fa7939ef76fe53b62a", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1700000002000000000000000000000000000000239a00000000000010000000870700002f6465762f696e7075742f6d69636500"], 0x2b0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x44800) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x401081) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, r5, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff, r5}, 0x78) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000002c00)={0x10c, 0x0, &(0x7f0000002a80)=[@clear_death={0x400c630f, 0x1}, @acquire_done={0x40106309, 0x3}, @increfs_done={0x40106308, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r6}, @flat=@binder={0x73622a85, 0x10a, 0x2}, @fd={0x66642a85, 0x0, r7}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002800)={@fda={0x66646185, 0x5, 0x1, 0x29}, @fd={0x66642a85, 0x0, r8}, @fd={0x66642a85, 0x0, r9}}, &(0x7f0000002880)={0x0, 0x20, 0x38}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000029c0)={@flat=@handle={0x73682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f00000028c0)=""/234, 0xea, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000003940)=""/4096, 0x1000, 0x1, 0x17}}, &(0x7f0000002a40)={0x0, 0x18, 0x40}}}], 0x20, 0x0, &(0x7f0000002bc0)="a236028c4762fdddffed98895995c3c9c4ebc9cfc3ad76c985ff0b654102bd69"}) 06:44:07 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:08 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) getpid() openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:08 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)) 06:44:08 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:08 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = getegid() r3 = geteuid() r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002440)=ANY=[@ANYBLOB="b00200009e2c9b9b52feb3b6062e669564643f4ebbe5660763da24aa4b1b5abeb4e062c4aaf2f8874bc5b99db1704aa49ee2f350d8be32795535cac227a5768a8b3bcb73265f927028d2317fb04d7d34c9256296ce54d2eacf55e4ea45391924d2830895dab82410b6a21de6039de27b7a8c95ad921b", @ANYRES64=0x0, @ANYBLOB="060000000000000002000000000000000300000000000000000000000000000000000000c000000002000000000000000600000000000000070000000000000005000000000000005000000000000000060000000000000000020000a7ffffff030000000060000020000000", @ANYRES16=r4, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=r3, @ANYRESOCT=r2, @ANYBLOB="01000100f20d0000000000000300000000000000000000000000400010000000010000002f6465762f696e7075742f6d6963650002000000000000000200000000000000934900000000000007000000000000000900000004000000020000000000000008000000000000003f0f000000000000000000000100000000000000000000006c0e00000000000027a9000004000000001000000060000007000000", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1700000002000000000000000000000000000000239a00000000000010000000870700002f6465762f696e7075742f6d69636500"], 0x2b0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x44800) r6 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x401081) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r8, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, r5, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff, r5}, 0x78) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000002c00)={0x10c, 0x0, &(0x7f0000002a80)=[@clear_death={0x400c630f, 0x1}, @acquire_done={0x40106309, 0x3}, @increfs_done={0x40106308, 0x3}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r6}, @flat=@binder={0x73622a85, 0x10a, 0x2}, @fd={0x66642a85, 0x0, r7}}, &(0x7f00000001c0)={0x0, 0x18, 0x30}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x50, 0x18, &(0x7f0000002800)={@fda={0x66646185, 0x5, 0x1, 0x29}, @fd={0x66642a85, 0x0, r8}, @fd={0x66642a85, 0x0, r9}}, &(0x7f0000002880)={0x0, 0x20, 0x38}}, 0x400}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000029c0)={@flat=@handle={0x73682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f00000028c0)=""/234, 0xea, 0x1, 0x25}, @ptr={0x70742a85, 0x0, &(0x7f0000003940)=""/4096, 0x1000, 0x1, 0x17}}, &(0x7f0000002a40)={0x0, 0x18, 0x40}}}], 0x20, 0x0, &(0x7f0000002bc0)="a236028c4762fdddffed98895995c3c9c4ebc9cfc3ad76c985ff0b654102bd69"}) 06:44:08 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) getpid() openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) getegid() bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:08 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)) 06:44:08 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:08 executing program 1: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:08 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = getegid() r3 = geteuid() r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002440)=ANY=[@ANYBLOB="b00200009e2c9b9b52feb3b6062e669564643f4ebbe5660763da24aa4b1b5abeb4e062c4aaf2f8874bc5b99db1704aa49ee2f350d8be32795535cac227a5768a8b3bcb73265f927028d2317fb04d7d34c9256296ce54d2eacf55e4ea45391924d2830895dab82410b6a21de6039de27b7a8c95ad921b", @ANYRES64=0x0, @ANYBLOB="060000000000000002000000000000000300000000000000000000000000000000000000c000000002000000000000000600000000000000070000000000000005000000000000005000000000000000060000000000000000020000a7ffffff030000000060000020000000", @ANYRES16=r4, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=r3, @ANYRESOCT=r2, @ANYBLOB="01000100f20d0000000000000300000000000000000000000000400010000000010000002f6465762f696e7075742f6d6963650002000000000000000200000000000000934900000000000007000000000000000900000004000000020000000000000008000000000000003f0f000000000000000000000100000000000000000000006c0e00000000000027a9000004000000001000000060000007000000", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1700000002000000000000000000000000000000239a00000000000010000000870700002f6465762f696e7075742f6d69636500"], 0x2b0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x44800) openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x401081) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, r5, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff, r5}, 0x78) 06:44:08 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) getpid() openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) getegid() bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:08 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:08 executing program 1: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:08 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)) 06:44:08 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = getegid() r3 = geteuid() r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002440)=ANY=[@ANYBLOB="b00200009e2c9b9b52feb3b6062e669564643f4ebbe5660763da24aa4b1b5abeb4e062c4aaf2f8874bc5b99db1704aa49ee2f350d8be32795535cac227a5768a8b3bcb73265f927028d2317fb04d7d34c9256296ce54d2eacf55e4ea45391924d2830895dab82410b6a21de6039de27b7a8c95ad921b", @ANYRES64=0x0, @ANYBLOB="060000000000000002000000000000000300000000000000000000000000000000000000c000000002000000000000000600000000000000070000000000000005000000000000005000000000000000060000000000000000020000a7ffffff030000000060000020000000", @ANYRES16=r4, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=r3, @ANYRESOCT=r2, @ANYBLOB="01000100f20d0000000000000300000000000000000000000000400010000000010000002f6465762f696e7075742f6d6963650002000000000000000200000000000000934900000000000007000000000000000900000004000000020000000000000008000000000000003f0f000000000000000000000100000000000000000000006c0e00000000000027a9000004000000001000000060000007000000", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1700000002000000000000000000000000000000239a00000000000010000000870700002f6465762f696e7075742f6d69636500"], 0x2b0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x44800) openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x401081) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) 06:44:08 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:08 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) getpid() openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) getegid() bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:08 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000004c0)) 06:44:08 executing program 1: sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:08 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = getegid() r3 = geteuid() r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002440)=ANY=[@ANYBLOB="b00200009e2c9b9b52feb3b6062e669564643f4ebbe5660763da24aa4b1b5abeb4e062c4aaf2f8874bc5b99db1704aa49ee2f350d8be32795535cac227a5768a8b3bcb73265f927028d2317fb04d7d34c9256296ce54d2eacf55e4ea45391924d2830895dab82410b6a21de6039de27b7a8c95ad921b", @ANYRES64=0x0, @ANYBLOB="060000000000000002000000000000000300000000000000000000000000000000000000c000000002000000000000000600000000000000070000000000000005000000000000005000000000000000060000000000000000020000a7ffffff030000000060000020000000", @ANYRES16=r4, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=r3, @ANYRESOCT=r2, @ANYBLOB="01000100f20d0000000000000300000000000000000000000000400010000000010000002f6465762f696e7075742f6d6963650002000000000000000200000000000000934900000000000007000000000000000900000004000000020000000000000008000000000000003f0f000000000000000000000100000000000000000000006c0e00000000000027a9000004000000001000000060000007000000", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1700000002000000000000000000000000000000239a00000000000010000000870700002f6465762f696e7075742f6d69636500"], 0x2b0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x44800) openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x401081) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) 06:44:08 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 06:44:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:08 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:08 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) getpid() openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:08 executing program 4: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000004c0)) 06:44:08 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = getegid() r3 = geteuid() r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002440)=ANY=[@ANYBLOB="b00200009e2c9b9b52feb3b6062e669564643f4ebbe5660763da24aa4b1b5abeb4e062c4aaf2f8874bc5b99db1704aa49ee2f350d8be32795535cac227a5768a8b3bcb73265f927028d2317fb04d7d34c9256296ce54d2eacf55e4ea45391924d2830895dab82410b6a21de6039de27b7a8c95ad921b", @ANYRES64=0x0, @ANYBLOB="060000000000000002000000000000000300000000000000000000000000000000000000c000000002000000000000000600000000000000070000000000000005000000000000005000000000000000060000000000000000020000a7ffffff030000000060000020000000", @ANYRES16=r4, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=r3, @ANYRESOCT=r2, @ANYBLOB="01000100f20d0000000000000300000000000000000000000000400010000000010000002f6465762f696e7075742f6d6963650002000000000000000200000000000000934900000000000007000000000000000900000004000000020000000000000008000000000000003f0f000000000000000000000100000000000000000000006c0e00000000000027a9000004000000001000000060000007000000", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0100000009000000000000000200000000000000000000000000000010000000020000002f6465762f696e7075742f6d6963650003000000000000007f0000000000000008000000000000008946ffffffffffff000200000200000005000000000000000400ea000000000000040000000000000006000000002000000800000000000000edc00000000000000080000001000000ffffffff00c00000080000191aae52ea5f8d4c1f5c436eb8c31c116f91a311297b4af025ba0fbd54641ebe9f5a3555e8416500e6aeb3449c319ff5d35930b39164b6764ce6ed74e57ff9250e369b3e49158b6ab260be521b5cd5373660f628bbe2069c84d181fa7939ef76fe53b62a", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1700000002000000000000000000000000000000239a00000000000010000000870700002f6465762f696e7075742f6d69636500"], 0x2b0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x44800) openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x401081) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) 06:44:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0}}, 0x800) 06:44:08 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 06:44:08 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000004c0)) 06:44:08 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) getpid() bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:08 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:08 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={0x0}}, 0x0) 06:44:09 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = getegid() r3 = geteuid() r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002440)=ANY=[@ANYBLOB="b00200009e2c9b9b52feb3b6062e669564643f4ebbe5660763da24aa4b1b5abeb4e062c4aaf2f8874bc5b99db1704aa49ee2f350d8be32795535cac227a5768a8b3bcb73265f927028d2317fb04d7d34c9256296ce54d2eacf55e4ea45391924d2830895dab82410b6a21de6039de27b7a8c95ad921b", @ANYRES64=0x0, @ANYBLOB="060000000000000002000000000000000300000000000000000000000000000000000000c000000002000000000000000600000000000000070000000000000005000000000000005000000000000000060000000000000000020000a7ffffff030000000060000020000000", @ANYRES16=r4, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=r3, @ANYRESOCT=r2, @ANYBLOB="01000100f20d0000000000000300000000000000000000000000400010000000010000002f6465762f696e7075742f6d6963650002000000000000000200000000000000934900000000000007000000000000000900000004000000020000000000000008000000000000003f0f000000000000000000000100000000000000000000006c0e00000000000027a9000004000000001000000060000007000000", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0100000009000000000000000200000000000000000000000000000010000000020000002f6465762f696e7075742f6d6963650003000000000000007f0000000000000008000000000000008946ffffffffffff000200000200000005000000000000000400ea000000000000040000000000000006000000002000000800000000000000edc00000000000000080000001000000ffffffff00c00000080000191aae52ea5f8d4c1f5c436eb8c31c116f91a311297b4af025ba0fbd54641ebe9f5a3555e8416500e6aeb3449c319ff5d35930b39164b6764ce6ed74e57ff9250e369b3e49158b6ab260be521b5cd5373660f628bbe2069c84d181fa7939ef76fe53b62a", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1700000002000000000000000000000000000000239a00000000000010000000870700002f6465762f696e7075742f6d69636500"], 0x2b0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x44800) openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x401081) socket$inet6_udplite(0xa, 0x2, 0x88) 06:44:09 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 06:44:09 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:09 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:09 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x0, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:09 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000004c0)) 06:44:09 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = getegid() r3 = geteuid() r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002440)=ANY=[@ANYBLOB="b00200009e2c9b9b52feb3b6062e669564643f4ebbe5660763da24aa4b1b5abeb4e062c4aaf2f8874bc5b99db1704aa49ee2f350d8be32795535cac227a5768a8b3bcb73265f927028d2317fb04d7d34c9256296ce54d2eacf55e4ea45391924d2830895dab82410b6a21de6039de27b7a8c95ad921b", @ANYRES64=0x0, @ANYBLOB="060000000000000002000000000000000300000000000000000000000000000000000000c000000002000000000000000600000000000000070000000000000005000000000000005000000000000000060000000000000000020000a7ffffff030000000060000020000000", @ANYRES16=r4, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=r3, @ANYRESOCT=r2, @ANYBLOB="01000100f20d0000000000000300000000000000000000000000400010000000010000002f6465762f696e7075742f6d6963650002000000000000000200000000000000934900000000000007000000000000000900000004000000020000000000000008000000000000003f0f000000000000000000000100000000000000000000006c0e00000000000027a9000004000000001000000060000007000000", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1700000002000000000000000000000000000000239a00000000000010000000870700002f6465762f696e7075742f6d69636500"], 0x2b0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x44800) openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x401081) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r5, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r6, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) 06:44:09 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = getegid() r3 = geteuid() r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002440)=ANY=[@ANYBLOB="b00200009e2c9b9b52feb3b6062e669564643f4ebbe5660763da24aa4b1b5abeb4e062c4aaf2f8874bc5b99db1704aa49ee2f350d8be32795535cac227a5768a8b3bcb73265f927028d2317fb04d7d34c9256296ce54d2eacf55e4ea45391924d2830895dab82410b6a21de6039de27b7a8c95ad921b", @ANYRES64=0x0, @ANYBLOB="060000000000000002000000000000000300000000000000000000000000000000000000c000000002000000000000000600000000000000070000000000000005000000000000005000000000000000060000000000000000020000a7ffffff030000000060000020000000", @ANYRES16=r4, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=r3, @ANYRESOCT=r2, @ANYBLOB="01000100f20d0000000000000300000000000000000000000000400010000000010000002f6465762f696e7075742f6d6963650002000000000000000200000000000000934900000000000007000000000000000900000004000000020000000000000008000000000000003f0f000000000000000000000100000000000000000000006c0e00000000000027a9000004000000001000000060000007000000", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1700000002000000000000000000000000000000239a00000000000010000000870700002f6465762f696e7075742f6d69636500"], 0x2b0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x44800) openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0x401081) 06:44:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:09 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x0, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, 0x0, 0x800) 06:44:09 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000004c0)) 06:44:09 executing program 0: ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x4dc7) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0xf0ffffff7f0000) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) 06:44:09 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = getegid() r3 = geteuid() r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002440)=ANY=[@ANYBLOB="b00200009e2c9b9b52feb3b6062e669564643f4ebbe5660763da24aa4b1b5abeb4e062c4aaf2f8874bc5b99db1704aa49ee2f350d8be32795535cac227a5768a8b3bcb73265f927028d2317fb04d7d34c9256296ce54d2eacf55e4ea45391924d2830895dab82410b6a21de6039de27b7a8c95ad921b", @ANYRES64=0x0, @ANYBLOB="060000000000000002000000000000000300000000000000000000000000000000000000c000000002000000000000000600000000000000070000000000000005000000000000005000000000000000060000000000000000020000a7ffffff030000000060000020000000", @ANYRES16=r4, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=r3, @ANYRESOCT=r2, @ANYBLOB="01000100f20d0000000000000300000000000000000000000000400010000000010000002f6465762f696e7075742f6d6963650002000000000000000200000000000000934900000000000007000000000000000900000004000000020000000000000008000000000000003f0f000000000000000000000100000000000000000000006c0e00000000000027a9000004000000001000000060000007000000", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1700000002000000000000000000000000000000239a00000000000010000000870700002f6465762f696e7075742f6d69636500"], 0x2b0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x44800) 06:44:09 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) 06:44:09 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000004c0)) 06:44:09 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x0, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, 0x0, 0x800) 06:44:09 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x3, 0x2, 0x0, 0x4, 0x0, 0x1}, 0x4) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x8, 0x4) getsockname(r0, &(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x80) 06:44:09 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:09 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) 06:44:09 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = getegid() r3 = geteuid() r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002440)=ANY=[@ANYBLOB="b00200009e2c9b9b52feb3b6062e669564643f4ebbe5660763da24aa4b1b5abeb4e062c4aaf2f8874bc5b99db1704aa49ee2f350d8be32795535cac227a5768a8b3bcb73265f927028d2317fb04d7d34c9256296ce54d2eacf55e4ea45391924d2830895dab82410b6a21de6039de27b7a8c95ad921b", @ANYRES64=0x0, @ANYBLOB="060000000000000002000000000000000300000000000000000000000000000000000000c000000002000000000000000600000000000000070000000000000005000000000000005000000000000000060000000000000000020000a7ffffff030000000060000020000000", @ANYRES16=r4, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=r3, @ANYRESOCT=r2, @ANYBLOB="01000100f20d0000000000000300000000000000000000000000400010000000010000002f6465762f696e7075742f6d6963650002000000000000000200000000000000934900000000000007000000000000000900000004000000020000000000000008000000000000003f0f000000000000000000000100000000000000000000006c0e00000000000027a9000004000000001000000060000007000000", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="0100000009000000000000000200000000000000000000000000000010000000020000002f6465762f696e7075742f6d6963650003000000000000007f0000000000000008000000000000008946ffffffffffff000200000200000005000000000000000400ea000000000000040000000000000006000000002000000800000000000000edc00000000000000080000001000000ffffffff00c00000080000191aae52ea5f8d4c1f5c436eb8c31c116f91a311297b4af025ba0fbd54641ebe9f5a3555e8416500e6aeb3449c319ff5d35930b39164b6764ce6ed74e57ff9250e369b3e49158b6ab260be521b5cd5373660f628bbe2069c84d181fa7939ef76fe53b62a", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1700000002000000000000000000000000000000239a00000000000010000000870700002f6465762f696e7075742f6d69636500"], 0x2b0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) 06:44:09 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)) 06:44:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, 0x0, 0x800) 06:44:09 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x3, 0x2, 0x0, 0x4, 0x0, 0x1}, 0x4) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x8, 0x4) getsockname(r0, &(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x80) 06:44:09 executing program 5: bpf$PROG_LOAD(0x5, 0x0, 0x0) 06:44:09 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:09 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)) 06:44:09 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) r2 = getegid() r3 = geteuid() r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000002440)=ANY=[@ANYBLOB="b00200009e2c9b9b52feb3b6062e669564643f4ebbe5660763da24aa4b1b5abeb4e062c4aaf2f8874bc5b99db1704aa49ee2f350d8be32795535cac227a5768a8b3bcb73265f927028d2317fb04d7d34c9256296ce54d2eacf55e4ea45391924d2830895dab82410b6a21de6039de27b7a8c95ad921b", @ANYRES64=0x0, @ANYBLOB="060000000000000002000000000000000300000000000000000000000000000000000000c000000002000000000000000600000000000000070000000000000005000000000000005000000000000000060000000000000000020000a7ffffff030000000060000020000000", @ANYRES16=r4, @ANYRES32=r2, @ANYRESHEX=r0, @ANYRES32=r3, @ANYRESOCT=r2, @ANYBLOB="01000100f20d0000000000000300000000000000000000000000400010000000010000002f6465762f696e7075742f6d6963650002000000000000000200000000000000934900000000000007000000000000000900000004000000020000000000000008000000000000003f0f000000000000000000000100000000000000000000006c0e00000000000027a9000004000000001000000060000007000000", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="1700000002000000000000000000000000000000239a00000000000010000000870700002f6465762f696e7075742f6d69636500"], 0x2b0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) 06:44:09 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x3, 0x2, 0x0, 0x4, 0x0, 0x1}, 0x4) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x8, 0x4) getsockname(r0, &(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x80) 06:44:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x0, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:09 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:09 executing program 4: syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000004c0)) 06:44:09 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) getegid() geteuid() r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) 06:44:09 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x3, 0x2, 0x0, 0x4, 0x0, 0x1}, 0x4) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x0) getsockname(r0, &(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x80) 06:44:09 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:09 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x0, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:10 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:10 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000480)='ns/pid\x00') ioctl$NS_GET_OWNER_UID(r0, 0xb704, 0x0) 06:44:10 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) getegid() geteuid() socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) 06:44:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:10 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x3, 0x2, 0x0, 0x4, 0x0, 0x1}, 0x4) getsockname(r0, &(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x80) 06:44:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x0, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:10 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:10 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) getegid() geteuid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) 06:44:10 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd_index=0x3, 0x2, 0x0, 0x4, 0x0, 0x1}, 0x4) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x0) getsockname(r0, &(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x80) 06:44:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20040000}, 0x800) 06:44:10 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockname(r0, &(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x80) 06:44:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:10 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x4, &(0x7f0000000200)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:10 executing program 4: r0 = syz_open_procfs$namespace(0xffffffffffffffff, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f00000004c0)) 06:44:10 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x800) 06:44:10 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) 06:44:10 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockname(r0, &(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x80) 06:44:10 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:10 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:11 executing program 4: process_madvise(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000000c0)="85f6fbeceea1d49fe1bd630e1ee4bcac1d3f932b6dfdffd72a3fab1ebff3fc5808ff655486c0531cebf682c1c9a9f0ba4b25abb05ca508d594688eaab36353b9f51241d9e1baf75d8af7fb98da5d9347a838bb4298e21601b9b724ee3d40ea5ed437f40d3abbb8840840236bf02838134ac37967ee97fc6d03d6f203bf4b5a76b2eeafb1296fbcac9d9839458e8ca0436d49e79b7fc419f07823104498997a55cb532cfd0bd377e781e26751efc298dcc111e367e3cca460fc6a9a6bad98ba5518356a80c884e3dccd10e77b62347d0f840046a53522899b993a3fb08d", 0xdd}, {&(0x7f00000001c0)="fc924516c06e41bb3b1525d4da310a02accd469d7b5309dafd16d46dcd7a99edc986110ae09e0084190cdf69ca862d3cd676d7d2e5fecec6de32176962c18ecebfa97c07484eb329621d24b5a3a947f51d7be231fd23807755cc22e83a7bcb5116ab2cdaa373070acda03e67a7f4ad0fabfcfb97f11e74ebb2f1d8022a28fbcbed61c1a1ab2774116f4c8a2cc580dec57db5b683e59576f86330f3460f4015c2ca5a8a632dc8661f55783d6143e508bbe3f3fd2080945c6a7a822668864771d076dfdf2cc57d8958a3ec3ab0f105a7279d", 0xd1}, {&(0x7f00000002c0)="d51a910cf1a824682c4d044ba1a41fb35daf44e49473541894e0a7e6f5fac3cc0b4625e000378d9f", 0x28}, {&(0x7f0000000300)="f3e7bdd7e58ea1352b7671e7a54deb351ff4faf69815e8381613e3dae3b4d1c325c57a85daab52d7436542293d5c28efe20c2cf9b774179c10e5f25ae23dd3eee884fea8bac3827fb2f3e48e023ba05a6f8c48c96f98050c5af4fcc1b432f7df0635e046236dff55cc0964b108ead9d24993206e88097c1ab17772c8a32a66d23306a7e9ea38c5bd56a915fff7e7e6d5190a808d2f9eaafe9e501b6b4a1fc1d8e7c5e2093c4338b261eee5f1bcef00fb60e7760be709369dfb88e423f0c4969ffdce25cddf", 0xc5}, {&(0x7f0000000400)="e662761b01c6198e19083121780edc7f430fc7da78f0dc637b5f91d118e48d9f994d1414159064604e0f1a0b0d4b591c48ba87761364ee565ad5a4aced3cc7f2c2783a7d1b2cfad2333ccf5957aaa792ae4f87b5803ec840017221f7026b8dcfbaf97b35caa54cad8536a9e169a64fb2d4ad00aed6d6167d071777adc13b58f46a20cd6ebd16bbe373e8cba4dedc4c1d18ec32941bb677725702d15f8addd9c047701ad09ce53cfa8cd37b7dc17677da53e2ded17f8384c79ccfa52a4e270a0133be57dc932a58a2a8a9de7acee8068b9c89c07f62b975b594c28788d67d51d461bc75d10ff367b7f662a714075fc4b0072d", 0xf2}, {&(0x7f0000000500)="38bb51110b1351af5a10406b9cc64bcae472a64afac9bcbefd4f63a4d83b78452ac2e57c7ac9d2cda083edef", 0x2c}], 0x6, 0x14, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000640)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x7810, 0x7, 0xbd0c, 0x6, {{0x1d, 0x4, 0x3, 0x9, 0x74, 0x66, 0x0, 0xff, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x34, 0xd4, 0x1, 0x8, [{@private=0x800, 0x907}, {@broadcast, 0x1}, {@local, 0x1}, {@empty, 0xfffff4d4}, {@rand_addr=0x64010102, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @noop, @timestamp={0x44, 0x24, 0xdb, 0x0, 0xb, [0x6920, 0x4000, 0x5, 0x3, 0xf4, 0x400, 0x4, 0xa3]}, @ra={0x94, 0x4}]}}}}}) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ttyS3\x00', 0x204000, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@can={{0x0, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "ca99a38f7c5336be"}, 0x10}}, 0x881) 06:44:11 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 06:44:11 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x80) 06:44:11 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) 06:44:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:11 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x80) 06:44:11 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000000)={0x49, 0x29, 0x2, {0x2, [{{0x80, 0x4, 0x4000000000}, 0xfffffffffffffff7, 0x63, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x4ef5dc7d, 0x20, 0xfffffffffffffedb, './file0'}]}}, 0x49) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) setns(r1, 0x40000000) 06:44:11 executing program 4: process_madvise(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000000c0)="85f6fbeceea1d49fe1bd630e1ee4bcac1d3f932b6dfdffd72a3fab1ebff3fc5808ff655486c0531cebf682c1c9a9f0ba4b25abb05ca508d594688eaab36353b9f51241d9e1baf75d8af7fb98da5d9347a838bb4298e21601b9b724ee3d40ea5ed437f40d3abbb8840840236bf02838134ac37967ee97fc6d03d6f203bf4b5a76b2eeafb1296fbcac9d9839458e8ca0436d49e79b7fc419f07823104498997a55cb532cfd0bd377e781e26751efc298dcc111e367e3cca460fc6a9a6bad98ba5518356a80c884e3dccd10e77b62347d0f840046a53522899b993a3fb08d", 0xdd}, {&(0x7f00000001c0)="fc924516c06e41bb3b1525d4da310a02accd469d7b5309dafd16d46dcd7a99edc986110ae09e0084190cdf69ca862d3cd676d7d2e5fecec6de32176962c18ecebfa97c07484eb329621d24b5a3a947f51d7be231fd23807755cc22e83a7bcb5116ab2cdaa373070acda03e67a7f4ad0fabfcfb97f11e74ebb2f1d8022a28fbcbed61c1a1ab2774116f4c8a2cc580dec57db5b683e59576f86330f3460f4015c2ca5a8a632dc8661f55783d6143e508bbe3f3fd2080945c6a7a822668864771d076dfdf2cc57d8958a3ec3ab0f105a7279d", 0xd1}, {&(0x7f00000002c0)="d51a910cf1a824682c4d044ba1a41fb35daf44e49473541894e0a7e6f5fac3cc0b4625e000378d9f", 0x28}, {&(0x7f0000000300)="f3e7bdd7e58ea1352b7671e7a54deb351ff4faf69815e8381613e3dae3b4d1c325c57a85daab52d7436542293d5c28efe20c2cf9b774179c10e5f25ae23dd3eee884fea8bac3827fb2f3e48e023ba05a6f8c48c96f98050c5af4fcc1b432f7df0635e046236dff55cc0964b108ead9d24993206e88097c1ab17772c8a32a66d23306a7e9ea38c5bd56a915fff7e7e6d5190a808d2f9eaafe9e501b6b4a1fc1d8e7c5e2093c4338b261eee5f1bcef00fb60e7760be709369dfb88e423f0c4969ffdce25cddf", 0xc5}, {&(0x7f0000000400)="e662761b01c6198e19083121780edc7f430fc7da78f0dc637b5f91d118e48d9f994d1414159064604e0f1a0b0d4b591c48ba87761364ee565ad5a4aced3cc7f2c2783a7d1b2cfad2333ccf5957aaa792ae4f87b5803ec840017221f7026b8dcfbaf97b35caa54cad8536a9e169a64fb2d4ad00aed6d6167d071777adc13b58f46a20cd6ebd16bbe373e8cba4dedc4c1d18ec32941bb677725702d15f8addd9c047701ad09ce53cfa8cd37b7dc17677da53e2ded17f8384c79ccfa52a4e270a0133be57dc932a58a2a8a9de7acee8068b9c89c07f62b975b594c28788d67d51d461bc75d10ff367b7f662a714075fc4b0072d", 0xf2}, {&(0x7f0000000500)="38bb51110b1351af5a10406b9cc64bcae472a64afac9bcbefd4f63a4d83b78452ac2e57c7ac9d2cda083edef", 0x2c}], 0x6, 0x14, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000640)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x7810, 0x7, 0xbd0c, 0x6, {{0x1d, 0x4, 0x3, 0x9, 0x74, 0x66, 0x0, 0xff, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x34, 0xd4, 0x1, 0x8, [{@private=0x800, 0x907}, {@broadcast, 0x1}, {@local, 0x1}, {@empty, 0xfffff4d4}, {@rand_addr=0x64010102, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @noop, @timestamp={0x44, 0x24, 0xdb, 0x0, 0xb, [0x6920, 0x4000, 0x5, 0x3, 0xf4, 0x400, 0x4, 0xa3]}, @ra={0x94, 0x4}]}}}}}) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ttyS3\x00', 0x204000, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@can={{0x0, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "ca99a38f7c5336be"}, 0x10}}, 0x881) 06:44:11 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) 06:44:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:11 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) getsockname(0xffffffffffffffff, &(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x80) 06:44:11 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000000)={0x49, 0x29, 0x2, {0x2, [{{0x80, 0x4, 0x4000000000}, 0xfffffffffffffff7, 0x63, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x4ef5dc7d, 0x20, 0xfffffffffffffedb, './file0'}]}}, 0x49) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) setns(r1, 0x40000000) 06:44:11 executing program 4: process_madvise(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000000c0)="85f6fbeceea1d49fe1bd630e1ee4bcac1d3f932b6dfdffd72a3fab1ebff3fc5808ff655486c0531cebf682c1c9a9f0ba4b25abb05ca508d594688eaab36353b9f51241d9e1baf75d8af7fb98da5d9347a838bb4298e21601b9b724ee3d40ea5ed437f40d3abbb8840840236bf02838134ac37967ee97fc6d03d6f203bf4b5a76b2eeafb1296fbcac9d9839458e8ca0436d49e79b7fc419f07823104498997a55cb532cfd0bd377e781e26751efc298dcc111e367e3cca460fc6a9a6bad98ba5518356a80c884e3dccd10e77b62347d0f840046a53522899b993a3fb08d", 0xdd}, {&(0x7f00000001c0)="fc924516c06e41bb3b1525d4da310a02accd469d7b5309dafd16d46dcd7a99edc986110ae09e0084190cdf69ca862d3cd676d7d2e5fecec6de32176962c18ecebfa97c07484eb329621d24b5a3a947f51d7be231fd23807755cc22e83a7bcb5116ab2cdaa373070acda03e67a7f4ad0fabfcfb97f11e74ebb2f1d8022a28fbcbed61c1a1ab2774116f4c8a2cc580dec57db5b683e59576f86330f3460f4015c2ca5a8a632dc8661f55783d6143e508bbe3f3fd2080945c6a7a822668864771d076dfdf2cc57d8958a3ec3ab0f105a7279d", 0xd1}, {&(0x7f00000002c0)="d51a910cf1a824682c4d044ba1a41fb35daf44e49473541894e0a7e6f5fac3cc0b4625e000378d9f", 0x28}, {&(0x7f0000000300)="f3e7bdd7e58ea1352b7671e7a54deb351ff4faf69815e8381613e3dae3b4d1c325c57a85daab52d7436542293d5c28efe20c2cf9b774179c10e5f25ae23dd3eee884fea8bac3827fb2f3e48e023ba05a6f8c48c96f98050c5af4fcc1b432f7df0635e046236dff55cc0964b108ead9d24993206e88097c1ab17772c8a32a66d23306a7e9ea38c5bd56a915fff7e7e6d5190a808d2f9eaafe9e501b6b4a1fc1d8e7c5e2093c4338b261eee5f1bcef00fb60e7760be709369dfb88e423f0c4969ffdce25cddf", 0xc5}, {&(0x7f0000000400)="e662761b01c6198e19083121780edc7f430fc7da78f0dc637b5f91d118e48d9f994d1414159064604e0f1a0b0d4b591c48ba87761364ee565ad5a4aced3cc7f2c2783a7d1b2cfad2333ccf5957aaa792ae4f87b5803ec840017221f7026b8dcfbaf97b35caa54cad8536a9e169a64fb2d4ad00aed6d6167d071777adc13b58f46a20cd6ebd16bbe373e8cba4dedc4c1d18ec32941bb677725702d15f8addd9c047701ad09ce53cfa8cd37b7dc17677da53e2ded17f8384c79ccfa52a4e270a0133be57dc932a58a2a8a9de7acee8068b9c89c07f62b975b594c28788d67d51d461bc75d10ff367b7f662a714075fc4b0072d", 0xf2}, {&(0x7f0000000500)="38bb51110b1351af5a10406b9cc64bcae472a64afac9bcbefd4f63a4d83b78452ac2e57c7ac9d2cda083edef", 0x2c}], 0x6, 0x14, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000640)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x7810, 0x7, 0xbd0c, 0x6, {{0x1d, 0x4, 0x3, 0x9, 0x74, 0x66, 0x0, 0xff, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x34, 0xd4, 0x1, 0x8, [{@private=0x800, 0x907}, {@broadcast, 0x1}, {@local, 0x1}, {@empty, 0xfffff4d4}, {@rand_addr=0x64010102, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @noop, @timestamp={0x44, 0x24, 0xdb, 0x0, 0xb, [0x6920, 0x4000, 0x5, 0x3, 0xf4, 0x400, 0x4, 0xa3]}, @ra={0x94, 0x4}]}}}}}) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ttyS3\x00', 0x204000, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, 0x0, 0x0) sendmsg$can_raw(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=@can={{0x0, 0x1, 0x1}, 0x5, 0x1, 0x0, 0x0, "ca99a38f7c5336be"}, 0x10}}, 0x881) 06:44:11 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) 06:44:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x5, &(0x7f0000000200)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @alu={0x4, 0x1, 0x6, 0x0, 0xa, 0xffffffffffffffc0, 0x8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:11 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockname(r0, &(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x80) 06:44:11 executing program 4: process_madvise(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000000c0)="85f6fbeceea1d49fe1bd630e1ee4bcac1d3f932b6dfdffd72a3fab1ebff3fc5808ff655486c0531cebf682c1c9a9f0ba4b25abb05ca508d594688eaab36353b9f51241d9e1baf75d8af7fb98da5d9347a838bb4298e21601b9b724ee3d40ea5ed437f40d3abbb8840840236bf02838134ac37967ee97fc6d03d6f203bf4b5a76b2eeafb1296fbcac9d9839458e8ca0436d49e79b7fc419f07823104498997a55cb532cfd0bd377e781e26751efc298dcc111e367e3cca460fc6a9a6bad98ba5518356a80c884e3dccd10e77b62347d0f840046a53522899b993a3fb08d", 0xdd}, {&(0x7f00000001c0)="fc924516c06e41bb3b1525d4da310a02accd469d7b5309dafd16d46dcd7a99edc986110ae09e0084190cdf69ca862d3cd676d7d2e5fecec6de32176962c18ecebfa97c07484eb329621d24b5a3a947f51d7be231fd23807755cc22e83a7bcb5116ab2cdaa373070acda03e67a7f4ad0fabfcfb97f11e74ebb2f1d8022a28fbcbed61c1a1ab2774116f4c8a2cc580dec57db5b683e59576f86330f3460f4015c2ca5a8a632dc8661f55783d6143e508bbe3f3fd2080945c6a7a822668864771d076dfdf2cc57d8958a3ec3ab0f105a7279d", 0xd1}, {&(0x7f00000002c0)="d51a910cf1a824682c4d044ba1a41fb35daf44e49473541894e0a7e6f5fac3cc0b4625e000378d9f", 0x28}, {&(0x7f0000000300)="f3e7bdd7e58ea1352b7671e7a54deb351ff4faf69815e8381613e3dae3b4d1c325c57a85daab52d7436542293d5c28efe20c2cf9b774179c10e5f25ae23dd3eee884fea8bac3827fb2f3e48e023ba05a6f8c48c96f98050c5af4fcc1b432f7df0635e046236dff55cc0964b108ead9d24993206e88097c1ab17772c8a32a66d23306a7e9ea38c5bd56a915fff7e7e6d5190a808d2f9eaafe9e501b6b4a1fc1d8e7c5e2093c4338b261eee5f1bcef00fb60e7760be709369dfb88e423f0c4969ffdce25cddf", 0xc5}, {&(0x7f0000000400)="e662761b01c6198e19083121780edc7f430fc7da78f0dc637b5f91d118e48d9f994d1414159064604e0f1a0b0d4b591c48ba87761364ee565ad5a4aced3cc7f2c2783a7d1b2cfad2333ccf5957aaa792ae4f87b5803ec840017221f7026b8dcfbaf97b35caa54cad8536a9e169a64fb2d4ad00aed6d6167d071777adc13b58f46a20cd6ebd16bbe373e8cba4dedc4c1d18ec32941bb677725702d15f8addd9c047701ad09ce53cfa8cd37b7dc17677da53e2ded17f8384c79ccfa52a4e270a0133be57dc932a58a2a8a9de7acee8068b9c89c07f62b975b594c28788d67d51d461bc75d10ff367b7f662a714075fc4b0072d", 0xf2}, {&(0x7f0000000500)="38bb51110b1351af5a10406b9cc64bcae472a64afac9bcbefd4f63a4d83b78452ac2e57c7ac9d2cda083edef", 0x2c}], 0x6, 0x14, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000640)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x7810, 0x7, 0xbd0c, 0x6, {{0x1d, 0x4, 0x3, 0x9, 0x74, 0x66, 0x0, 0xff, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x34, 0xd4, 0x1, 0x8, [{@private=0x800, 0x907}, {@broadcast, 0x1}, {@local, 0x1}, {@empty, 0xfffff4d4}, {@rand_addr=0x64010102, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @noop, @timestamp={0x44, 0x24, 0xdb, 0x0, 0xb, [0x6920, 0x4000, 0x5, 0x3, 0xf4, 0x400, 0x4, 0xa3]}, @ra={0x94, 0x4}]}}}}}) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ttyS3\x00', 0x204000, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, 0x0, 0x0) 06:44:11 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000000)={0x49, 0x29, 0x2, {0x2, [{{0x80, 0x4, 0x4000000000}, 0xfffffffffffffff7, 0x63, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x4ef5dc7d, 0x20, 0xfffffffffffffedb, './file0'}]}}, 0x49) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) setns(r1, 0x40000000) 06:44:11 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) 06:44:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x4, &(0x7f0000000200)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:11 executing program 4: process_madvise(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000000c0)="85f6fbeceea1d49fe1bd630e1ee4bcac1d3f932b6dfdffd72a3fab1ebff3fc5808ff655486c0531cebf682c1c9a9f0ba4b25abb05ca508d594688eaab36353b9f51241d9e1baf75d8af7fb98da5d9347a838bb4298e21601b9b724ee3d40ea5ed437f40d3abbb8840840236bf02838134ac37967ee97fc6d03d6f203bf4b5a76b2eeafb1296fbcac9d9839458e8ca0436d49e79b7fc419f07823104498997a55cb532cfd0bd377e781e26751efc298dcc111e367e3cca460fc6a9a6bad98ba5518356a80c884e3dccd10e77b62347d0f840046a53522899b993a3fb08d", 0xdd}, {&(0x7f00000001c0)="fc924516c06e41bb3b1525d4da310a02accd469d7b5309dafd16d46dcd7a99edc986110ae09e0084190cdf69ca862d3cd676d7d2e5fecec6de32176962c18ecebfa97c07484eb329621d24b5a3a947f51d7be231fd23807755cc22e83a7bcb5116ab2cdaa373070acda03e67a7f4ad0fabfcfb97f11e74ebb2f1d8022a28fbcbed61c1a1ab2774116f4c8a2cc580dec57db5b683e59576f86330f3460f4015c2ca5a8a632dc8661f55783d6143e508bbe3f3fd2080945c6a7a822668864771d076dfdf2cc57d8958a3ec3ab0f105a7279d", 0xd1}, {&(0x7f00000002c0)="d51a910cf1a824682c4d044ba1a41fb35daf44e49473541894e0a7e6f5fac3cc0b4625e000378d9f", 0x28}, {&(0x7f0000000300)="f3e7bdd7e58ea1352b7671e7a54deb351ff4faf69815e8381613e3dae3b4d1c325c57a85daab52d7436542293d5c28efe20c2cf9b774179c10e5f25ae23dd3eee884fea8bac3827fb2f3e48e023ba05a6f8c48c96f98050c5af4fcc1b432f7df0635e046236dff55cc0964b108ead9d24993206e88097c1ab17772c8a32a66d23306a7e9ea38c5bd56a915fff7e7e6d5190a808d2f9eaafe9e501b6b4a1fc1d8e7c5e2093c4338b261eee5f1bcef00fb60e7760be709369dfb88e423f0c4969ffdce25cddf", 0xc5}, {&(0x7f0000000400)="e662761b01c6198e19083121780edc7f430fc7da78f0dc637b5f91d118e48d9f994d1414159064604e0f1a0b0d4b591c48ba87761364ee565ad5a4aced3cc7f2c2783a7d1b2cfad2333ccf5957aaa792ae4f87b5803ec840017221f7026b8dcfbaf97b35caa54cad8536a9e169a64fb2d4ad00aed6d6167d071777adc13b58f46a20cd6ebd16bbe373e8cba4dedc4c1d18ec32941bb677725702d15f8addd9c047701ad09ce53cfa8cd37b7dc17677da53e2ded17f8384c79ccfa52a4e270a0133be57dc932a58a2a8a9de7acee8068b9c89c07f62b975b594c28788d67d51d461bc75d10ff367b7f662a714075fc4b0072d", 0xf2}, {&(0x7f0000000500)="38bb51110b1351af5a10406b9cc64bcae472a64afac9bcbefd4f63a4d83b78452ac2e57c7ac9d2cda083edef", 0x2c}], 0x6, 0x14, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000640)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x7810, 0x7, 0xbd0c, 0x6, {{0x1d, 0x4, 0x3, 0x9, 0x74, 0x66, 0x0, 0xff, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x34, 0xd4, 0x1, 0x8, [{@private=0x800, 0x907}, {@broadcast, 0x1}, {@local, 0x1}, {@empty, 0xfffff4d4}, {@rand_addr=0x64010102, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @noop, @timestamp={0x44, 0x24, 0xdb, 0x0, 0xb, [0x6920, 0x4000, 0x5, 0x3, 0xf4, 0x400, 0x4, 0xa3]}, @ra={0x94, 0x4}]}}}}}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800)='/dev/ttyS3\x00', 0x204000, 0x0) 06:44:11 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) getsockname(0xffffffffffffffff, &(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x80) 06:44:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:11 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) 06:44:11 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000000)={0x49, 0x29, 0x2, {0x2, [{{0x80, 0x4, 0x4000000000}, 0xfffffffffffffff7, 0x63, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x4ef5dc7d, 0x20, 0xfffffffffffffedb, './file0'}]}}, 0x49) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) setns(r1, 0x40000000) 06:44:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:11 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) getsockname(0xffffffffffffffff, &(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x80) 06:44:11 executing program 3: r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) 06:44:11 executing program 4: process_madvise(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000000c0)="85f6fbeceea1d49fe1bd630e1ee4bcac1d3f932b6dfdffd72a3fab1ebff3fc5808ff655486c0531cebf682c1c9a9f0ba4b25abb05ca508d594688eaab36353b9f51241d9e1baf75d8af7fb98da5d9347a838bb4298e21601b9b724ee3d40ea5ed437f40d3abbb8840840236bf02838134ac37967ee97fc6d03d6f203bf4b5a76b2eeafb1296fbcac9d9839458e8ca0436d49e79b7fc419f07823104498997a55cb532cfd0bd377e781e26751efc298dcc111e367e3cca460fc6a9a6bad98ba5518356a80c884e3dccd10e77b62347d0f840046a53522899b993a3fb08d", 0xdd}, {&(0x7f00000001c0)="fc924516c06e41bb3b1525d4da310a02accd469d7b5309dafd16d46dcd7a99edc986110ae09e0084190cdf69ca862d3cd676d7d2e5fecec6de32176962c18ecebfa97c07484eb329621d24b5a3a947f51d7be231fd23807755cc22e83a7bcb5116ab2cdaa373070acda03e67a7f4ad0fabfcfb97f11e74ebb2f1d8022a28fbcbed61c1a1ab2774116f4c8a2cc580dec57db5b683e59576f86330f3460f4015c2ca5a8a632dc8661f55783d6143e508bbe3f3fd2080945c6a7a822668864771d076dfdf2cc57d8958a3ec3ab0f105a7279d", 0xd1}, {&(0x7f00000002c0)="d51a910cf1a824682c4d044ba1a41fb35daf44e49473541894e0a7e6f5fac3cc0b4625e000378d9f", 0x28}, {&(0x7f0000000300)="f3e7bdd7e58ea1352b7671e7a54deb351ff4faf69815e8381613e3dae3b4d1c325c57a85daab52d7436542293d5c28efe20c2cf9b774179c10e5f25ae23dd3eee884fea8bac3827fb2f3e48e023ba05a6f8c48c96f98050c5af4fcc1b432f7df0635e046236dff55cc0964b108ead9d24993206e88097c1ab17772c8a32a66d23306a7e9ea38c5bd56a915fff7e7e6d5190a808d2f9eaafe9e501b6b4a1fc1d8e7c5e2093c4338b261eee5f1bcef00fb60e7760be709369dfb88e423f0c4969ffdce25cddf", 0xc5}, {&(0x7f0000000400)="e662761b01c6198e19083121780edc7f430fc7da78f0dc637b5f91d118e48d9f994d1414159064604e0f1a0b0d4b591c48ba87761364ee565ad5a4aced3cc7f2c2783a7d1b2cfad2333ccf5957aaa792ae4f87b5803ec840017221f7026b8dcfbaf97b35caa54cad8536a9e169a64fb2d4ad00aed6d6167d071777adc13b58f46a20cd6ebd16bbe373e8cba4dedc4c1d18ec32941bb677725702d15f8addd9c047701ad09ce53cfa8cd37b7dc17677da53e2ded17f8384c79ccfa52a4e270a0133be57dc932a58a2a8a9de7acee8068b9c89c07f62b975b594c28788d67d51d461bc75d10ff367b7f662a714075fc4b0072d", 0xf2}, {&(0x7f0000000500)="38bb51110b1351af5a10406b9cc64bcae472a64afac9bcbefd4f63a4d83b78452ac2e57c7ac9d2cda083edef", 0x2c}], 0x6, 0x14, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000640)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x7810, 0x7, 0xbd0c, 0x6, {{0x1d, 0x4, 0x3, 0x9, 0x74, 0x66, 0x0, 0xff, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x34, 0xd4, 0x1, 0x8, [{@private=0x800, 0x907}, {@broadcast, 0x1}, {@local, 0x1}, {@empty, 0xfffff4d4}, {@rand_addr=0x64010102, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @noop, @timestamp={0x44, 0x24, 0xdb, 0x0, 0xb, [0x6920, 0x4000, 0x5, 0x3, 0xf4, 0x400, 0x4, 0xa3]}, @ra={0x94, 0x4}]}}}}}) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 06:44:11 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000000)={0x49, 0x29, 0x2, {0x2, [{{0x80, 0x4, 0x4000000000}, 0xfffffffffffffff7, 0x63, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x4ef5dc7d, 0x20, 0xfffffffffffffedb, './file0'}]}}, 0x49) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) setns(0xffffffffffffffff, 0x40000000) 06:44:11 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:12 executing program 3: getpid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 06:44:12 executing program 4: process_madvise(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000000c0)="85f6fbeceea1d49fe1bd630e1ee4bcac1d3f932b6dfdffd72a3fab1ebff3fc5808ff655486c0531cebf682c1c9a9f0ba4b25abb05ca508d594688eaab36353b9f51241d9e1baf75d8af7fb98da5d9347a838bb4298e21601b9b724ee3d40ea5ed437f40d3abbb8840840236bf02838134ac37967ee97fc6d03d6f203bf4b5a76b2eeafb1296fbcac9d9839458e8ca0436d49e79b7fc419f07823104498997a55cb532cfd0bd377e781e26751efc298dcc111e367e3cca460fc6a9a6bad98ba5518356a80c884e3dccd10e77b62347d0f840046a53522899b993a3fb08d", 0xdd}, {&(0x7f00000001c0)="fc924516c06e41bb3b1525d4da310a02accd469d7b5309dafd16d46dcd7a99edc986110ae09e0084190cdf69ca862d3cd676d7d2e5fecec6de32176962c18ecebfa97c07484eb329621d24b5a3a947f51d7be231fd23807755cc22e83a7bcb5116ab2cdaa373070acda03e67a7f4ad0fabfcfb97f11e74ebb2f1d8022a28fbcbed61c1a1ab2774116f4c8a2cc580dec57db5b683e59576f86330f3460f4015c2ca5a8a632dc8661f55783d6143e508bbe3f3fd2080945c6a7a822668864771d076dfdf2cc57d8958a3ec3ab0f105a7279d", 0xd1}, {&(0x7f00000002c0)="d51a910cf1a824682c4d044ba1a41fb35daf44e49473541894e0a7e6f5fac3cc0b4625e000378d9f", 0x28}, {&(0x7f0000000300)="f3e7bdd7e58ea1352b7671e7a54deb351ff4faf69815e8381613e3dae3b4d1c325c57a85daab52d7436542293d5c28efe20c2cf9b774179c10e5f25ae23dd3eee884fea8bac3827fb2f3e48e023ba05a6f8c48c96f98050c5af4fcc1b432f7df0635e046236dff55cc0964b108ead9d24993206e88097c1ab17772c8a32a66d23306a7e9ea38c5bd56a915fff7e7e6d5190a808d2f9eaafe9e501b6b4a1fc1d8e7c5e2093c4338b261eee5f1bcef00fb60e7760be709369dfb88e423f0c4969ffdce25cddf", 0xc5}, {&(0x7f0000000400)="e662761b01c6198e19083121780edc7f430fc7da78f0dc637b5f91d118e48d9f994d1414159064604e0f1a0b0d4b591c48ba87761364ee565ad5a4aced3cc7f2c2783a7d1b2cfad2333ccf5957aaa792ae4f87b5803ec840017221f7026b8dcfbaf97b35caa54cad8536a9e169a64fb2d4ad00aed6d6167d071777adc13b58f46a20cd6ebd16bbe373e8cba4dedc4c1d18ec32941bb677725702d15f8addd9c047701ad09ce53cfa8cd37b7dc17677da53e2ded17f8384c79ccfa52a4e270a0133be57dc932a58a2a8a9de7acee8068b9c89c07f62b975b594c28788d67d51d461bc75d10ff367b7f662a714075fc4b0072d", 0xf2}, {&(0x7f0000000500)="38bb51110b1351af5a10406b9cc64bcae472a64afac9bcbefd4f63a4d83b78452ac2e57c7ac9d2cda083edef", 0x2c}], 0x6, 0x14, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000640)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000007c0)={'tunl0\x00', &(0x7f0000000700)={'syztnl1\x00', 0x0, 0x7810, 0x7, 0xbd0c, 0x6, {{0x1d, 0x4, 0x3, 0x9, 0x74, 0x66, 0x0, 0xff, 0x4, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x34, 0xd4, 0x1, 0x8, [{@private=0x800, 0x907}, {@broadcast, 0x1}, {@local, 0x1}, {@empty, 0xfffff4d4}, {@rand_addr=0x64010102, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}]}, @noop, @timestamp={0x44, 0x24, 0xdb, 0x0, 0xb, [0x6920, 0x4000, 0x5, 0x3, 0xf4, 0x400, 0x4, 0xa3]}, @ra={0x94, 0x4}]}}}}}) 06:44:12 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) getsockname(0xffffffffffffffff, &(0x7f00000005c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000640)=0x80) 06:44:12 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000000)={0x49, 0x29, 0x2, {0x2, [{{0x80, 0x4, 0x4000000000}, 0xfffffffffffffff7, 0x63, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x4ef5dc7d, 0x20, 0xfffffffffffffedb, './file0'}]}}, 0x49) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) setns(0xffffffffffffffff, 0x40000000) 06:44:12 executing program 3: getpid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 06:44:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:12 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockname(r0, 0x0, &(0x7f0000000640)) 06:44:12 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:12 executing program 4: process_madvise(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000000c0)="85f6fbeceea1d49fe1bd630e1ee4bcac1d3f932b6dfdffd72a3fab1ebff3fc5808ff655486c0531cebf682c1c9a9f0ba4b25abb05ca508d594688eaab36353b9f51241d9e1baf75d8af7fb98da5d9347a838bb4298e21601b9b724ee3d40ea5ed437f40d3abbb8840840236bf02838134ac37967ee97fc6d03d6f203bf4b5a76b2eeafb1296fbcac9d9839458e8ca0436d49e79b7fc419f07823104498997a55cb532cfd0bd377e781e26751efc298dcc111e367e3cca460fc6a9a6bad98ba5518356a80c884e3dccd10e77b62347d0f840046a53522899b993a3fb08d", 0xdd}, {&(0x7f00000001c0)="fc924516c06e41bb3b1525d4da310a02accd469d7b5309dafd16d46dcd7a99edc986110ae09e0084190cdf69ca862d3cd676d7d2e5fecec6de32176962c18ecebfa97c07484eb329621d24b5a3a947f51d7be231fd23807755cc22e83a7bcb5116ab2cdaa373070acda03e67a7f4ad0fabfcfb97f11e74ebb2f1d8022a28fbcbed61c1a1ab2774116f4c8a2cc580dec57db5b683e59576f86330f3460f4015c2ca5a8a632dc8661f55783d6143e508bbe3f3fd2080945c6a7a822668864771d076dfdf2cc57d8958a3ec3ab0f105a7279d", 0xd1}, {&(0x7f00000002c0)="d51a910cf1a824682c4d044ba1a41fb35daf44e49473541894e0a7e6f5fac3cc0b4625e000378d9f", 0x28}, {&(0x7f0000000300)="f3e7bdd7e58ea1352b7671e7a54deb351ff4faf69815e8381613e3dae3b4d1c325c57a85daab52d7436542293d5c28efe20c2cf9b774179c10e5f25ae23dd3eee884fea8bac3827fb2f3e48e023ba05a6f8c48c96f98050c5af4fcc1b432f7df0635e046236dff55cc0964b108ead9d24993206e88097c1ab17772c8a32a66d23306a7e9ea38c5bd56a915fff7e7e6d5190a808d2f9eaafe9e501b6b4a1fc1d8e7c5e2093c4338b261eee5f1bcef00fb60e7760be709369dfb88e423f0c4969ffdce25cddf", 0xc5}, {&(0x7f0000000400)="e662761b01c6198e19083121780edc7f430fc7da78f0dc637b5f91d118e48d9f994d1414159064604e0f1a0b0d4b591c48ba87761364ee565ad5a4aced3cc7f2c2783a7d1b2cfad2333ccf5957aaa792ae4f87b5803ec840017221f7026b8dcfbaf97b35caa54cad8536a9e169a64fb2d4ad00aed6d6167d071777adc13b58f46a20cd6ebd16bbe373e8cba4dedc4c1d18ec32941bb677725702d15f8addd9c047701ad09ce53cfa8cd37b7dc17677da53e2ded17f8384c79ccfa52a4e270a0133be57dc932a58a2a8a9de7acee8068b9c89c07f62b975b594c28788d67d51d461bc75d10ff367b7f662a714075fc4b0072d", 0xf2}, {&(0x7f0000000500)="38bb51110b1351af5a10406b9cc64bcae472a64afac9bcbefd4f63a4d83b78452ac2e57c7ac9d2cda083edef", 0x2c}], 0x6, 0x14, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000640)=0x80) 06:44:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x6, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:12 executing program 3: getpid() bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) 06:44:12 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:12 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockname(r0, 0x0, 0x0) 06:44:12 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000000)={0x49, 0x29, 0x2, {0x2, [{{0x80, 0x4, 0x4000000000}, 0xfffffffffffffff7, 0x63, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x4ef5dc7d, 0x20, 0xfffffffffffffedb, './file0'}]}}, 0x49) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) setns(0xffffffffffffffff, 0x40000000) 06:44:12 executing program 4: process_madvise(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000000c0)="85f6fbeceea1d49fe1bd630e1ee4bcac1d3f932b6dfdffd72a3fab1ebff3fc5808ff655486c0531cebf682c1c9a9f0ba4b25abb05ca508d594688eaab36353b9f51241d9e1baf75d8af7fb98da5d9347a838bb4298e21601b9b724ee3d40ea5ed437f40d3abbb8840840236bf02838134ac37967ee97fc6d03d6f203bf4b5a76b2eeafb1296fbcac9d9839458e8ca0436d49e79b7fc419f07823104498997a55cb532cfd0bd377e781e26751efc298dcc111e367e3cca460fc6a9a6bad98ba5518356a80c884e3dccd10e77b62347d0f840046a53522899b993a3fb08d", 0xdd}, {&(0x7f00000001c0)="fc924516c06e41bb3b1525d4da310a02accd469d7b5309dafd16d46dcd7a99edc986110ae09e0084190cdf69ca862d3cd676d7d2e5fecec6de32176962c18ecebfa97c07484eb329621d24b5a3a947f51d7be231fd23807755cc22e83a7bcb5116ab2cdaa373070acda03e67a7f4ad0fabfcfb97f11e74ebb2f1d8022a28fbcbed61c1a1ab2774116f4c8a2cc580dec57db5b683e59576f86330f3460f4015c2ca5a8a632dc8661f55783d6143e508bbe3f3fd2080945c6a7a822668864771d076dfdf2cc57d8958a3ec3ab0f105a7279d", 0xd1}, {&(0x7f00000002c0)="d51a910cf1a824682c4d044ba1a41fb35daf44e49473541894e0a7e6f5fac3cc0b4625e000378d9f", 0x28}, {&(0x7f0000000300)="f3e7bdd7e58ea1352b7671e7a54deb351ff4faf69815e8381613e3dae3b4d1c325c57a85daab52d7436542293d5c28efe20c2cf9b774179c10e5f25ae23dd3eee884fea8bac3827fb2f3e48e023ba05a6f8c48c96f98050c5af4fcc1b432f7df0635e046236dff55cc0964b108ead9d24993206e88097c1ab17772c8a32a66d23306a7e9ea38c5bd56a915fff7e7e6d5190a808d2f9eaafe9e501b6b4a1fc1d8e7c5e2093c4338b261eee5f1bcef00fb60e7760be709369dfb88e423f0c4969ffdce25cddf", 0xc5}, {&(0x7f0000000400)="e662761b01c6198e19083121780edc7f430fc7da78f0dc637b5f91d118e48d9f994d1414159064604e0f1a0b0d4b591c48ba87761364ee565ad5a4aced3cc7f2c2783a7d1b2cfad2333ccf5957aaa792ae4f87b5803ec840017221f7026b8dcfbaf97b35caa54cad8536a9e169a64fb2d4ad00aed6d6167d071777adc13b58f46a20cd6ebd16bbe373e8cba4dedc4c1d18ec32941bb677725702d15f8addd9c047701ad09ce53cfa8cd37b7dc17677da53e2ded17f8384c79ccfa52a4e270a0133be57dc932a58a2a8a9de7acee8068b9c89c07f62b975b594c28788d67d51d461bc75d10ff367b7f662a714075fc4b0072d", 0xf2}, {&(0x7f0000000500)="38bb51110b1351af5a10406b9cc64bcae472a64afac9bcbefd4f63a4d83b78452ac2e57c7ac9d2cda083edef", 0x2c}], 0x6, 0x14, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000640)=0x80) 06:44:12 executing program 3: getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) 06:44:12 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000000)={0x49, 0x29, 0x2, {0x2, [{{0x80, 0x4, 0x4000000000}, 0xfffffffffffffff7, 0x63, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x4ef5dc7d, 0x20, 0xfffffffffffffedb, './file0'}]}}, 0x49) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) setns(r1, 0x40000000) 06:44:12 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockname(r0, 0x0, 0x0) 06:44:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0xd9, &(0x7f0000000280)=""/217, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:12 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:12 executing program 4: process_madvise(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000000c0)="85f6fbeceea1d49fe1bd630e1ee4bcac1d3f932b6dfdffd72a3fab1ebff3fc5808ff655486c0531cebf682c1c9a9f0ba4b25abb05ca508d594688eaab36353b9f51241d9e1baf75d8af7fb98da5d9347a838bb4298e21601b9b724ee3d40ea5ed437f40d3abbb8840840236bf02838134ac37967ee97fc6d03d6f203bf4b5a76b2eeafb1296fbcac9d9839458e8ca0436d49e79b7fc419f07823104498997a55cb532cfd0bd377e781e26751efc298dcc111e367e3cca460fc6a9a6bad98ba5518356a80c884e3dccd10e77b62347d0f840046a53522899b993a3fb08d", 0xdd}, {&(0x7f00000001c0)="fc924516c06e41bb3b1525d4da310a02accd469d7b5309dafd16d46dcd7a99edc986110ae09e0084190cdf69ca862d3cd676d7d2e5fecec6de32176962c18ecebfa97c07484eb329621d24b5a3a947f51d7be231fd23807755cc22e83a7bcb5116ab2cdaa373070acda03e67a7f4ad0fabfcfb97f11e74ebb2f1d8022a28fbcbed61c1a1ab2774116f4c8a2cc580dec57db5b683e59576f86330f3460f4015c2ca5a8a632dc8661f55783d6143e508bbe3f3fd2080945c6a7a822668864771d076dfdf2cc57d8958a3ec3ab0f105a7279d", 0xd1}, {&(0x7f00000002c0)="d51a910cf1a824682c4d044ba1a41fb35daf44e49473541894e0a7e6f5fac3cc0b4625e000378d9f", 0x28}, {&(0x7f0000000300)="f3e7bdd7e58ea1352b7671e7a54deb351ff4faf69815e8381613e3dae3b4d1c325c57a85daab52d7436542293d5c28efe20c2cf9b774179c10e5f25ae23dd3eee884fea8bac3827fb2f3e48e023ba05a6f8c48c96f98050c5af4fcc1b432f7df0635e046236dff55cc0964b108ead9d24993206e88097c1ab17772c8a32a66d23306a7e9ea38c5bd56a915fff7e7e6d5190a808d2f9eaafe9e501b6b4a1fc1d8e7c5e2093c4338b261eee5f1bcef00fb60e7760be709369dfb88e423f0c4969ffdce25cddf", 0xc5}, {&(0x7f0000000400)="e662761b01c6198e19083121780edc7f430fc7da78f0dc637b5f91d118e48d9f994d1414159064604e0f1a0b0d4b591c48ba87761364ee565ad5a4aced3cc7f2c2783a7d1b2cfad2333ccf5957aaa792ae4f87b5803ec840017221f7026b8dcfbaf97b35caa54cad8536a9e169a64fb2d4ad00aed6d6167d071777adc13b58f46a20cd6ebd16bbe373e8cba4dedc4c1d18ec32941bb677725702d15f8addd9c047701ad09ce53cfa8cd37b7dc17677da53e2ded17f8384c79ccfa52a4e270a0133be57dc932a58a2a8a9de7acee8068b9c89c07f62b975b594c28788d67d51d461bc75d10ff367b7f662a714075fc4b0072d", 0xf2}, {&(0x7f0000000500)="38bb51110b1351af5a10406b9cc64bcae472a64afac9bcbefd4f63a4d83b78452ac2e57c7ac9d2cda083edef", 0x2c}], 0x6, 0x14, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000640)=0x80) 06:44:12 executing program 3: getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) 06:44:12 executing program 0: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockname(r0, 0x0, 0x0) 06:44:12 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 06:44:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:12 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) setns(r1, 0x40000000) 06:44:12 executing program 4: process_madvise(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f00000000c0)="85f6fbeceea1d49fe1bd630e1ee4bcac1d3f932b6dfdffd72a3fab1ebff3fc5808ff655486c0531cebf682c1c9a9f0ba4b25abb05ca508d594688eaab36353b9f51241d9e1baf75d8af7fb98da5d9347a838bb4298e21601b9b724ee3d40ea5ed437f40d3abbb8840840236bf02838134ac37967ee97fc6d03d6f203bf4b5a76b2eeafb1296fbcac9d9839458e8ca0436d49e79b7fc419f07823104498997a55cb532cfd0bd377e781e26751efc298dcc111e367e3cca460fc6a9a6bad98ba5518356a80c884e3dccd10e77b62347d0f840046a53522899b993a3fb08d", 0xdd}, {&(0x7f00000001c0)="fc924516c06e41bb3b1525d4da310a02accd469d7b5309dafd16d46dcd7a99edc986110ae09e0084190cdf69ca862d3cd676d7d2e5fecec6de32176962c18ecebfa97c07484eb329621d24b5a3a947f51d7be231fd23807755cc22e83a7bcb5116ab2cdaa373070acda03e67a7f4ad0fabfcfb97f11e74ebb2f1d8022a28fbcbed61c1a1ab2774116f4c8a2cc580dec57db5b683e59576f86330f3460f4015c2ca5a8a632dc8661f55783d6143e508bbe3f3fd2080945c6a7a822668864771d076dfdf2cc57d8958a3ec3ab0f105a7279d", 0xd1}, {&(0x7f00000002c0)="d51a910cf1a824682c4d044ba1a41fb35daf44e49473541894e0a7e6f5fac3cc0b4625e000378d9f", 0x28}, {&(0x7f0000000300)="f3e7bdd7e58ea1352b7671e7a54deb351ff4faf69815e8381613e3dae3b4d1c325c57a85daab52d7436542293d5c28efe20c2cf9b774179c10e5f25ae23dd3eee884fea8bac3827fb2f3e48e023ba05a6f8c48c96f98050c5af4fcc1b432f7df0635e046236dff55cc0964b108ead9d24993206e88097c1ab17772c8a32a66d23306a7e9ea38c5bd56a915fff7e7e6d5190a808d2f9eaafe9e501b6b4a1fc1d8e7c5e2093c4338b261eee5f1bcef00fb60e7760be709369dfb88e423f0c4969ffdce25cddf", 0xc5}, {&(0x7f0000000400)="e662761b01c6198e19083121780edc7f430fc7da78f0dc637b5f91d118e48d9f994d1414159064604e0f1a0b0d4b591c48ba87761364ee565ad5a4aced3cc7f2c2783a7d1b2cfad2333ccf5957aaa792ae4f87b5803ec840017221f7026b8dcfbaf97b35caa54cad8536a9e169a64fb2d4ad00aed6d6167d071777adc13b58f46a20cd6ebd16bbe373e8cba4dedc4c1d18ec32941bb677725702d15f8addd9c047701ad09ce53cfa8cd37b7dc17677da53e2ded17f8384c79ccfa52a4e270a0133be57dc932a58a2a8a9de7acee8068b9c89c07f62b975b594c28788d67d51d461bc75d10ff367b7f662a714075fc4b0072d", 0xf2}, {&(0x7f0000000500)="38bb51110b1351af5a10406b9cc64bcae472a64afac9bcbefd4f63a4d83b78452ac2e57c7ac9d2cda083edef", 0x2c}], 0x6, 0x14, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000640)=0x80) 06:44:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:12 executing program 3: getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000040)='/dev/input/mice\x00'}, 0x30) 06:44:12 executing program 2: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000000)={0x49, 0x29, 0x2, {0x2, [{{0x80, 0x4, 0x4000000000}, 0xfffffffffffffff7, 0x63, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x4ef5dc7d, 0x20, 0xfffffffffffffedb, './file0'}]}}, 0x49) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) setns(r1, 0x40000000) 06:44:12 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000000)={0x49, 0x29, 0x2, {0x2, [{{0x80, 0x4, 0x4000000000}, 0xfffffffffffffff7, 0x63, 0x7, './file0'}, {{0x1, 0x2, 0x4}, 0x4ef5dc7d, 0x20, 0xfffffffffffffedb, './file0'}]}}, 0x49) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000080)) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) setns(r1, 0x40000000) 06:44:12 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) setns(r0, 0x40000000) 06:44:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000640)=0x80) 06:44:12 executing program 2: r0 = socket$isdn_base(0x22, 0x3, 0x0) accept(r0, &(0x7f0000000000)=@x25, &(0x7f0000000080)=0x80) setns(0xffffffffffffffff, 0x20000000) openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vmci\x00', 0x2, 0x0) 06:44:12 executing program 3: r0 = getpid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) 06:44:12 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x6, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:13 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) setns(r0, 0x40000000) 06:44:13 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000640)=0x80) 06:44:13 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4a40, 0x0) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) socket$inet_udp(0x2, 0x2, 0x0) 06:44:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) 06:44:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x800) ioctl$sock_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, @qipcrtr={0x2a, 0x0, 0x4000}, @vsock={0x28, 0x0, 0xffffffff, @local}, @phonet={0x23, 0x6, 0x73, 0x4}, 0x3ff, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)='dummy0\x00', 0x5, 0x6, 0x9}) sendmsg$can_raw(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0x10, &(0x7f0000000180)={&(0x7f0000000100)=@canfd={{0x2, 0x1, 0x0, 0x1}, 0xb, 0x1, 0x0, 0x0, "47802b7b6af6da69cc35ebafd943584f69854a22916b6d28d69efbf6d5fa5d99ea34ab8879ea72a36e4f8c2d22419e274f1d9093475e84d949d229709b90253f"}, 0x48}, 0x1, 0x0, 0x0, 0x10821}, 0x40000000) 06:44:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x8, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:13 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@my=0x0, 0x7f}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0xf0ffffff7f0000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x22000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000d80)={0x2020}, 0x2020) 06:44:13 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) setns(r0, 0x40000000) 06:44:13 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000640)=0x80) 06:44:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = accept4(r0, 0x0, 0x0, 0xe75c35f6edd04371) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000000)={0x1000}) accept4(r0, 0x0, 0x0, 0x0) 06:44:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) 06:44:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x5, 0xf, 0x67b, 0x6}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:13 executing program 4: socket$inet_udp(0x2, 0x2, 0x0) getpeername(0xffffffffffffffff, &(0x7f00000005c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000640)=0x80) 06:44:13 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@my=0x0, 0x7f}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0xf0ffffff7f0000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x22000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000d80)={0x2020}, 0x2020) 06:44:13 executing program 1: r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x0) setns(r0, 0x40000000) 06:44:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x40000) socket$inet_udp(0x2, 0x2, 0x0) 06:44:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = accept4(r0, 0x0, 0x0, 0xc0000) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp={0x2c, 0x0, 0x0, 0x26}, @hci={0x1f, 0x4, 0x4}, 0x6, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='ip_vti0\x00', 0x5, 0x4, 0x8001}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000003}, 0x40) 06:44:13 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000002780)={0x8, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 06:44:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, 0x0, &(0x7f0000000640)) 06:44:13 executing program 1: r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x0) setns(r0, 0x40000000) 06:44:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x40000) 06:44:13 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@my=0x0, 0x7f}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0xf0ffffff7f0000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x22000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000000d80)={0x2020}, 0x2020) 06:44:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = accept4(r0, 0x0, 0x0, 0xc0000) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp={0x2c, 0x0, 0x0, 0x26}, @hci={0x1f, 0x4, 0x4}, 0x6, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='ip_vti0\x00', 0x5, 0x4, 0x8001}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000003}, 0x40) 06:44:13 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) accept(r1, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) setns(0xffffffffffffffff, 0x10000000) accept4(r0, 0x0, 0x0, 0x0) 06:44:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, 0x0, 0x0) 06:44:13 executing program 1: r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x0) setns(r0, 0x40000000) 06:44:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = accept4(r0, 0x0, 0x0, 0xc0000) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp={0x2c, 0x0, 0x0, 0x26}, @hci={0x1f, 0x4, 0x4}, 0x6, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='ip_vti0\x00', 0x5, 0x4, 0x8001}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x54, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000003}, 0x40) 06:44:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') 06:44:13 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) accept(r1, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) setns(0xffffffffffffffff, 0x10000000) accept4(r0, 0x0, 0x0, 0x0) 06:44:13 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@my=0x0, 0x7f}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0xf0ffffff7f0000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x22000, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) 06:44:13 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x40000) 06:44:13 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) setns(0xffffffffffffffff, 0x40000000) 06:44:13 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0xc0000) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp={0x2c, 0x0, 0x0, 0x26}, @hci={0x1f, 0x4, 0x4}, 0x6, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='ip_vti0\x00', 0x5, 0x4, 0x8001}) 06:44:13 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) accept(r1, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) setns(0xffffffffffffffff, 0x10000000) accept4(r0, 0x0, 0x0, 0x0) 06:44:13 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:14 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@my=0x0, 0x7f}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0xf0ffffff7f0000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyS3\x00', 0x22000, 0x0) 06:44:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x40000) 06:44:14 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) setns(0xffffffffffffffff, 0x40000000) 06:44:14 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp={0x2c, 0x0, 0x0, 0x26}, @hci={0x1f, 0x4, 0x4}, 0x6, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='ip_vti0\x00', 0x5, 0x4, 0x8001}) 06:44:14 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) accept(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) setns(0xffffffffffffffff, 0x10000000) 06:44:14 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x40000) 06:44:14 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@my=0x0, 0x7f}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0xf0ffffff7f0000) 06:44:14 executing program 1: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) setns(0xffffffffffffffff, 0x40000000) 06:44:14 executing program 3: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp={0x2c, 0x0, 0x0, 0x26}, @hci={0x1f, 0x4, 0x4}, 0x6, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='ip_vti0\x00', 0x5, 0x4, 0x8001}) 06:44:14 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) accept(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) 06:44:14 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:14 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@my=0x0, 0x7f}) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) 06:44:14 executing program 3: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp={0x2c, 0x0, 0x0, 0x26}, @hci={0x1f, 0x4, 0x4}, 0x6, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='ip_vti0\x00', 0x5, 0x4, 0x8001}) 06:44:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') 06:44:14 executing program 1: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) setns(r0, 0x0) 06:44:14 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) 06:44:14 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:14 executing program 3: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp={0x2c, 0x0, 0x0, 0x26}, @hci={0x1f, 0x4, 0x4}, 0x6, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='ip_vti0\x00', 0x5, 0x4, 0x8001}) 06:44:14 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) 06:44:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:14 executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) accept(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) setns(0xffffffffffffffff, 0x10000000) 06:44:14 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@my=0x0, 0x7f}) 06:44:14 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) accept(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) 06:44:14 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp={0x2c, 0x0, 0x0, 0x26}, @hci={0x1f, 0x4, 0x4}, 0x6, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='ip_vti0\x00', 0x5, 0x4, 0x8001}) 06:44:14 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:14 executing program 0: ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000040)={@my=0x0, 0x7f}) 06:44:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:14 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp={0x2c, 0x0, 0x0, 0x26}, @hci={0x1f, 0x4, 0x4}, 0x6, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='ip_vti0\x00', 0x5, 0x4, 0x8001}) 06:44:14 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) accept(r0, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) 06:44:14 executing program 0: ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000040)={@my=0x0, 0x7f}) 06:44:14 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 3: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp={0x2c, 0x0, 0x0, 0x26}, @hci={0x1f, 0x4, 0x4}, 0x6, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='ip_vti0\x00', 0x5, 0x4, 0x8001}) 06:44:15 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) accept(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) 06:44:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 0: ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000040)={@my=0x0, 0x7f}) 06:44:15 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 06:44:15 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) accept(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) 06:44:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@my=0x0, 0x7f}) 06:44:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 06:44:15 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) accept(0xffffffffffffffff, &(0x7f0000000000)=@generic, &(0x7f0000000080)=0x80) 06:44:15 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@my=0x0, 0x7f}) 06:44:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 06:44:15 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) accept(r0, 0x0, &(0x7f0000000080)) 06:44:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000000040)={@my=0x0, 0x7f}) 06:44:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp, @hci={0x1f, 0x4, 0x4}, 0x6, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='ip_vti0\x00', 0x5, 0x4, 0x8001}) 06:44:15 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) accept(r0, 0x0, 0x0) 06:44:15 executing program 0: openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000040)={@my=0x0, 0x7f}) 06:44:15 executing program 4: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp, @hci={0x1f, 0x0, 0x4}, 0x6, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='ip_vti0\x00', 0x5, 0x4, 0x8001}) 06:44:15 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 0: openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000040)={@my=0x0, 0x7f}) 06:44:15 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:15 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp, @hci, 0x6, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='ip_vti0\x00', 0x5, 0x4, 0x8001}) 06:44:15 executing program 0: openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, &(0x7f0000000040)={@my=0x0, 0x7f}) 06:44:16 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 2: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp, @hci, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)='ip_vti0\x00', 0x5, 0x4, 0x8001}) 06:44:16 executing program 0: r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vmci\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, 0x0) 06:44:16 executing program 4: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp, @hci, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)='ip_vti0\x00', 0x5, 0x4, 0x8001}) 06:44:16 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 2: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 06:44:16 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp, @hci, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x8001}) 06:44:16 executing program 2: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 06:44:16 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp, @hci, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8001}) 06:44:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:16 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, 0x0) 06:44:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp, @hci, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}) 06:44:16 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1443.823577][ T2495] binder: 2493:2495 ioctl c0306201 0 returned -14 06:44:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:16 executing program 0: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 06:44:16 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @nl=@unspec, @xdp, @hci}) 06:44:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 4: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 0: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) [ 1444.002739][ T2509] binder: 2507:2509 ioctl c0306201 0 returned -14 06:44:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:16 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:17 executing program 0: ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 06:44:17 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 4: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1444.242747][ T2529] binder: 2524:2529 ioctl c0306201 0 returned -14 06:44:17 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 06:44:17 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 4: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 1: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 06:44:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:17 executing program 1: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 0: socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) 06:44:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 1: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1444.649082][ T2559] binder: 2553:2559 ioctl c0306201 0 returned -14 06:44:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1444.827216][ T2573] binder: 2571:2573 ioctl c0306201 0 returned -14 06:44:17 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1444.878941][ T2576] binder: 2572:2576 ioctl c0306201 0 returned -14 06:44:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:17 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:17 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1445.045533][ T2587] binder: 2584:2587 ioctl c0306201 0 returned -14 [ 1445.061456][ T2591] binder: 2588:2591 ioctl c0306201 0 returned -14 06:44:17 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:18 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1445.264379][ T2606] binder: 2602:2606 ioctl c0306201 0 returned -14 06:44:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 3: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 3: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1445.706798][ T2637] binder: 2634:2637 ioctl c0306201 0 returned -14 06:44:18 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 3: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1445.863557][ T2649] binder: 2648:2649 ioctl c0306201 0 returned -14 06:44:18 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:18 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1446.102635][ T2667] binder: 2663:2667 ioctl c0306201 0 returned -14 06:44:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1446.182636][ T2672] binder: 2670:2672 ioctl c0306201 0 returned -14 06:44:19 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:19 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1446.391069][ T2687] binder: 2684:2687 ioctl c0306201 0 returned -14 06:44:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1446.574365][ T2702] binder: 2698:2702 ioctl c0306201 0 returned -14 06:44:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 0: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 0: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 0: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1447.566876][ T2776] binder: 2773:2776 ioctl c0306201 0 returned -14 06:44:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1447.790137][ T2792] binder: 2788:2792 ioctl c0306201 0 returned -14 06:44:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1448.017340][ T2809] binder: 2804:2809 ioctl c0306201 0 returned -14 06:44:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:20 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:44:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:44:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:44:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) 06:44:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3e, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d9"}) 06:44:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) 06:44:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:21 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) 06:44:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x3e, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d9"}) 06:44:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x68, 0x0, &(0x7f0000000240)=[@free_buffer, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) 06:44:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3e, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d9"}) 06:44:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) 06:44:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:22 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) 06:44:22 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:22 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3e, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d9"}) 06:44:22 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:22 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:22 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:23 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:23 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:23 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:23 executing program 2: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:23 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:23 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:23 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:23 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:23 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:23 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000200)}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:23 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x3e, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d9"}) 06:44:23 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:23 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:23 executing program 2: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:23 executing program 0: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:24 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x40000) 06:44:24 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:24 executing program 2: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:24 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:24 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:24 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:24 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x74, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000180)={@flat=@handle={0x73682a85, 0x1000, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}, @decrefs={0x40046307, 0x3}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x101}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}]}, 0x34}, 0x1, 0x0, 0x0, 0x840}, 0x40000) 06:44:24 executing program 2: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:24 executing program 3: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:24 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:24 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:24 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:24 executing program 4: socket$inet_udp(0x2, 0x2, 0x11) 06:44:24 executing program 2: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:24 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:24 executing program 0: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:24 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:24 executing program 4: socket$inet_udp(0x2, 0x2, 0x11) 06:44:24 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:24 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:24 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:25 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:25 executing program 4: socket$inet_udp(0x2, 0x2, 0x11) 06:44:25 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1452.187471][ T3153] binder: 3149:3153 ioctl c0306201 0 returned -14 06:44:25 executing program 5: socket$inet_udp(0x2, 0x2, 0x3) 06:44:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:25 executing program 3: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:25 executing program 0: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:25 executing program 4: r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x0) socketpair(0x1d, 0x5, 0x5, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, 0x0, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8040}, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getpeername(r2, &(0x7f0000000140)=@ipx, &(0x7f00000001c0)=0x80) sendmsg$AUDIT_MAKE_EQUIV(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x3f7, 0x200, 0x70bd26, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x23fcd07def103edc}, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) 06:44:25 executing program 1: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:25 executing program 0: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1452.395482][ T3168] binder: 3164:3168 ioctl c0306201 0 returned -14 06:44:25 executing program 5: socket$inet_udp(0x2, 0x2, 0x3) 06:44:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:25 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:25 executing program 3: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1452.529851][ T3176] can: request_module (can-proto-5) failed. 06:44:25 executing program 4: socket$inet_udp(0x2, 0x2c, 0x0) 06:44:25 executing program 0: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x6c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1452.602241][ T3189] binder: 3184:3189 ioctl c0306201 0 returned -14 06:44:25 executing program 5: socket$inet_udp(0x2, 0x2, 0x3) 06:44:25 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:25 executing program 3: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:25 executing program 4: socket$inet_udp(0x2, 0x2c, 0x0) 06:44:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:25 executing program 3: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:25 executing program 1: r0 = syz_open_dev$binderN(0x0, 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1452.875132][ T3211] binder: 3208:3211 ioctl c0306201 0 returned -14 06:44:25 executing program 4: socket$inet_udp(0x2, 0x2c, 0x0) 06:44:25 executing program 5: eventfd2(0x0, 0x2) 06:44:25 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:25 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:25 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:25 executing program 4: socket$inet_udp(0x2, 0xa, 0x0) 06:44:25 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1453.036162][ T3225] binder: 3222:3225 ioctl c0306201 0 returned -14 06:44:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:26 executing program 5: eventfd2(0x0, 0x2) 06:44:26 executing program 1: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:26 executing program 4: socket$inet_udp(0x2, 0xa, 0x0) [ 1453.186916][ T3235] binder: 3233:3235 ioctl c0306201 0 returned -14 06:44:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:26 executing program 5: eventfd2(0x0, 0x2) [ 1453.263643][ T3245] binder: 3237:3245 ioctl c0306201 0 returned -14 06:44:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:26 executing program 1: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:26 executing program 4: socket$inet_udp(0x2, 0xa, 0x0) 06:44:26 executing program 5: eventfd2(0x0, 0x0) [ 1453.357255][ T3251] binder: 3248:3251 ioctl c0306201 0 returned -14 06:44:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:26 executing program 1: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:26 executing program 5: eventfd2(0x0, 0x0) 06:44:26 executing program 4: socket$inet_udp(0x2, 0xa, 0x0) [ 1453.530819][ T3265] binder: 3261:3265 ioctl c0306201 0 returned -14 06:44:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:26 executing program 4: socket$inet_udp(0x2, 0xa, 0x0) 06:44:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x5c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:26 executing program 5: eventfd2(0x0, 0x0) 06:44:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1453.760051][ T3283] binder: 3278:3283 ioctl c0306201 0 returned -14 06:44:26 executing program 4: socket$inet_udp(0x2, 0xa, 0x0) 06:44:26 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:26 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:26 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:26 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) ioctl$FIONREAD(r0, 0x541b, 0x0) read$FUSE(r0, 0x0, 0x0) [ 1454.007136][ T3304] binder: 3299:3304 ioctl c0306201 0 returned -14 06:44:26 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:26 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:26 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) ioctl$FIONREAD(r0, 0x541b, 0x0) read$FUSE(r0, 0x0, 0x0) 06:44:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x20, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @dead_binder_done], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1454.212396][ T3321] binder: 3317:3321 ioctl c0306201 0 returned -14 06:44:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) ioctl$FIONREAD(r0, 0x541b, 0x0) read$FUSE(r0, 0x0, 0x0) 06:44:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x60, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) 06:44:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x5c, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:27 executing program 4: read$FUSE(0xffffffffffffffff, 0x0, 0x0) 06:44:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 2: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 4: read$FUSE(0xffffffffffffffff, 0x0, 0x0) 06:44:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:27 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 4: read$FUSE(0xffffffffffffffff, 0x0, 0x0) 06:44:27 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) 06:44:27 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:27 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:27 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, 0x0}) 06:44:28 executing program 4: r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x8a02) read$FUSE(r0, 0x0, 0x0) 06:44:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:28 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:28 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) 06:44:28 executing program 4: r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x8a02) read$FUSE(r0, 0x0, 0x0) 06:44:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, 0x0}) 06:44:28 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:28 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:28 executing program 4: r0 = openat$mice(0xffffffffffffff9c, 0x0, 0x8a02) read$FUSE(r0, 0x0, 0x0) 06:44:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, 0x0}) 06:44:28 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) 06:44:28 executing program 0: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, 0x0, 0xf0ffffff7f0000) read$FUSE(r0, &(0x7f0000000d80)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = geteuid() write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x90, 0x0, r1, {0x1, 0x1, 0x1, 0x1, 0x5, 0xffff, {0x3, 0x81, 0x0, 0x2880, 0x9, 0x7, 0x1, 0x9, 0x2, 0x4000, 0x3, r4, 0xee00, 0xfd5, 0x4}}}, 0x90) r5 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x42240) read$FUSE(r0, &(0x7f0000002dc0)={0x2020, 0x0, 0x0}, 0x2020) r7 = getegid() ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=0x0) r9 = getegid() read$FUSE(r0, &(0x7f0000004e00)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r11 = geteuid() read$FUSE(0xffffffffffffffff, &(0x7f0000006e40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="8802000000000000", @ANYRES64=r6, @ANYBLOB="0300000000000000010000000000000005000000000000000100000000000000d6000000f1e50000ff0000000000000002000000000000000e4c000000000000020000000000000000020000000000000000000000000000010000007f000000000001000040000004000000", @ANYRES32=r2, @ANYRES32=r7, @ANYBLOB="0700000000000080000000000100000000000000ffff00000000000000000000000000000100000000000000010000000000000008000000000000007f00000000000000ff0000000800000003000000000000005b00000000000000fdffffffffffffff070000000000000007000000000000000300000000000000c715ba1005000000040000000010000000f0ffff", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="090000000900000000000000040000000000000006000000000000000000000086d4000002000000000000000000000000000000c10c000000000000050000000000000001000000060000000400000000000000ff0f0000000000008c0083680000000001010000000000000900000000000000d2000000000000008000000002000000040000000020000009000000", @ANYRES32=r10, @ANYRES32=r3, @ANYBLOB="0200000005000000000000000100000000000000000400000000000002000000001000005e5c00000000000000000000000000000100000000000000ff7f00000000000001000000000000001b389601000400000000000000000000018000000000000006000000000000000000000000000000001000000000000001000000000000006d5d8212018000000700000000a00000ff000000", @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="050000008000000000000000050000000000000004000000000000000a000000feffffff2f6465762f6675736500000000000000"], 0x288) 06:44:28 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x14, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper, @exit_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:28 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) read$FUSE(r0, 0x0, 0x0) 06:44:28 executing program 0: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r3, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r6 = accept4(r5, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r2, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r2, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xb5f}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 06:44:28 executing program 2: openat$fuse(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/fuse\x00', 0x2, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r0, 0x0, 0x0) 06:44:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, 0x0}) 06:44:28 executing program 2 (fault-call:0 fault-nth:0): socket$inet_udp(0x2, 0x3, 0x0) [ 1455.853520][ T3453] binder: 3451:3453 ioctl c0306201 0 returned -14 06:44:28 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:28 executing program 0 (fault-call:1 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1455.953676][ T3460] FAULT_INJECTION: forcing a failure. [ 1455.953676][ T3460] name failslab, interval 1, probability 0, space 0, times 0 06:44:28 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:28 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, 0x0}) [ 1456.018676][ T3460] CPU: 1 PID: 3460 Comm: syz-executor.2 Not tainted 5.11.0-rc2-syzkaller #0 [ 1456.027507][ T3460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1456.037627][ T3460] Call Trace: [ 1456.040919][ T3460] dump_stack+0x107/0x163 [ 1456.045262][ T3460] should_fail.cold+0x5/0xa [ 1456.049771][ T3460] ? sock_alloc_inode+0x18/0x1c0 [ 1456.054720][ T3460] should_failslab+0x5/0x10 [ 1456.059320][ T3460] kmem_cache_alloc+0x5b/0x440 [ 1456.064160][ T3460] ? sock_free_inode+0x20/0x20 [ 1456.069021][ T3460] sock_alloc_inode+0x18/0x1c0 [ 1456.073793][ T3460] ? sock_free_inode+0x20/0x20 [ 1456.078656][ T3460] alloc_inode+0x61/0x230 [ 1456.082990][ T3460] new_inode_pseudo+0x14/0xe0 [ 1456.087674][ T3460] sock_alloc+0x3c/0x260 [ 1456.091931][ T3460] __sock_create+0xb9/0x780 [ 1456.096469][ T3460] ? wait_for_completion_io+0x260/0x260 [ 1456.102117][ T3460] __sys_socket+0xef/0x200 [ 1456.106538][ T3460] ? move_addr_to_kernel+0x70/0x70 [ 1456.111667][ T3460] __x64_sys_socket+0x6f/0xb0 [ 1456.116353][ T3460] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1456.122250][ T3460] do_syscall_64+0x2d/0x70 [ 1456.126670][ T3460] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1456.132570][ T3460] RIP: 0033:0x45e219 [ 1456.136463][ T3460] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1456.156335][ T3460] RSP: 002b:00007fc614a6ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1456.164931][ T3460] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1456.172904][ T3460] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 1456.180876][ T3460] RBP: 00007fc614a6eca0 R08: 0000000000000000 R09: 0000000000000000 [ 1456.188849][ T3460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1456.196820][ T3460] R13: 00007ffde0d75c7f R14: 00007fc614a6f9c0 R15: 000000000119bf8c 06:44:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, 0x0}) [ 1456.306936][ T3475] FAULT_INJECTION: forcing a failure. [ 1456.306936][ T3475] name failslab, interval 1, probability 0, space 0, times 0 [ 1456.307614][ T3477] binder: 3468:3477 ioctl c0306201 0 returned -14 [ 1456.362785][ T3475] CPU: 0 PID: 3475 Comm: syz-executor.0 Not tainted 5.11.0-rc2-syzkaller #0 [ 1456.371708][ T3475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1456.381785][ T3475] Call Trace: [ 1456.385083][ T3475] dump_stack+0x107/0x163 [ 1456.389455][ T3475] should_fail.cold+0x5/0xa [ 1456.393984][ T3475] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1456.399825][ T3475] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1456.405575][ T3475] should_failslab+0x5/0x10 [ 1456.410110][ T3475] __kmalloc+0x72/0x3e0 [ 1456.414290][ T3475] tomoyo_realpath_from_path+0xc3/0x620 [ 1456.419869][ T3475] ? tomoyo_profile+0x42/0x50 [ 1456.424580][ T3475] tomoyo_path_number_perm+0x1d5/0x590 [ 1456.429338][ T3460] socket: no more sockets [ 1456.430152][ T3475] ? tomoyo_path_number_perm+0x18d/0x590 [ 1456.440140][ T3475] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1456.446008][ T3475] ? lock_downgrade+0x6d0/0x6d0 [ 1456.450891][ T3475] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1456.456477][ T3475] ? __fget_files+0x288/0x3d0 [ 1456.461183][ T3475] security_file_ioctl+0x50/0xb0 [ 1456.466152][ T3475] __x64_sys_ioctl+0xb3/0x200 [ 1456.470857][ T3475] do_syscall_64+0x2d/0x70 [ 1456.475466][ T3475] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1456.481383][ T3475] RIP: 0033:0x45e219 [ 1456.485296][ T3475] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1456.504947][ T3475] RSP: 002b:00007fcd00445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1456.513379][ T3475] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1456.521366][ T3475] RDX: 0000000020000340 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1456.529341][ T3475] RBP: 00007fcd00445ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1456.537405][ T3475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1456.545384][ T3475] R13: 00007ffcb40db4ff R14: 00007fcd004469c0 R15: 000000000119bf8c [ 1456.563282][ T3475] ERROR: Out of memory at tomoyo_realpath_from_path. 06:44:29 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) read$FUSE(r0, 0x0, 0x0) 06:44:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x3e, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d9"}) 06:44:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:29 executing program 2 (fault-call:0 fault-nth:1): socket$inet_udp(0x2, 0x3, 0x0) 06:44:29 executing program 0 (fault-call:1 fault-nth:1): r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:29 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1456.716685][ T3494] FAULT_INJECTION: forcing a failure. [ 1456.716685][ T3494] name failslab, interval 1, probability 0, space 0, times 0 [ 1456.735278][ T3497] binder: 3491:3497 ioctl c0306201 0 returned -14 [ 1456.735654][ T3496] FAULT_INJECTION: forcing a failure. [ 1456.735654][ T3496] name failslab, interval 1, probability 0, space 0, times 0 [ 1456.758035][ T3494] CPU: 1 PID: 3494 Comm: syz-executor.2 Not tainted 5.11.0-rc2-syzkaller #0 06:44:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1456.766990][ T3494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1456.777051][ T3494] Call Trace: [ 1456.780331][ T3494] dump_stack+0x107/0x163 [ 1456.784671][ T3494] should_fail.cold+0x5/0xa [ 1456.789267][ T3494] ? security_inode_alloc+0x34/0x160 [ 1456.794580][ T3494] should_failslab+0x5/0x10 [ 1456.799112][ T3494] kmem_cache_alloc+0x5b/0x440 [ 1456.803984][ T3494] security_inode_alloc+0x34/0x160 [ 1456.809116][ T3494] inode_init_always+0x5a9/0xdb0 [ 1456.814083][ T3494] ? __init_waitqueue_head+0x97/0x110 [ 1456.819490][ T3494] alloc_inode+0x82/0x230 [ 1456.823855][ T3494] new_inode_pseudo+0x14/0xe0 [ 1456.828572][ T3494] sock_alloc+0x3c/0x260 [ 1456.832860][ T3494] __sock_create+0xb9/0x780 [ 1456.837573][ T3494] ? wait_for_completion_io+0x260/0x260 [ 1456.843160][ T3494] __sys_socket+0xef/0x200 [ 1456.847605][ T3494] ? move_addr_to_kernel+0x70/0x70 [ 1456.852754][ T3494] __x64_sys_socket+0x6f/0xb0 [ 1456.857466][ T3494] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1456.863401][ T3494] do_syscall_64+0x2d/0x70 [ 1456.867858][ T3494] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1456.873789][ T3494] RIP: 0033:0x45e219 [ 1456.877711][ T3494] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1456.897348][ T3494] RSP: 002b:00007fc614a6ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1456.905880][ T3494] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 06:44:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:29 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:29 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1456.913877][ T3494] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 1456.921874][ T3494] RBP: 00007fc614a6eca0 R08: 0000000000000000 R09: 0000000000000000 [ 1456.929866][ T3494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1456.937862][ T3494] R13: 00007ffde0d75c7f R14: 00007fc614a6f9c0 R15: 000000000119bf8c [ 1456.962769][ T3496] CPU: 1 PID: 3496 Comm: syz-executor.0 Not tainted 5.11.0-rc2-syzkaller #0 [ 1456.971514][ T3496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1456.981599][ T3496] Call Trace: [ 1456.984900][ T3496] dump_stack+0x107/0x163 [ 1456.989265][ T3496] should_fail.cold+0x5/0xa [ 1456.993801][ T3496] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1456.999198][ T3496] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1457.004596][ T3496] should_failslab+0x5/0x10 [ 1457.009471][ T3496] __kmalloc+0x72/0x3e0 06:44:29 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) [ 1457.013907][ T3496] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1457.019132][ T3496] tomoyo_encode+0x28/0x50 [ 1457.023657][ T3496] tomoyo_realpath_from_path+0x186/0x620 [ 1457.029407][ T3496] tomoyo_path_number_perm+0x1d5/0x590 [ 1457.034900][ T3496] ? tomoyo_path_number_perm+0x18d/0x590 [ 1457.040824][ T3496] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1457.046771][ T3496] ? lock_downgrade+0x6d0/0x6d0 [ 1457.051816][ T3496] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1457.057393][ T3496] ? __fget_files+0x288/0x3d0 [ 1457.062091][ T3496] security_file_ioctl+0x50/0xb0 [ 1457.067048][ T3496] __x64_sys_ioctl+0xb3/0x200 [ 1457.071741][ T3496] do_syscall_64+0x2d/0x70 [ 1457.076166][ T3496] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1457.082083][ T3496] RIP: 0033:0x45e219 [ 1457.085994][ T3496] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1457.105738][ T3496] RSP: 002b:00007fcd00445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1457.114167][ T3496] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1457.122334][ T3496] RDX: 0000000020000340 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1457.130440][ T3496] RBP: 00007fcd00445ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1457.138434][ T3496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1457.146430][ T3496] R13: 00007ffcb40db4ff R14: 00007fcd004469c0 R15: 000000000119bf8c [ 1457.174170][ T3494] socket: no more sockets [ 1457.179096][ T3496] ERROR: Out of memory at tomoyo_realpath_from_path. 06:44:30 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) read$FUSE(r0, 0x0, 0x0) 06:44:30 executing program 2 (fault-call:0 fault-nth:2): socket$inet_udp(0x2, 0x3, 0x0) 06:44:30 executing program 0 (fault-call:1 fault-nth:2): r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:30 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x3e, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d9"}) 06:44:30 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) [ 1457.667124][ T3530] FAULT_INJECTION: forcing a failure. [ 1457.667124][ T3530] name failslab, interval 1, probability 0, space 0, times 0 [ 1457.675421][ T3529] FAULT_INJECTION: forcing a failure. [ 1457.675421][ T3529] name failslab, interval 1, probability 0, space 0, times 0 06:44:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1457.717616][ T3530] CPU: 1 PID: 3530 Comm: syz-executor.2 Not tainted 5.11.0-rc2-syzkaller #0 [ 1457.726508][ T3530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1457.736567][ T3530] Call Trace: [ 1457.739846][ T3530] dump_stack+0x107/0x163 [ 1457.744188][ T3530] should_fail.cold+0x5/0xa [ 1457.748694][ T3530] ? __request_module+0x2f8/0xa40 [ 1457.753821][ T3530] ? __request_module+0x2f8/0xa40 [ 1457.758849][ T3530] ? inet_create+0xc97/0xe90 [ 1457.763450][ T3530] should_failslab+0x5/0x10 [ 1457.767988][ T3530] kmem_cache_alloc_trace+0x55/0x360 [ 1457.773276][ T3530] ? inet_create+0xc97/0xe90 [ 1457.777871][ T3530] __request_module+0x2f8/0xa40 [ 1457.782727][ T3530] ? free_modprobe_argv+0x90/0x90 [ 1457.787752][ T3530] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1457.793839][ T3530] ? find_held_lock+0x2d/0x110 [ 1457.798708][ T3530] ? inet_create+0xa4a/0xe90 [ 1457.803330][ T3530] ? lock_downgrade+0x6d0/0x6d0 [ 1457.808188][ T3530] ? find_held_lock+0x2d/0x110 [ 1457.812962][ T3530] ? inet_create+0xa79/0xe90 06:44:30 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) [ 1457.817566][ T3530] inet_create+0xc97/0xe90 [ 1457.821997][ T3530] __sock_create+0x3de/0x780 [ 1457.826595][ T3530] __sys_socket+0xef/0x200 [ 1457.831036][ T3530] ? move_addr_to_kernel+0x70/0x70 [ 1457.836164][ T3530] __x64_sys_socket+0x6f/0xb0 [ 1457.840936][ T3530] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1457.846861][ T3530] do_syscall_64+0x2d/0x70 [ 1457.851295][ T3530] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1457.857279][ T3530] RIP: 0033:0x45e219 [ 1457.861176][ T3530] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1457.880787][ T3530] RSP: 002b:00007fc614a6ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1457.889480][ T3530] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1457.897478][ T3530] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 1457.905467][ T3530] RBP: 00007fc614a6eca0 R08: 0000000000000000 R09: 0000000000000000 [ 1457.913453][ T3530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1457.921439][ T3530] R13: 00007ffde0d75c7f R14: 00007fc614a6f9c0 R15: 000000000119bf8c [ 1457.929448][ T3529] CPU: 0 PID: 3529 Comm: syz-executor.0 Not tainted 5.11.0-rc2-syzkaller #0 [ 1457.938160][ T3529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1457.948231][ T3529] Call Trace: [ 1457.951522][ T3529] dump_stack+0x107/0x163 [ 1457.955887][ T3529] should_fail.cold+0x5/0xa [ 1457.960421][ T3529] ? binder_get_thread+0x29b/0x990 [ 1457.965567][ T3529] ? binder_get_thread+0x29b/0x990 [ 1457.970711][ T3529] should_failslab+0x5/0x10 [ 1457.975243][ T3529] kmem_cache_alloc_trace+0x55/0x360 [ 1457.980562][ T3529] binder_get_thread+0x29b/0x990 [ 1457.985533][ T3529] binder_ioctl+0x21f/0x5ed0 [ 1457.990160][ T3529] ? tomoyo_path_number_perm+0x24e/0x590 [ 1457.995825][ T3529] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1458.001677][ T3529] ? binder_thread_write+0x2d30/0x2d30 [ 1458.007176][ T3529] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1458.013371][ T3529] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1458.019641][ T3529] ? do_vfs_ioctl+0x27d/0x1090 [ 1458.024430][ T3529] ? generic_block_fiemap+0x60/0x60 [ 1458.029658][ T3529] ? lock_downgrade+0x6d0/0x6d0 [ 1458.034536][ T3529] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1458.040120][ T3529] ? __fget_files+0x288/0x3d0 [ 1458.044830][ T3529] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1458.051191][ T3529] ? binder_thread_write+0x2d30/0x2d30 [ 1458.056685][ T3529] __x64_sys_ioctl+0x193/0x200 [ 1458.061577][ T3529] do_syscall_64+0x2d/0x70 [ 1458.066026][ T3529] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1458.071951][ T3529] RIP: 0033:0x45e219 [ 1458.076041][ T3529] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1458.095769][ T3529] RSP: 002b:00007fcd00445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1458.104214][ T3529] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 06:44:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1458.112207][ T3529] RDX: 0000000020000340 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1458.120199][ T3529] RBP: 00007fcd00445ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1458.128189][ T3529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1458.136174][ T3529] R13: 00007ffcb40db4ff R14: 00007fcd004469c0 R15: 000000000119bf8c 06:44:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:31 executing program 0 (fault-call:1 fault-nth:3): r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1458.201179][ T3529] binder: 3526:3529 ioctl c0306201 20000340 returned -12 [ 1458.227462][ T3547] binder: 3546:3547 ioctl c0306201 0 returned -14 [ 1458.342817][ T3553] FAULT_INJECTION: forcing a failure. [ 1458.342817][ T3553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1458.357389][ T3553] CPU: 0 PID: 3553 Comm: syz-executor.0 Not tainted 5.11.0-rc2-syzkaller #0 [ 1458.366097][ T3553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1458.376171][ T3553] Call Trace: [ 1458.379466][ T3553] dump_stack+0x107/0x163 [ 1458.383826][ T3553] should_fail.cold+0x5/0xa [ 1458.388445][ T3553] _copy_from_user+0x2c/0x180 [ 1458.393176][ T3553] binder_ioctl+0x497/0x5ed0 [ 1458.397801][ T3553] ? tomoyo_path_number_perm+0x24e/0x590 [ 1458.403470][ T3553] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1458.409327][ T3553] ? binder_thread_write+0x2d30/0x2d30 [ 1458.414819][ T3553] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1458.420744][ T3553] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1458.427022][ T3553] ? do_vfs_ioctl+0x27d/0x1090 [ 1458.431906][ T3553] ? generic_block_fiemap+0x60/0x60 [ 1458.437139][ T3553] ? lock_downgrade+0x6d0/0x6d0 [ 1458.442022][ T3553] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1458.447606][ T3553] ? __fget_files+0x288/0x3d0 [ 1458.452318][ T3553] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1458.458593][ T3553] ? binder_thread_write+0x2d30/0x2d30 [ 1458.464183][ T3553] __x64_sys_ioctl+0x193/0x200 [ 1458.468976][ T3553] do_syscall_64+0x2d/0x70 [ 1458.473417][ T3553] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1458.479341][ T3553] RIP: 0033:0x45e219 [ 1458.483254][ T3553] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1458.502975][ T3553] RSP: 002b:00007fcd00445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1458.511412][ T3553] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1458.519407][ T3553] RDX: 0000000020000340 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1458.527433][ T3553] RBP: 00007fcd00445ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1458.535427][ T3553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1458.543678][ T3553] R13: 00007ffcb40db4ff R14: 00007fcd004469c0 R15: 000000000119bf8c 06:44:31 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 06:44:31 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f0000000240)=[@free_buffer, @enter_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:31 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:31 executing program 2 (fault-call:0 fault-nth:3): socket$inet_udp(0x2, 0x3, 0x0) [ 1458.587851][ T3553] binder: 3551:3553 ioctl c0306201 20000340 returned -14 06:44:31 executing program 0 (fault-call:1 fault-nth:4): r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:31 executing program 1 (fault-call:1 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1458.648863][ T3564] FAULT_INJECTION: forcing a failure. [ 1458.648863][ T3564] name failslab, interval 1, probability 0, space 0, times 0 [ 1458.679308][ T3567] binder: 3560:3567 ioctl c0306201 0 returned -14 [ 1458.716022][ T3564] CPU: 1 PID: 3564 Comm: syz-executor.2 Not tainted 5.11.0-rc2-syzkaller #0 [ 1458.724946][ T3564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1458.735020][ T3564] Call Trace: [ 1458.738340][ T3564] dump_stack+0x107/0x163 [ 1458.742706][ T3564] should_fail.cold+0x5/0xa [ 1458.747238][ T3564] ? __request_module+0x316/0xa40 [ 1458.752467][ T3564] ? __request_module+0x316/0xa40 [ 1458.757520][ T3564] ? inet_create+0xc97/0xe90 [ 1458.762140][ T3564] should_failslab+0x5/0x10 06:44:31 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 1458.766676][ T3564] __kmalloc_track_caller+0x70/0x3b0 [ 1458.771992][ T3564] ? inet_create+0xc97/0xe90 [ 1458.776616][ T3564] kstrdup+0x36/0x70 [ 1458.780631][ T3564] __request_module+0x316/0xa40 [ 1458.785512][ T3564] ? free_modprobe_argv+0x90/0x90 [ 1458.790565][ T3564] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1458.796594][ T3564] ? find_held_lock+0x2d/0x110 [ 1458.801388][ T3564] ? inet_create+0xa4a/0xe90 [ 1458.806093][ T3564] ? lock_downgrade+0x6d0/0x6d0 [ 1458.811149][ T3564] ? find_held_lock+0x2d/0x110 [ 1458.815954][ T3564] ? inet_create+0xa79/0xe90 [ 1458.820580][ T3564] inet_create+0xc97/0xe90 [ 1458.825046][ T3564] __sock_create+0x3de/0x780 [ 1458.829682][ T3564] __sys_socket+0xef/0x200 [ 1458.834129][ T3564] ? move_addr_to_kernel+0x70/0x70 [ 1458.839268][ T3564] __x64_sys_socket+0x6f/0xb0 [ 1458.843975][ T3564] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1458.849903][ T3564] do_syscall_64+0x2d/0x70 [ 1458.854343][ T3564] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1458.860266][ T3564] RIP: 0033:0x45e219 [ 1458.864182][ T3564] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1458.883814][ T3564] RSP: 002b:00007fc614a6ec68 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1458.892252][ T3564] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045e219 [ 1458.900246][ T3564] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000002 [ 1458.908246][ T3564] RBP: 00007fc614a6eca0 R08: 0000000000000000 R09: 0000000000000000 06:44:31 executing program 3: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 06:44:31 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1458.916246][ T3564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1458.924242][ T3564] R13: 00007ffde0d75c7f R14: 00007fc614a6f9c0 R15: 000000000119bf8c [ 1458.972786][ T3575] FAULT_INJECTION: forcing a failure. [ 1458.972786][ T3575] name failslab, interval 1, probability 0, space 0, times 0 [ 1458.992801][ T3576] FAULT_INJECTION: forcing a failure. [ 1458.992801][ T3576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1459.050657][ T3575] CPU: 1 PID: 3575 Comm: syz-executor.1 Not tainted 5.11.0-rc2-syzkaller #0 [ 1459.059490][ T3575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1459.069575][ T3575] Call Trace: [ 1459.072870][ T3575] dump_stack+0x107/0x163 [ 1459.077241][ T3575] should_fail.cold+0x5/0xa [ 1459.081778][ T3575] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1459.087538][ T3575] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1459.093302][ T3575] should_failslab+0x5/0x10 [ 1459.097834][ T3575] __kmalloc+0x72/0x3e0 [ 1459.102026][ T3575] tomoyo_realpath_from_path+0xc3/0x620 [ 1459.107620][ T3575] ? tomoyo_profile+0x42/0x50 [ 1459.112333][ T3575] tomoyo_path_number_perm+0x1d5/0x590 [ 1459.117818][ T3575] ? tomoyo_path_number_perm+0x18d/0x590 [ 1459.123490][ T3575] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1459.129360][ T3575] ? lock_downgrade+0x6d0/0x6d0 [ 1459.134245][ T3575] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1459.139833][ T3575] ? __fget_files+0x288/0x3d0 [ 1459.144549][ T3575] security_file_ioctl+0x50/0xb0 [ 1459.149521][ T3575] __x64_sys_ioctl+0xb3/0x200 [ 1459.154236][ T3575] do_syscall_64+0x2d/0x70 [ 1459.158690][ T3575] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1459.164618][ T3575] RIP: 0033:0x45e219 [ 1459.168532][ T3575] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1459.188514][ T3575] RSP: 002b:00007f4c27ef1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1459.196944][ T3575] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1459.204943][ T3575] RDX: 0000000020000340 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1459.212936][ T3575] RBP: 00007f4c27ef1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1459.220923][ T3575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1459.229011][ T3575] R13: 00007fffa49f90ef R14: 00007f4c27ef29c0 R15: 000000000119bf8c [ 1459.237028][ T3576] CPU: 0 PID: 3576 Comm: syz-executor.0 Not tainted 5.11.0-rc2-syzkaller #0 [ 1459.245746][ T3576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1459.256170][ T3576] Call Trace: [ 1459.259559][ T3576] dump_stack+0x107/0x163 [ 1459.264040][ T3576] should_fail.cold+0x5/0xa [ 1459.268584][ T3576] _copy_from_user+0x2c/0x180 [ 1459.273296][ T3576] binder_thread_write+0x878/0x2d30 [ 1459.279490][ T3576] ? binder_transaction+0x6a70/0x6a70 [ 1459.284909][ T3576] ? find_held_lock+0x2d/0x110 [ 1459.289710][ T3576] ? __might_fault+0xd3/0x180 [ 1459.294587][ T3576] ? lock_downgrade+0x6d0/0x6d0 [ 1459.299486][ T3576] binder_ioctl+0x1145/0x5ed0 [ 1459.304201][ T3576] ? tomoyo_path_number_perm+0x24e/0x590 [ 1459.309867][ T3576] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1459.315882][ T3576] ? binder_thread_write+0x2d30/0x2d30 [ 1459.321380][ T3576] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1459.327307][ T3576] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1459.333586][ T3576] ? do_vfs_ioctl+0x27d/0x1090 [ 1459.338385][ T3576] ? generic_block_fiemap+0x60/0x60 [ 1459.343615][ T3576] ? lock_downgrade+0x6d0/0x6d0 [ 1459.348497][ T3576] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1459.354090][ T3576] ? __fget_files+0x288/0x3d0 [ 1459.358804][ T3576] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1459.365083][ T3576] ? binder_thread_write+0x2d30/0x2d30 [ 1459.370581][ T3576] __x64_sys_ioctl+0x193/0x200 [ 1459.375379][ T3576] do_syscall_64+0x2d/0x70 [ 1459.379824][ T3576] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1459.385763][ T3576] RIP: 0033:0x45e219 [ 1459.389684][ T3576] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1459.409667][ T3576] RSP: 002b:00007fcd00445c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1459.418194][ T3576] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1459.426184][ T3576] RDX: 0000000020000340 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1459.434174][ T3576] RBP: 00007fcd00445ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1459.442163][ T3576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 06:44:32 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:32 executing program 3 (fault-call:1 fault-nth:0): r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:32 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(0xffffffffffffffff, 0x0, 0x0) [ 1459.450151][ T3576] R13: 00007ffcb40db4ff R14: 00007fcd004469c0 R15: 000000000119bf8c 06:44:32 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f0000000240)=[@free_buffer], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) [ 1459.648486][ T3625] FAULT_INJECTION: forcing a failure. [ 1459.648486][ T3625] name failslab, interval 1, probability 0, space 0, times 0 [ 1459.761845][ T3625] CPU: 1 PID: 3625 Comm: syz-executor.3 Not tainted 5.11.0-rc2-syzkaller #0 [ 1459.770658][ T3625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1459.780719][ T3625] Call Trace: [ 1459.784008][ T3625] dump_stack+0x107/0x163 [ 1459.788361][ T3625] should_fail.cold+0x5/0xa [ 1459.792873][ T3625] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1459.798864][ T3625] ? tomoyo_realpath_from_path+0xc3/0x620 [ 1459.804591][ T3625] should_failslab+0x5/0x10 [ 1459.809255][ T3625] __kmalloc+0x72/0x3e0 [ 1459.813425][ T3625] tomoyo_realpath_from_path+0xc3/0x620 [ 1459.818984][ T3625] ? tomoyo_profile+0x42/0x50 [ 1459.823676][ T3625] tomoyo_path_number_perm+0x1d5/0x590 [ 1459.829149][ T3625] ? tomoyo_path_number_perm+0x18d/0x590 [ 1459.834796][ T3625] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1459.840742][ T3625] ? lock_downgrade+0x6d0/0x6d0 [ 1459.845631][ T3625] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1459.846221][ T3575] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1459.851211][ T3625] ? __fget_files+0x288/0x3d0 [ 1459.851241][ T3625] security_file_ioctl+0x50/0xb0 [ 1459.851268][ T3625] __x64_sys_ioctl+0xb3/0x200 [ 1459.851302][ T3625] do_syscall_64+0x2d/0x70 [ 1459.851324][ T3625] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1459.851349][ T3625] RIP: 0033:0x45e219 [ 1459.886620][ T3625] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1459.906253][ T3625] RSP: 002b:00007f768a0acc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1459.914699][ T3625] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1459.922692][ T3625] RDX: 0000000020000340 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1459.923848][ T3576] binder: 3570:3576 ioctl c0306201 20000340 returned -14 [ 1459.930680][ T3625] RBP: 00007f768a0acca0 R08: 0000000000000000 R09: 0000000000000000 [ 1459.930696][ T3625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1459.930707][ T3625] R13: 00007fffb0a9218f R14: 00007f768a0ad9c0 R15: 000000000119bf8c 06:44:32 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) 06:44:32 executing program 4 (fault-call:1 fault-nth:0): r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) 06:44:32 executing program 1 (fault-call:1 fault-nth:1): r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1460.058526][ T3644] FAULT_INJECTION: forcing a failure. [ 1460.058526][ T3644] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1460.125042][ T3651] FAULT_INJECTION: forcing a failure. [ 1460.125042][ T3651] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.126534][ T3644] CPU: 1 PID: 3644 Comm: syz-executor.4 Not tainted 5.11.0-rc2-syzkaller #0 [ 1460.146728][ T3644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1460.156978][ T3644] Call Trace: [ 1460.160269][ T3644] dump_stack+0x107/0x163 [ 1460.164621][ T3644] should_fail.cold+0x5/0xa [ 1460.169145][ T3644] _copy_to_user+0x2c/0x150 [ 1460.173664][ T3644] simple_read_from_buffer+0xcc/0x160 [ 1460.179058][ T3644] proc_fail_nth_read+0x187/0x220 [ 1460.184113][ T3644] ? proc_exe_link+0x1d0/0x1d0 [ 1460.188908][ T3644] ? security_file_permission+0x248/0x560 [ 1460.194663][ T3644] ? proc_exe_link+0x1d0/0x1d0 [ 1460.199456][ T3644] vfs_read+0x1b5/0x570 [ 1460.203648][ T3644] ksys_read+0x12d/0x250 [ 1460.207920][ T3644] ? vfs_write+0xa30/0xa30 [ 1460.212363][ T3644] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1460.218286][ T3644] do_syscall_64+0x2d/0x70 [ 1460.222746][ T3644] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1460.228672][ T3644] RIP: 0033:0x417b11 [ 1460.232587][ T3644] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1460.252215][ T3644] RSP: 002b:00007f313ac86c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 1460.260649][ T3644] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 0000000000417b11 [ 1460.268653][ T3644] RDX: 000000000000000f RSI: 00007f313ac86cb0 RDI: 0000000000000004 [ 1460.276645][ T3644] RBP: 00007f313ac86ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1460.284633][ T3644] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1460.292620][ T3644] R13: 00007fff8683f31f R14: 00007f313ac879c0 R15: 000000000119bf8c [ 1460.313293][ T3651] CPU: 0 PID: 3651 Comm: syz-executor.1 Not tainted 5.11.0-rc2-syzkaller #0 [ 1460.322038][ T3651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1460.332121][ T3651] Call Trace: [ 1460.335417][ T3651] dump_stack+0x107/0x163 [ 1460.339782][ T3651] should_fail.cold+0x5/0xa [ 1460.344334][ T3651] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1460.349742][ T3651] ? tomoyo_encode2.part.0+0xe9/0x3a0 [ 1460.355150][ T3651] should_failslab+0x5/0x10 [ 1460.359687][ T3651] __kmalloc+0x72/0x3e0 [ 1460.363877][ T3651] tomoyo_encode2.part.0+0xe9/0x3a0 [ 1460.369113][ T3651] tomoyo_encode+0x28/0x50 [ 1460.373560][ T3651] tomoyo_realpath_from_path+0x186/0x620 [ 1460.379509][ T3651] tomoyo_path_number_perm+0x1d5/0x590 [ 1460.385003][ T3651] ? tomoyo_path_number_perm+0x18d/0x590 [ 1460.390682][ T3651] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1460.396543][ T3651] ? lock_downgrade+0x6d0/0x6d0 [ 1460.401430][ T3651] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1460.407012][ T3651] ? __fget_files+0x288/0x3d0 [ 1460.411729][ T3651] security_file_ioctl+0x50/0xb0 [ 1460.416701][ T3651] __x64_sys_ioctl+0xb3/0x200 [ 1460.421414][ T3651] do_syscall_64+0x2d/0x70 [ 1460.425856][ T3651] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1460.431780][ T3651] RIP: 0033:0x45e219 [ 1460.435957][ T3651] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1460.455589][ T3651] RSP: 002b:00007f4c27ef1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1460.464029][ T3651] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 06:44:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x7b, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d92a271c9dc972952f0b9ccd3c2637b36ff58ac3c04589d8cc2c5181330286c36522e23e4fb80e6691da423b965e02a1e489c6eb199d65a6760d81be8097"}) 06:44:33 executing program 2: socket$inet_udp(0x8, 0x3, 0x0) [ 1460.472032][ T3651] RDX: 0000000020000340 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1460.480031][ T3651] RBP: 00007f4c27ef1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1460.488029][ T3651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1460.496026][ T3651] R13: 00007fffa49f90ef R14: 00007f4c27ef29c0 R15: 000000000119bf8c [ 1460.509122][ T3651] ERROR: Out of memory at tomoyo_realpath_from_path. 06:44:33 executing program 2: socket$inet_udp(0xa, 0x3, 0x0) 06:44:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, 0x0}) 06:44:33 executing program 1 (fault-call:1 fault-nth:2): r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1460.695948][ T3625] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1460.713193][ T3670] FAULT_INJECTION: forcing a failure. [ 1460.713193][ T3670] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.767482][ T3670] CPU: 1 PID: 3670 Comm: syz-executor.1 Not tainted 5.11.0-rc2-syzkaller #0 [ 1460.776325][ T3670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1460.786403][ T3670] Call Trace: [ 1460.789704][ T3670] dump_stack+0x107/0x163 [ 1460.794072][ T3670] should_fail.cold+0x5/0xa [ 1460.798608][ T3670] ? binder_get_thread+0x29b/0x990 [ 1460.803850][ T3670] ? binder_get_thread+0x29b/0x990 [ 1460.808986][ T3670] should_failslab+0x5/0x10 [ 1460.813512][ T3670] kmem_cache_alloc_trace+0x55/0x360 [ 1460.819005][ T3670] binder_get_thread+0x29b/0x990 [ 1460.823994][ T3670] binder_ioctl+0x21f/0x5ed0 [ 1460.828612][ T3670] ? tomoyo_path_number_perm+0x24e/0x590 [ 1460.834282][ T3670] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1460.840388][ T3670] ? binder_thread_write+0x2d30/0x2d30 [ 1460.845884][ T3670] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1460.852161][ T3670] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1460.858434][ T3670] ? do_vfs_ioctl+0x27d/0x1090 [ 1460.863229][ T3670] ? generic_block_fiemap+0x60/0x60 [ 1460.868625][ T3670] ? lock_downgrade+0x6d0/0x6d0 [ 1460.873510][ T3670] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1460.879094][ T3670] ? __fget_files+0x288/0x3d0 [ 1460.883804][ T3670] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1460.890080][ T3670] ? binder_thread_write+0x2d30/0x2d30 [ 1460.895574][ T3670] __x64_sys_ioctl+0x193/0x200 [ 1460.900369][ T3670] do_syscall_64+0x2d/0x70 [ 1460.904809][ T3670] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1460.910733][ T3670] RIP: 0033:0x45e219 [ 1460.914647][ T3670] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1460.934277][ T3670] RSP: 002b:00007f4c27ef1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1460.942716][ T3670] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1460.950704][ T3670] RDX: 0000000020000340 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1460.958700][ T3670] RBP: 00007f4c27ef1ca0 R08: 0000000000000000 R09: 0000000000000000 06:44:33 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:33 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) 06:44:33 executing program 2: socket$inet_udp(0x2c, 0x3, 0x0) 06:44:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, 0x0}) [ 1460.966691][ T3670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1460.974678][ T3670] R13: 00007fffa49f90ef R14: 00007f4c27ef29c0 R15: 000000000119bf8c 06:44:33 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x7ffffffff000) 06:44:33 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:33 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, 0x0}) 06:44:33 executing program 2: socket$inet_udp(0x2, 0xa, 0x0) 06:44:34 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0xf0ffffff7f0000) 06:44:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1461.147043][ T3670] binder: 3668:3670 ioctl c0306201 20000340 returned -12 [ 1461.170900][ T3690] binder: 3688:3690 ioctl 10 20000340 returned -22 06:44:34 executing program 1 (fault-call:1 fault-nth:3): r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4c01, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:34 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) 06:44:34 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x391800) read$FUSE(r0, 0x0, 0x0) 06:44:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) [ 1461.324921][ T3701] FAULT_INJECTION: forcing a failure. [ 1461.324921][ T3701] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1461.343178][ T3704] binder: 3703:3704 ioctl 4c01 20000340 returned -22 06:44:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1461.409184][ T3701] CPU: 1 PID: 3701 Comm: syz-executor.1 Not tainted 5.11.0-rc2-syzkaller #0 [ 1461.417924][ T3701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1461.428000][ T3701] Call Trace: [ 1461.431645][ T3701] dump_stack+0x107/0x163 [ 1461.436009][ T3701] should_fail.cold+0x5/0xa [ 1461.440551][ T3701] _copy_from_user+0x2c/0x180 [ 1461.445262][ T3701] binder_ioctl+0x497/0x5ed0 [ 1461.449886][ T3701] ? tomoyo_path_number_perm+0x24e/0x590 [ 1461.455560][ T3701] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1461.461411][ T3701] ? binder_thread_write+0x2d30/0x2d30 [ 1461.466908][ T3701] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1461.472929][ T3701] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1461.479212][ T3701] ? do_vfs_ioctl+0x27d/0x1090 [ 1461.484273][ T3701] ? generic_block_fiemap+0x60/0x60 [ 1461.489497][ T3701] ? lock_downgrade+0x6d0/0x6d0 [ 1461.494386][ T3701] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1461.499971][ T3701] ? __fget_files+0x288/0x3d0 [ 1461.504678][ T3701] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1461.511122][ T3701] ? binder_thread_write+0x2d30/0x2d30 [ 1461.516611][ T3701] __x64_sys_ioctl+0x193/0x200 [ 1461.521405][ T3701] do_syscall_64+0x2d/0x70 [ 1461.525841][ T3701] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1461.531761][ T3701] RIP: 0033:0x45e219 [ 1461.535677][ T3701] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 06:44:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:34 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x30b803) read$FUSE(r0, 0x0, 0x0) [ 1461.555310][ T3701] RSP: 002b:00007f4c27ef1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1461.563832][ T3701] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1461.571916][ T3701] RDX: 0000000020000340 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1461.580083][ T3701] RBP: 00007f4c27ef1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1461.588080][ T3701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1461.596332][ T3701] R13: 00007fffa49f90ef R14: 00007f4c27ef29c0 R15: 000000000119bf8c [ 1461.664613][ T3717] binder: 3713:3717 ioctl 10 20000340 returned -22 [ 1461.703189][ T3723] binder: 3720:3723 ioctl 541b 20000340 returned -22 06:44:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4c01, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:34 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x400) read$FUSE(r0, 0x0, 0x0) 06:44:34 executing program 2: socket$inet_udp(0x2, 0x3, 0x2) [ 1461.852835][ T3732] binder: 3728:3732 ioctl 4c01 20000340 returned -22 [ 1461.875797][ T3701] binder: 3699:3701 ioctl c0306201 20000340 returned -14 06:44:34 executing program 1 (fault-call:1 fault-nth:4): r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:34 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:34 executing program 2: socket$inet_udp(0x2, 0x3, 0x3) 06:44:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1461.991831][ T3741] binder: 3736:3741 ioctl 541b 20000340 returned -22 06:44:34 executing program 2: socket$inet_udp(0x2, 0x3, 0x4) 06:44:34 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:34 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1462.034535][ T3743] FAULT_INJECTION: forcing a failure. [ 1462.034535][ T3743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1462.075017][ T3743] CPU: 0 PID: 3743 Comm: syz-executor.1 Not tainted 5.11.0-rc2-syzkaller #0 [ 1462.084024][ T3743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1462.094280][ T3743] Call Trace: [ 1462.097571][ T3743] dump_stack+0x107/0x163 [ 1462.101919][ T3743] should_fail.cold+0x5/0xa [ 1462.106446][ T3743] _copy_to_user+0x2c/0x150 [ 1462.110967][ T3743] binder_ioctl+0x54f/0x5ed0 [ 1462.115594][ T3743] ? binder_thread_write+0x2d30/0x2d30 [ 1462.121079][ T3743] ? __sanitizer_cov_trace_switch+0x63/0xf0 [ 1462.126994][ T3743] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1462.133262][ T3743] ? do_vfs_ioctl+0x27d/0x1090 [ 1462.138051][ T3743] ? finish_wait+0x260/0x260 [ 1462.142664][ T3743] ? lock_downgrade+0x6d0/0x6d0 [ 1462.147541][ T3743] ? __mutex_unlock_slowpath+0xe2/0x610 [ 1462.153123][ T3743] ? __fget_files+0x288/0x3d0 [ 1462.157827][ T3743] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 1462.164099][ T3743] ? binder_thread_write+0x2d30/0x2d30 [ 1462.169581][ T3743] __x64_sys_ioctl+0x193/0x200 [ 1462.174546][ T3743] do_syscall_64+0x2d/0x70 [ 1462.179073][ T3743] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1462.184999][ T3743] RIP: 0033:0x45e219 [ 1462.188918][ T3743] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1462.208548][ T3743] RSP: 002b:00007f4c27ef1c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1462.217073][ T3743] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 000000000045e219 [ 1462.225072][ T3743] RDX: 0000000020000340 RSI: 00000000c0306201 RDI: 0000000000000003 [ 1462.233070][ T3743] RBP: 00007f4c27ef1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1462.241149][ T3743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 [ 1462.249320][ T3743] R13: 00007fffa49f90ef R14: 00007f4c27ef29c0 R15: 000000000119bf8c [ 1462.261386][ T3743] binder: 3742:3743 ioctl c0306201 20000340 returned -14 06:44:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x3e, 0x0, &(0x7f00000002c0)="f5205c863e0312488ecddfe71de982db7b4bc5e2120b6884e456f1c0fe73c02cef66aaa3cf75ee9dbf4f380ab141fdbdfd0e875b7fb0b6cc5d5056bdd3d9"}) 06:44:35 executing program 1 (fault-call:1 fault-nth:5): r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1462.445926][ T3761] FAULT_INJECTION: forcing a failure. [ 1462.445926][ T3761] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1462.487371][ T3761] CPU: 1 PID: 3761 Comm: syz-executor.1 Not tainted 5.11.0-rc2-syzkaller #0 [ 1462.496276][ T3761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1462.506443][ T3761] Call Trace: [ 1462.509722][ T3761] dump_stack+0x107/0x163 [ 1462.514067][ T3761] should_fail.cold+0x5/0xa [ 1462.518579][ T3761] _copy_to_user+0x2c/0x150 [ 1462.523100][ T3761] simple_read_from_buffer+0xcc/0x160 [ 1462.528482][ T3761] proc_fail_nth_read+0x187/0x220 [ 1462.533543][ T3761] ? proc_exe_link+0x1d0/0x1d0 [ 1462.538312][ T3761] ? security_file_permission+0x248/0x560 [ 1462.544052][ T3761] ? proc_exe_link+0x1d0/0x1d0 [ 1462.548817][ T3761] vfs_read+0x1b5/0x570 [ 1462.552985][ T3761] ksys_read+0x12d/0x250 [ 1462.557235][ T3761] ? vfs_write+0xa30/0xa30 [ 1462.561660][ T3761] ? syscall_enter_from_user_mode+0x1d/0x50 [ 1462.567677][ T3761] do_syscall_64+0x2d/0x70 [ 1462.572183][ T3761] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1462.578086][ T3761] RIP: 0033:0x417b11 [ 1462.582070][ T3761] Code: 75 14 b8 00 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 1b 00 00 c3 48 83 ec 08 e8 6a fc ff ff 48 89 04 24 b8 00 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 b3 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 1462.601685][ T3761] RSP: 002b:00007f4c27ef1c70 EFLAGS: 00000293 ORIG_RAX: 0000000000000000 [ 1462.610105][ T3761] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000417b11 [ 1462.618076][ T3761] RDX: 000000000000000f RSI: 00007f4c27ef1cb0 RDI: 0000000000000004 [ 1462.626074][ T3761] RBP: 00007f4c27ef1ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1462.634046][ T3761] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 1462.642018][ T3761] R13: 00007fffa49f90ef R14: 00007f4c27ef29c0 R15: 000000000119bf8c 06:44:35 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) r1 = pidfd_getfd(r0, r0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x400, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001940)={'gre0\x00', &(0x7f0000001840)={'syztnl2\x00', 0x0, 0x20, 0x8000, 0x7f, 0x200, {{0x34, 0x4, 0x2, 0x2e, 0xd0, 0x68, 0x0, 0x1, 0x29, 0x0, @broadcast, @private=0xa010101, {[@ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x27, 0x38, [@rand_addr=0x64010100, @multicast1, @private=0xa010102, @multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x40}, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @ssrr={0x89, 0x7, 0x94, [@remote]}, @timestamp_addr={0x44, 0x14, 0x5a, 0x1, 0x9, [{@multicast2, 0x9}, {@loopback, 0xffffffe1}]}, @cipso={0x86, 0x3b, 0xffffffffffffffff, [{0x6, 0xb, "ae518bf3744a34323c"}, {0x6, 0x8, "402811bacf67"}, {0x0, 0xd, "8c6b495bba29d451582924"}, {0x0, 0x4, "e2c0"}, {0x7, 0x6, "9efb991a"}, {0x6, 0x2}, {0x6, 0x9, "db04e6b300bcd5"}]}, @timestamp_addr={0x44, 0x24, 0x39, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x17}, 0x4}, {@broadcast, 0x2}, {@loopback, 0x2}, {@remote}]}, @lsrr={0x83, 0x7, 0x88, [@loopback]}, @timestamp_prespec={0x44, 0x4, 0x8f, 0x3, 0xe}, @generic={0x88, 0xc, "7ba3f6392bc1448c1958"}]}}}}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000001a00)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x36ab250efa88c275}, 0xc, &(0x7f00000019c0)={&(0x7f0000001980)={0x14, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40984}, 0x4004000) 06:44:35 executing program 2: socket$inet_udp(0x2, 0x3, 0x5) 06:44:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:35 executing program 2: socket$inet_udp(0x2, 0x3, 0x6) 06:44:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:35 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x0) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) read$FUSE(r0, 0x0, 0x0) 06:44:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x2, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:35 executing program 2: socket$inet_udp(0x2, 0x3, 0x7) 06:44:35 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040001) 06:44:35 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:35 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:35 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x10, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:35 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:35 executing program 2: socket$inet_udp(0x2, 0x3, 0x8) 06:44:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1463.188946][ T3811] binder: 3806:3811 ioctl 10 20000340 returned -22 06:44:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, &(0x7f00000002c0)}) 06:44:36 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) getsockname(r0, &(0x7f00000000c0)=@tipc, &(0x7f0000000140)=0x80) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x521002) r2 = syz_io_uring_setup(0x63f7, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) syz_io_uring_setup(0x55f2, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r2}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) bpf$OBJ_GET_PROG(0x7, &(0x7f00000002c0)={&(0x7f0000000280)='./file0\x00', 0x0, 0x8}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3, 0x100010, r2, 0x10000000) write$FUSE_ATTR(r1, &(0x7f0000000040)={0x78, 0xffffffffffffffda, 0x0, {0x1, 0x10000, 0x0, {0x3, 0x0, 0xffffffffe9015674, 0xff, 0x6, 0x7, 0x9, 0x0, 0x7, 0x8000, 0x7, 0xee01, 0xffffffffffffffff, 0x2, 0x1}}}, 0x78) 06:44:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4c01, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x6364, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:36 executing program 2: socket$inet_udp(0x2, 0x3, 0xa) 06:44:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x6364, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1463.371795][ T3826] binder: 3819:3826 ioctl 4c01 20000340 returned -22 [ 1463.392569][ T3827] binder: 3820:3827 ioctl 6364 20000340 returned -22 06:44:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x541b, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:36 executing program 2: socket$inet_udp(0x2, 0x3, 0x48) 06:44:36 executing program 4: read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, 0x0, 0x120, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x400}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8222}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x80000001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000080}, 0x40800) 06:44:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8913, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1463.514244][ T3837] binder: 3834:3837 ioctl 6364 20000340 returned -22 06:44:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8913, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1463.562344][ T3840] binder: 3838:3840 ioctl 541b 20000340 returned -22 06:44:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:36 executing program 2: socket$inet_udp(0x2, 0x3, 0x4c) 06:44:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5421, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:36 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$TIOCL_PASTESEL(r0, 0x541c, &(0x7f0000000000)) openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) [ 1463.648819][ T3847] binder: 3845:3847 ioctl 8913 20000340 returned -22 06:44:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8914, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1463.716732][ T3850] binder: 3848:3850 ioctl 8913 20000340 returned -22 06:44:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8914, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:36 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:36 executing program 2: socket$inet_udp(0x2, 0x3, 0x68) 06:44:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5450, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:36 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x208a00) read$FUSE(r0, 0x0, 0x0) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f0000000040)) socket(0x2b, 0x1, 0x8) bind$phonet(r0, &(0x7f0000000000)={0x23, 0x2, 0x0, 0x9}, 0x10) [ 1463.846675][ T3861] binder: 3859:3861 ioctl 8914 20000340 returned -22 06:44:36 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8933, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:36 executing program 2: socket$inet_udp(0x2, 0x3, 0x6c) 06:44:36 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5460, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1463.933555][ T3869] binder: 3864:3869 ioctl 8914 20000340 returned -22 06:44:36 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5451, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:36 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8933, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1464.054734][ T3879] binder: 3873:3879 ioctl 8933 20000340 returned -22 06:44:36 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5460, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:37 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x40100) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) read$FUSE(r0, 0x0, 0x0) 06:44:37 executing program 2: socket$inet_udp(0x2, 0x3, 0x74) 06:44:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5452, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1464.150467][ T3886] binder: 3885:3886 ioctl 8933 20000340 returned -22 06:44:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400448c9, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400448c9, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:37 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5460, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:37 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:37 executing program 2: socket$inet_udp(0x2, 0x3, 0x7a) [ 1464.294852][ T3898] binder: 3894:3898 ioctl 400448c9 20000340 returned -22 [ 1464.327076][ T3899] binder: 3895:3899 ioctl 400448c9 20000340 returned -22 06:44:37 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:37 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400448dd, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:37 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400448dd, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:37 executing program 2: socket$inet_udp(0x2, 0x3, 0x106) [ 1464.497711][ T3908] binder: 3905:3908 ioctl 400448dd 20000340 returned -22 [ 1464.543759][ T3912] binder: 3909:3912 ioctl 400448dd 20000340 returned -22 06:44:38 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8202) read$FUSE(r0, 0x0, 0x0) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) 06:44:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x6364, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400454ca, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:38 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400454ca, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:38 executing program 2: socket$inet_udp(0x2, 0x3, 0x300) 06:44:38 executing program 2: socket$inet_udp(0x2, 0x3, 0x500) [ 1465.205828][ T3935] binder: 3932:3935 ioctl 6364 20000340 returned -22 [ 1465.221284][ T3937] binder: 3933:3937 ioctl 400454ca 20000340 returned -22 [ 1465.232945][ T3940] binder: 3931:3940 ioctl 400454ca 20000340 returned -22 06:44:38 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:38 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8913, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:38 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:38 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:38 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5460, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1465.420069][ T3951] binder: 3948:3951 ioctl 8913 20000340 returned -22 06:44:39 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) write$P9_RWSTAT(r0, &(0x7f0000000080)={0x7, 0x7f, 0x2}, 0x7) read$FUSE(r0, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x100000001, 0x8) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r2, 0x541b, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r2, 0x541c, &(0x7f0000000040)={0xd, 0x81}) 06:44:39 executing program 2: socket$inet_udp(0x2, 0x3, 0x600) 06:44:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8914, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:39 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5460, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1466.238575][ T4014] binder: 4007:4014 ioctl 8914 20000340 returned -22 06:44:39 executing program 2: socket$inet_udp(0x2, 0x3, 0x601) 06:44:39 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x5460, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x8933, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:39 executing program 2: socket$inet_udp(0x2, 0x3, 0x700) 06:44:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x5460, 0x0) 06:44:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1466.638719][ T4038] binder: 4034:4038 ioctl 8933 20000340 returned -22 06:44:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400448c9, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:39 executing program 2: socket$inet_udp(0x2, 0x3, 0xa00) 06:44:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:39 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x40a082) read$FUSE(r0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) io_uring_setup(0x800cca, &(0x7f0000000040)={0x0, 0xfa1b, 0x2, 0x400005, 0x3d1, 0x0, r0}) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x2b8f43) ioctl$FIONREAD(r2, 0x541b, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r2, 0x28, &(0x7f00000000c0)}, 0x10) r3 = geteuid() read$FUSE(r2, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000140)={0x90, 0x0, 0x0, {0x2, 0x1, 0x6, 0x5, 0x3, 0x3, {0x0, 0x9, 0x20, 0x5, 0x8, 0x7, 0x7fff, 0x8, 0xff, 0x2000, 0x20, r3, r5, 0x0, 0x9}}}, 0x90) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) pipe2$9p(&(0x7f0000000200), 0x84000) read$FUSE(r0, &(0x7f0000003940)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000005980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000280)={0x320, 0x0, r6, [{{0x2, 0x3, 0x9, 0x100000000, 0x7fffffff, 0x1, {0x0, 0x8, 0x101, 0x3ff, 0x2, 0xfffffffffffffffe, 0x10ec, 0x1, 0x80000001, 0x8000, 0x1, r3, r7, 0x7fffffff, 0xfffffffe}}, {0x5, 0x1, 0x2, 0x7fffffff, '&]'}}, {{0x4, 0x2, 0x3, 0x4, 0x5, 0x4, {0x4, 0x5, 0x1f, 0x6, 0x1ff, 0x0, 0x7, 0x7, 0x7, 0xa000, 0x7, r4, r5, 0x1, 0x6}}, {0x3, 0x4, 0x4, 0x6, '^*$+'}}, {{0x6, 0x3, 0x8, 0x7fff, 0xed, 0x0, {0x4, 0x4ed, 0x6, 0x1, 0xfffffffffffffff7, 0x85c, 0x8, 0x5, 0x0, 0x6000, 0x0, r4, r5, 0x8, 0x72}}, {0x5, 0x2a5, 0x0, 0x6}}, {{0x0, 0x1, 0x4cc, 0x9, 0x200, 0x85, {0x5, 0x9, 0x94, 0x9, 0x5, 0x1, 0x7, 0xf6, 0x74, 0xc000, 0x1, r3, 0xee00, 0x0, 0x1}}, {0x6, 0x7, 0x0, 0x2}}, {{0x3, 0x1, 0x8001, 0x5, 0x20, 0x0, {0x6, 0x3, 0x9, 0xffffffffffffd8fd, 0xa7c1, 0x8554, 0x101, 0x75, 0x7fffffff, 0xa000, 0xfffffffc, r4, r5, 0x205, 0x6}}, {0x6, 0x820, 0x5, 0x28, '\'{#}]'}}]}, 0x320) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) [ 1466.823738][ T4051] binder: 4048:4051 ioctl 400448c9 20000340 returned -22 06:44:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40186366, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400448dd, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:39 executing program 2: socket$inet_udp(0x2, 0x3, 0x4800) 06:44:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:39 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x0) sendmsg$AUDIT_TTY_SET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x18, 0x3f9, 0x100, 0x70bd2a, 0x25dfdbfd, {0x0, 0x1}, ["", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x8810}, 0x24000040) read$FUSE(r0, 0x0, 0x0) 06:44:39 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40186366, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1466.985293][ T4065] binder: 4059:4065 ioctl 400448dd 20000340 returned -22 [ 1466.992114][ T4067] binder: 4064:4067 ioctl 40186366 20000340 returned -22 06:44:39 executing program 2: socket$inet_udp(0x2, 0x3, 0x4c00) 06:44:39 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x400454ca, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:39 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:39 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:40 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) r1 = socket(0x12, 0x6, 0x7fff) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100)='batadv\x00') sendmsg$BATADV_CMD_GET_VLAN(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x1000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) read$FUSE(r0, 0x0, 0x0) [ 1467.121467][ T4075] binder: 4072:4075 ioctl 40186366 20000340 returned -22 06:44:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x80086301, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:40 executing program 2: socket$inet_udp(0x2, 0x3, 0x6800) [ 1467.200985][ T4084] binder: 4080:4084 ioctl 400454ca 20000340 returned -22 06:44:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:40 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40049409, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1467.350089][ T4101] binder: 4091:4101 ioctl 80086301 20000340 returned -22 06:44:40 executing program 2: socket$inet_udp(0x2, 0x3, 0x6c00) 06:44:40 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="b0000000f5ffffff", @ANYRES64=0x0, @ANYBLOB="050000000000000000000000000000000400000000000000030000000000000009000000080000000100000000000000020000000000000008000000000000000500000000000000008000000000000000000000000000000800000000000400050000000020000008000000", @ANYRES32=0xee01, @ANYRES32=0xee01, @ANYBLOB="01800000ff7f0000000000000100000000000000018000000000000005000000000000002e283a292f000040"], 0xb0) 06:44:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x80086301, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:40 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40049409, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046207, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:40 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) sendto$phonet(0xffffffffffffffff, &(0x7f0000000040)="6cfe859692c0fb8f80613cd9c4ba243391a55ec2fb126d3d6f40821b9d9e94512594d9328d3339a425c585d9b403d32630c17f6d4e8379150ba848ff08e7837d5c462e3a2e62e7d4dd07c97ad5115bc92e59e3ea18f139368c235778e11523e4ddd7e5d67cdff53090be98f67bdacc07055d6aa411c6d492f313face5b0215e2b29cf253752c010554ff842d7a9fa0fe83ee891e6d429ef66f0f0804979dfba4ab408f7a2761b21963d7894cdfe17b44c0f939d5ab8a4820d40f59a8406384171bf855b3d6bd45c940c2fd0c979b98ad8f79a2d83542448f27f9b6c9d04d2bfd91d95bf3", 0xe4, 0x24000080, &(0x7f0000000140)={0x23, 0x9, 0xf8, 0xb2}, 0x10) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000001, 0x10010, r0, 0x8000000) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000180)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004, @fd=r2, 0x2, 0x1, 0x5, 0x7, 0x1, {0x1}}, 0x8) write$P9_RSETATTR(r0, &(0x7f0000000000)={0x7, 0x1b, 0x1}, 0x7) read$FUSE(r0, 0x0, 0x0) [ 1467.540547][ T4120] binder: 4114:4120 ioctl 80086301 20000340 returned -22 06:44:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:40 executing program 2: socket$inet_udp(0x2, 0x3, 0x7400) 06:44:40 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40049409, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40046208, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:40 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:40 executing program 2: socket$inet_udp(0x2, 0x3, 0x7a00) 06:44:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:40 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x800) 06:44:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:40 executing program 2: socket$inet_udp(0x2, 0x3, 0x20000) 06:44:40 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:40 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:40 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r2, 0x541b, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x9) write$9p(r1, &(0x7f0000000000)="b25809a403e1258326f6189a2ca1cb57ceb3634791980c95d4c6fd509cbe20141e3b9d5ccd26cc164a0ee8529053ca31e7dcd218c61828e757edec5d88359b135f33e23ec41e35d16a81cc5ca0a24d998686886b8b162e286f02ed7335c7fce60d67f72bbc83a77dcee73c45f0484849906bfd3646c1577dad978894c813de50c6e22fc7b335252645aefa8697107685d222cb3691266a50920da2318ddee51d9215b1166b599a1a9ea056dedf4fda08c70fe52cf285e55777609501487c72c67781fc5631cb1c4c4a19e22fd51f48dae29077ce8b768debe4a9a0", 0xdb) 06:44:40 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4018620d, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:40 executing program 2: socket$inet_udp(0x2, 0x3, 0x1000000) 06:44:40 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:40 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:41 executing program 2: socket$inet_udp(0x2, 0x3, 0x2000000) 06:44:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40186366, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:41 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40049409, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:41 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) sendmsg$AUDIT_USER_TTY(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x64, 0x464, 0x400, 0x70bd2b, 0x25dfdbfe, "8d28c0b8f7212b973c80b75e466aed270a7073bd7ad60d54fd7fda7bea01adea371e43644f0309696c63df8a74217d1ff0027f335e511fddc76f2e0ecc3433fccf7d4bbb8eabd824a4354b997b4241c305", ["", "", "", "", ""]}, 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x24000884) read$FUSE(r0, 0x0, 0x0) pipe(&(0x7f0000000000)) waitid$P_PIDFD(0x3, r0, &(0x7f0000000040), 0x2, &(0x7f0000000140)) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) r2 = geteuid() r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r3, 0x541b, 0x0) write$FUSE_ATTR(r3, &(0x7f00000000c0)={0x78, 0x0, r1, {0x7f, 0xfffffffe, 0x0, {0x2, 0x4, 0x7f, 0x2, 0x8a0, 0x6, 0x6, 0x5, 0x8, 0x4000, 0x8d, r2, 0xee01, 0x8001, 0x650}}}, 0x78) [ 1468.280522][ T4186] binder: 4183:4186 ioctl c018620c 20000340 returned -22 [ 1468.320242][ T4195] binder: 4187:4195 ioctl 40186366 20000340 returned -22 06:44:41 executing program 2: socket$inet_udp(0x2, 0x3, 0x3000000) 06:44:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r1, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x24040440) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r2, 0x0, 0x0) 06:44:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1468.358890][ T4196] binder: 4193:4196 ioctl c018620c 20000340 returned -22 06:44:41 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40049409, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x80086301, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:41 executing program 2: socket$inet_udp(0x2, 0x3, 0x4000000) 06:44:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:41 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000040)=[@increfs_done={0x40106308, 0x3}], 0xc3, 0x0, &(0x7f0000000080)="86de31543cffa894040adbcd87f165fb14ffb3799126cf52d0baa121a54cf8133b7e656f941dbdb3aa2c2ada8f7ce86e36aa0719c53265d0637e63f24ea49d022a7da59ce4a823b8d4f6dcbeea8d5dff2ac189a671069087d062969e55f03e9af2f3ca0d4616159b162df7633a3266926935f9b525fff752cfe1b5a4a8452ea066f238ea53d1d157d3f9064a8d9d198063562b97bb2be6edb3ecf236e660b86d71b3db1899c5f8011388b5d26261affa990851d3712c6d818a7108dae4bd4218f14957"}) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000)) read$FUSE(r0, 0x0, 0x0) 06:44:41 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40049409, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1468.623867][ T4219] binder: 4217:4219 ioctl 80086301 20000340 returned -22 06:44:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:41 executing program 2: socket$inet_udp(0x2, 0x3, 0x5000000) 06:44:41 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) read$FUSE(r1, 0x0, 0x0) 06:44:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:41 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, 0x0) 06:44:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:41 executing program 2: socket$inet_udp(0x2, 0x3, 0x6000000) 06:44:41 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, 0x0) [ 1468.871320][ T4246] binder: 4242:4246 ioctl c0306203 20000340 returned -22 [ 1468.906779][ T4249] binder: 4248:4249 ioctl c0306203 20000340 returned -22 06:44:41 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:41 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0046209, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:41 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:41 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, 0x0) 06:44:41 executing program 2: socket$inet_udp(0x2, 0x3, 0x6010000) [ 1469.046686][ T4262] binder: 4260:4262 ioctl c0306205 20000340 returned -22 [ 1469.097184][ T4265] binder: 4263:4265 ioctl c0306205 20000340 returned -22 06:44:42 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x21) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000000)) 06:44:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306207, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306207, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:42 executing program 2: socket$inet_udp(0x2, 0x3, 0x7000000) 06:44:42 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0x40049409, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 06:44:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1469.737465][ T4302] binder: 4299:4302 ioctl c0306207 20000340 returned -22 [ 1469.757379][ T4304] binder: 4296:4304 ioctl c0306207 20000340 returned -22 06:44:42 executing program 2: socket$inet_udp(0x2, 0x3, 0x8000000) 06:44:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc030620c, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:42 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) write$P9_RMKDIR(r0, &(0x7f0000000100)={0x14, 0x49, 0x2, {0x80, 0x0, 0x8}}, 0x14) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) getpeername(r1, &(0x7f0000000080)=@nfc, &(0x7f0000000000)=0x80) read$FUSE(r0, 0x0, 0x0) 06:44:42 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc030620c, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1469.907910][ T4318] binder: 4315:4318 ioctl c030620c 20000340 returned -22 [ 1469.910033][ T4317] binder: 4313:4317 ioctl c018620c 20000340 returned -22 06:44:42 executing program 2: socket$inet_udp(0x2, 0x3, 0xa000000) 06:44:42 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306210, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1469.966514][ T4323] binder: 4319:4323 ioctl c0306205 20000340 returned -22 [ 1469.977609][ T4324] binder: 4322:4324 ioctl c030620c 20000340 returned -22 06:44:42 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0189436, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:42 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306210, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:42 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:42 executing program 2: socket$inet_udp(0x2, 0x3, 0x48000000) 06:44:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc020660b, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1470.125396][ T4332] binder: 4329:4332 ioctl c0306210 20000340 returned -22 [ 1470.152799][ T4334] binder: 4331:4334 ioctl c0306210 20000340 returned -22 [ 1470.171964][ T4336] binder: 4333:4336 ioctl c0306205 20000340 returned -22 06:44:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x25, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x2, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:43 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x3f5, 0x20, 0x70bd2c, 0x25dfdc03, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4}, 0x15) sendmsg$AUDIT_ADD_RULE(r0, &(0x7f00000005c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x434, 0x3f3, 0x1, 0x70bd2d, 0x25dfdbfb, {0x4, 0x0, 0x10, [0x9, 0x100, 0x0, 0x200, 0x1, 0x8, 0x6, 0x6, 0x8000, 0x3, 0x1, 0x81, 0xfffffff7, 0x101, 0x4, 0xffff4fdd, 0x2, 0x3f, 0x9, 0x1, 0x8, 0x9, 0x6, 0x8, 0x3, 0x1ff, 0x0, 0x0, 0x6, 0x1ff, 0xf6, 0x5, 0x4, 0x200, 0x5, 0x800, 0xffff, 0xffffffe0, 0x7, 0x5, 0x4, 0x0, 0x996, 0x81, 0x2, 0xee, 0x4cd, 0x89, 0x7, 0x80000001, 0x8, 0x9, 0xffff, 0xfffffffe, 0x1000, 0x0, 0xb17, 0x7ff, 0x20, 0x101, 0x0, 0x4, 0x8, 0x8], [0x6, 0x3, 0x7fffffff, 0x1f, 0x7, 0xff, 0xd4eb, 0x0, 0x7, 0xc7d, 0xfffffffa, 0x8000, 0xffffffe5, 0x9, 0xcb5, 0x8, 0x6, 0x2, 0x100, 0x1, 0x6c, 0x8, 0x5f9bd695, 0x1, 0x9, 0x1, 0x6193fb39, 0x5, 0x3f, 0x2f, 0x5, 0xff, 0x9, 0x9, 0xb36, 0x401, 0x6b735013, 0x3ff, 0x2, 0x5, 0x3, 0xf36, 0x5, 0x751, 0x40, 0x7fff, 0x3, 0x81, 0x2a, 0x28, 0x2, 0x80000001, 0xf45, 0xaca2, 0x800, 0x4, 0x8, 0x14, 0x20, 0x0, 0x2, 0x10000, 0x20, 0x1], [0x1, 0x4, 0x3, 0x2, 0xffffa525, 0x401, 0x1cb, 0x5, 0x7, 0x9, 0x10001, 0x1, 0x3, 0x10001, 0x7fffffff, 0x7, 0x0, 0x0, 0x0, 0x6, 0x4, 0x0, 0xa6, 0x3, 0x2, 0x200, 0xfff, 0x9157, 0xca, 0x8, 0x5, 0x0, 0x0, 0x7, 0x8, 0x80000001, 0x10, 0x1, 0x8000, 0x4000, 0xfffffff7, 0xbdfe, 0x400040, 0x7, 0x8, 0x6, 0x1, 0xffff0000, 0xfff, 0x8, 0x81, 0x9, 0x81, 0x5, 0x2, 0x1, 0x5, 0x7fff, 0x17c00, 0x100, 0xff, 0x8000000, 0x6f, 0x2], [0x4, 0xe2ab, 0x8000, 0x6, 0x8, 0x10000, 0x8, 0x7, 0x20, 0xffffffff, 0x10001, 0x8, 0x57a, 0x5, 0x4, 0x43b8fc3d, 0xc40, 0xfffffc86, 0xfffffb7c, 0x20, 0xba0, 0x8, 0x1ff, 0x1, 0x6, 0x1, 0x5, 0x101, 0x7, 0xba, 0x2, 0x6, 0xe3, 0x66, 0x6, 0x40, 0x5, 0x4, 0x1, 0x9, 0x3, 0x3f6, 0x8, 0x3, 0x80000001, 0x8000, 0xfffffffd, 0x1, 0x80, 0x9, 0xffffffff, 0x800, 0x9, 0x0, 0x1, 0xffff, 0x7, 0x9, 0x40, 0x3ff, 0x400000, 0x3, 0x100, 0x2], 0x11, ['/dev/input/mice\x00', '\x00']}, ["", "", "", ""]}, 0x434}, 0x1, 0x0, 0x0, 0x44004}, 0x804) read$FUSE(r0, 0x0, 0x0) 06:44:43 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:43 executing program 2: socket$inet_udp(0x2, 0x3, 0x4c000000) 06:44:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306203, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x63, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x3, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x64, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1470.867371][ T4370] binder: 4366:4370 ioctl c0306203 20000340 returned -22 [ 1470.877116][ T4377] binder: 4364:4377 ioctl c0306205 20000340 returned -22 06:44:43 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x5, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:43 executing program 2: socket$inet_udp(0x2, 0x3, 0x68000000) 06:44:43 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0xaa02) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) 06:44:43 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306205, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:43 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:43 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x69, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1471.044897][ T4392] binder: 4386:4392 unknown command 0 [ 1471.067450][ T4392] binder: 4386:4392 ioctl c0306201 20000340 returned -22 06:44:43 executing program 2: socket$inet_udp(0x2, 0x3, 0x6c000000) 06:44:44 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306205, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1471.107300][ T4404] binder: 4396:4404 ioctl c0306205 20000340 returned -22 06:44:44 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x2ec600) read$FUSE(r0, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x50}}, 0x40) r2 = syz_genetlink_get_family_id$wireguard(0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000e80)={&(0x7f0000000340), 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x44c, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x40c, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0}, 0x2020) write$FUSE_ATTR(r1, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x8, 0x1f, 0x0, {0x0, 0x4e3, 0x7, 0xfff, 0x6, 0x7, 0xfa, 0x401, 0x2, 0x1000, 0x7, r2, r3, 0x146, 0x1f}}}, 0x78) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000100)) write$FUSE_ATTR(r0, &(0x7f0000000000)={0x78, 0x0, 0x0, {0x1, 0x8, 0x0, {0x5, 0x7, 0x8001, 0xd84, 0x4, 0x80000000, 0x3, 0x1, 0x6, 0x2000, 0xfffffff8, 0x0, 0xee00, 0x7, 0x6}}}, 0x78) 06:44:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc030620c, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1471.331400][ T4415] binder: 4409:4415 ioctl c0306201 20000340 returned -22 06:44:44 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6f, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:44 executing program 2: socket$inet_udp(0x2, 0x3, 0x7a000000) 06:44:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:44 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:44 executing program 4: socketpair(0x15, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r3, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r6 = accept4(r5, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r2, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) r7 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x50}}, 0x40) r8 = syz_genetlink_get_family_id$wireguard(0x0) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000e80)={&(0x7f0000000340), 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x458, r8, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_PEERS={0x418, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000000600)={r2, 0xf5, 0x3a0}) syz_genetlink_get_family_id$gtp(&(0x7f0000000500)='gtp\x00') getpeername(r1, &(0x7f00000001c0)=@x25={0x9, @remote}, &(0x7f0000000240)=0x80) r3 = accept(r1, &(0x7f0000000000)=@pptp={0x18, 0x2, {0x0, @initdev}}, &(0x7f0000000080)=0x80) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) accept(r4, &(0x7f0000000400)=@ipx, &(0x7f0000000480)=0x80) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x300, 0x70bd2b, 0x25dfdbfc, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x44}, 0x800) r5 = accept(r1, 0x0, &(0x7f0000000280)) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000540)=0x2, 0x4) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r5, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000680)={0x60, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ISOLATION_MASK={0x0, 0x2c, 0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x3, 0x2b, 0x2}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000040}, 0x4004004) 06:44:44 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$TIOCGPTPEER(r0, 0x5441, 0x8) 06:44:44 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x3, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1471.990510][ T4466] binder: 4464:4466 unknown command 0 [ 1472.002945][ T4466] binder: 4464:4466 ioctl c0306201 20000340 returned -22 06:44:44 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306205, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:44 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x78, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x5, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:45 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306205, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1472.226589][ T4486] binder: 4481:4486 unknown command 0 [ 1472.252895][ T4486] binder: 4481:4486 ioctl c0306201 20000340 returned -22 [ 1472.265218][ T4490] binder: 4488:4490 unknown command 0 [ 1472.273108][ T4490] binder: 4488:4490 ioctl c0306201 20000340 returned -22 06:44:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x2, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x12, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:45 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306205, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:45 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = getpid() pidfd_open(r0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000001200)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r2 = getpid() pidfd_open(r2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000005580)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) clone3(&(0x7f00000055c0)={0x0, &(0x7f00000033c0), &(0x7f0000003400), &(0x7f0000003440), {0x22}, &(0x7f0000003480)=""/12, 0xc, &(0x7f00000034c0)=""/5, &(0x7f0000005540)=[r1, r1, r1, r3, r0], 0x5, {r4}}, 0x58) clone3(&(0x7f0000003280)={0xa0812080, &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000000c0), {0x1e}, &(0x7f0000000100)=""/4096, 0x1000, &(0x7f0000001100)=""/221, &(0x7f0000003240)=[r0, r1, r2], 0x3}, 0x58) r5 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000003300)='/proc/self\x00', 0x80000, 0x0) pidfd_send_signal(r5, 0x31, &(0x7f0000003340)={0x4, 0x5, 0x7ff}, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)) [ 1472.428024][ T4497] binder: 4494:4497 unknown command 16392 [ 1472.443899][ T4501] binder: 4495:4501 unknown command 0 [ 1472.450785][ T4501] binder: 4495:4501 ioctl c0306201 20000340 returned -22 [ 1472.463267][ T4497] binder: 4494:4497 ioctl c0306201 20000340 returned -22 06:44:45 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x80) read$FUSE(r0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000040)) 06:44:45 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x6, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:45 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, 0x0) 06:44:45 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x2, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:45 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x3, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:45 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xab}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x8d0) [ 1473.165695][ T4550] binder: 4546:4550 unknown command 64 [ 1473.179710][ T4552] binder: 4544:4552 ioctl c0306205 0 returned -22 [ 1473.197477][ T4551] binder: 4542:4551 unknown command 0 [ 1473.210509][ T4554] binder: 4543:4554 unknown command 0 [ 1473.257822][ T4550] binder: 4546:4550 ioctl c0306201 20000340 returned -22 [ 1473.265937][ T4551] binder: 4542:4551 ioctl c0306201 20000340 returned -22 [ 1473.292134][ T4554] binder: 4543:4554 ioctl c0306201 20000340 returned -22 06:44:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, 0x0) 06:44:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x4, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x7, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:46 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) [ 1473.505596][ T4582] binder: 4578:4582 ioctl c0306205 0 returned -22 [ 1473.569145][ T4586] binder: 4584:4586 unknown command 0 06:44:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, 0x0) [ 1473.625774][ T4591] binder: 4588:4591 unknown command 0 [ 1473.628301][ T4586] binder: 4584:4586 ioctl c0306201 20000340 returned -22 [ 1473.660768][ T4591] binder: 4588:4591 ioctl c0306201 20000340 returned -22 [ 1473.686481][ T4594] binder: 4589:4594 unknown command 0 [ 1473.731160][ T4594] binder: 4589:4594 ioctl c0306201 20000340 returned -22 [ 1473.781603][ T4599] binder: 4598:4599 ioctl c0306205 0 returned -22 06:44:46 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, &(0x7f0000000000), &(0x7f0000000040)='syzkaller\x00', 0x8, 0xf9, &(0x7f0000000080)=""/249, 0x41100, 0x0, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xb, 0x99e, 0x1}, 0x10, 0xffffffffffffffff}, 0x78) 06:44:46 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x8, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:46 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x5, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:46 executing program 2: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3f}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x84) socket$inet_udp(0x2, 0x3, 0x0) 06:44:46 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:46 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306205, 0x0) [ 1474.104968][ T4613] binder: 4608:4613 unknown command 0 [ 1474.124991][ T4616] binder: 4611:4616 ioctl c0306205 0 returned -22 [ 1474.127225][ T4613] binder: 4608:4613 ioctl c0306201 20000340 returned -22 06:44:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1474.152028][ T4618] binder: 4607:4618 unknown command 0 06:44:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1474.180760][ T4618] binder: 4607:4618 ioctl c0306201 20000340 returned -22 06:44:47 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) recvmsg$can_raw(r0, &(0x7f00000002c0)={&(0x7f0000000180)=@pptp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)=""/103, 0x67}], 0x1}, 0x40000020) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = syz_open_dev$ptys(0xc, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000003c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x8000, 0x1, &(0x7f0000000300)="3d284c8c0f8b6e692ce2746154de76ea1dd7ded3b7e2445c9ca3e0bc321cf9779c5b8c5218617bc4f5addc30c814c7c0998fbc90179db77b9280b2433f61dc7f42e5d766e3771e53596d9af34f9545b5e5b6617e8a64035dd1f2e10ae15f2d06ed05240e40f0d43bcc0ca7a713c8b7772e96afc091a31a16b70916793d61d8c83b2a9ce365d42f7daacb6dad7f8aa2", 0x9, 0x0, 0x1, {0x3}}, 0x3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TIOCGPTPEER(r2, 0x5441, 0x4f) 06:44:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x6, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:47 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$TIOCEXCL(r0, 0x540c) socket$inet_udp(0x2, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$phonet(r1, &(0x7f0000000040)="3dc2d4e28a28e0387f3166618b40f0b06d99f435ae3864360b72e13570c7efe672b8a7abab306eee5e7ae2981feb6b581596cad035e8aa64abff4ddbbb90cc95145e2f7733a1f3cb5cabaf9be67da5c2001e977d85735c1cc40b4cf1b5cdd9ba28d9df23b680521294ea5a0f72c54da79fa7b21817cb2cf19658b742f6ece1be927bff03896c635b858350a78d795acbf5c5187dc11d3f3e7176e037900e", 0xa1, 0x0, 0x0, 0x0) [ 1474.264634][ T4628] binder: 4623:4628 unknown command 0 [ 1474.293355][ T4629] binder: 4626:4629 unknown command 0 [ 1474.305890][ T4628] binder: 4623:4628 ioctl c0306201 20000340 returned -22 06:44:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x6, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1474.349712][ T4629] binder: 4626:4629 ioctl c0306201 20000340 returned -22 06:44:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:47 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40051}, 0x4008004) [ 1474.423346][ T4638] binder: 4635:4638 unknown command 0 06:44:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x7, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1474.469551][ T4638] binder: 4635:4638 ioctl c0306201 20000340 returned -22 [ 1474.506510][ T4647] binder: 4643:4647 unknown command 0 06:44:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x7, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:47 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000000)="5b5902eddf8f6da5505b50ef1bc37e11440fe22fddb4385a60cabadabc783dc901b2fd4bfdb2111cf35b9f0e7f783fcc54a103ef464b", 0x36}, {&(0x7f0000000040)="93e5ca8c483d5b28e699d34d8e9c6f46c290118970a803c377469f6072cf94df5a3236b5720e5eaeec0749d49398fdf587c343b1e22a4ea61f71584f757f980ce74c572d", 0x44}, {&(0x7f00000000c0)="a5843d796e14c3df4ea5f399ad5e55bdf9035ce8b7832e20222552456684be17e49b2170837a6c65dcbf4b87105d965a3fb8b742a704a686637a96cef9e8ce668c6d72f12e81bba0f853b56a0675da2717c20cd5f4eb388bb60f6cf72ea8253bfd364ca7ef877c47f8ebbd2d5bcb7c5ba4c1662d6456adb584e4733d387719c6d589c93340b16b8bd0eda59bb34b15fc11958ab8ab160df86884265530b0b21dc6bd1db54de885d477e3cc66c894e914d26597b96ded3c2be9c2236172f880b5f01b605c47a8f4f7dbd41e4c391dbd6c8e1d8705c6f59a9c648e61f75e45366caf2789a248bfc289c3563ba30c98b687f9b2640d3187c8c229", 0xf9}, {&(0x7f00000001c0)="8ac1316666c85a034044fffa398185891a02bc012185bdbcaad5764f1f3f566132a19404f55e3a685b98b89fe7110cc5fe0e306a47538a7fea65138b504818601ddb2dcc43ea1d6242f5e06117300faa2d295f02088038cf9cdd1ca21e9d16b5899df35f9b74dfd1e041dced598fca95d00eccdcbc4f48e1924997ef0c46935cd40de49427d0b2fd861c98a4a266a306b8377ba23239e44eb79059f8052bb99a61cbc9d71a51d4fb2e8b4e9d068382579af83682c8280c738ecd794c56ef7e90c61872ba939572120f830b8d16bef7d449e084801c6255a46c1d5ce7061300fc144d5419c6900a", 0xe7}, {&(0x7f00000002c0)="9beaf8b47e7cbbdc567a7c91576656811923537e31f81b4a61b73af7fd61c043a3bc1ec9df735fc98d850769b8a14fe8a6438d1f", 0x34}, {&(0x7f0000000300)="575de4e7bb590a4b4644bc12af50e0d2daa5577c3bfd9adb2a2c98fa1948c1380d6cde574f9c5e1383630812148cc9424829d4ebb5426cd8c18dec4963883d85a322058745f9a6e360bd6b471137c314df5bec62f75c96540e61ff13acd5311a8f25b177ddbfcc5bffaf73af57cda3ba6b68244cdf135a012ca3fc1e38349cef879e0710a42a13d07231514cbb95bf103bf3e09a2726c9e7661704ad737bb1ffc03433b915d0fbfb0a147138131cda5c4274177bf9c3d768bd388f728afb2f4c63a65a0ae6969656d7a92dd5abafb4482a4a", 0xd2}], 0x6, 0x1, 0x0) io_uring_setup(0x3d3, &(0x7f0000000480)={0x0, 0x606a, 0x20, 0x0, 0x60}) [ 1474.535759][ T4649] binder: 4645:4649 unknown command 0 [ 1474.557696][ T4647] binder: 4643:4647 ioctl c0306201 20000340 returned -22 [ 1474.568476][ T4649] binder: 4645:4649 ioctl c0306201 20000340 returned -22 06:44:47 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x28000) read$FUSE(r0, 0x0, 0x0) write$P9_RSTAT(r0, &(0x7f0000000040)={0x63, 0x7d, 0x2, {0x0, 0x5c, 0x2c, 0x3, {0x80, 0x4, 0x8}, 0x10800000, 0x8, 0xac, 0x0, 0x10, '/dev/input/mice\x00', 0x9, '{()({#%@*', 0x10, '/dev/input/mice\x00'}}, 0x63) 06:44:47 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x12, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x8, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1474.657359][ T4658] binder: 4656:4658 unknown command 0 [ 1474.696966][ T4658] binder: 4656:4658 ioctl c0306201 20000340 returned -22 06:44:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x8, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x300, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1474.762432][ T4670] binder: 4666:4670 unknown command 0 [ 1474.778602][ T4670] binder: 4666:4670 ioctl c0306201 20000340 returned -22 [ 1474.791754][ T4671] binder: 4668:4671 unknown command 0 [ 1474.797181][ T4671] binder: 4668:4671 ioctl c0306201 20000340 returned -22 06:44:47 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'syztnl0\x00', r1, 0x20, 0x7, 0x5, 0x6, {{0x16, 0x4, 0x1, 0x0, 0x58, 0x68, 0x0, 0xf6, 0x2f, 0x0, @remote, @empty, {[@noop, @timestamp_addr={0x44, 0xc, 0xf7, 0x1, 0xf, [{@empty, 0x10001}]}, @cipso={0x86, 0x13, 0x2, [{0x0, 0xd, "b8eb7ee737ac0e6941554f"}]}, @timestamp_addr={0x44, 0x24, 0x9, 0x1, 0x2, [{@broadcast, 0x6bdbca3}, {@broadcast, 0x3}, {@empty, 0x81}, {@broadcast, 0xba8}]}]}}}}}) 06:44:47 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x300, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1474.850504][ T4677] binder: 4675:4677 unknown command 0 [ 1474.860397][ T4677] binder: 4675:4677 ioctl c0306201 20000340 returned -22 06:44:47 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:47 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x2, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:47 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x500, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:47 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1475.034719][ T4692] binder: 4687:4692 unknown command 0 [ 1475.062788][ T4692] binder: 4687:4692 ioctl c0306201 20000340 returned -22 06:44:48 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x488a02) read$FUSE(r0, 0x0, 0x0) 06:44:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x500, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:48 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) r2 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000080)=0x80) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) sendmsg$BATADV_CMD_GET_ORIGINATORS(r2, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r3, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x424f5d5f}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xe3a}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x7124}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x24004011) 06:44:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x600, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:48 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x700, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:48 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:48 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x10000) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x0) bind$isdn_base(r0, &(0x7f0000000000)={0x22, 0x2, 0x7, 0x8}, 0x6) [ 1475.679174][ T4731] binder: 4721:4731 unknown command 0 [ 1475.700997][ T4731] binder: 4721:4731 ioctl c0306201 20000340 returned -22 06:44:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x4, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x600, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:48 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r2, 0x541b, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r3, 0x541b, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x0) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r4, 0x541b, 0x0) ioctl$TIOCEXCL(r2, 0x540c) pipe(&(0x7f00000000c0)) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000100)='/dev/input/mice\x00', 0xa0000) read$FUSE(r5, 0x0, 0xffffffffffffffa6) write$P9_RLOCK(r0, &(0x7f0000000000)={0x8, 0x35, 0x1}, 0x8) ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000040)=0x6) 06:44:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0xff00, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x5, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:48 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:48 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x700, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:48 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x1000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:48 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x4, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40844) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000040)={'wg2\x00'}) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280)='wireguard\x00') sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, r4, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8040}, 0x85) getpeername(r1, &(0x7f0000000080)=@l2tp6, &(0x7f0000000100)=0x80) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000000), &(0x7f00000003c0)=0x4) 06:44:48 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x6, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:48 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x101000) read$FUSE(r0, 0x0, 0x0) socketpair(0x18, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="10002bbd7000fddbc1bd000000000005357c1c3bb5f20a93dae16ae09a0f982107529f475c26c19e39358598d4400406d6112c20afb4f4d31ee1d37b6522dcf40d1fd8828f641ccb2efde399d63872cd7f4c838f026ceb4d688d0bb3eb538173d878e78aa8"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x50) 06:44:48 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0xff00, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x2000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x7, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:49 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x1000000, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x3000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x8, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:49 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) eventfd2(0x1, 0x800) getsockname(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000080)=0x80) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) getsockname(r1, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000140)=0x80) eventfd(0x800) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 06:44:49 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x300, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:49 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) pipe(&(0x7f0000000000)) read$FUSE(r0, 0x0, 0x0) 06:44:49 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x2000000, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x4000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x500, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:49 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) 06:44:49 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x5000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:49 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:49 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x600, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:49 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x3000000, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:50 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000000)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) read$FUSE(r0, 0x0, 0x0) 06:44:50 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x1402, 0x4, 0x70bd26, 0x25dfdbfd}, 0x10}, 0x1, 0x0, 0x0, 0x20044014}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x8b0, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x85c, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r3, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r6 = accept4(r5, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r2, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7f}]}, 0x1c}, 0x1, 0x0, 0x0, 0xa080}, 0x10) pidfd_send_signal(0xffffffffffffffff, 0x3b, &(0x7f0000000000)={0x1e, 0x8001, 0xffffffff}, 0x0) 06:44:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x6000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x4000000, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1477.256371][ T4859] binder: 4854:4859 ioctl c0306201 0 returned -14 06:44:50 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x700, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:50 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) setns(r1, 0x10000000) 06:44:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x7000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1477.449682][ T4876] binder: 4871:4876 ioctl c0306201 0 returned -14 06:44:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x5000000, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0xff00, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:50 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:44:50 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x1, 0xc00) ioctl$FIONREAD(r0, 0x541b, 0x0) socket$inet_udp(0x2, 0x3, 0x0) 06:44:50 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) process_madvise(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="ff1041344d97593192293c171a5fe42d46086ef64b0656ba4fcdedcfdfb3e473b61834b329c240ca9baa71649bbe1bcfc0b52a9c24683d50005c475bb744f8b8cfcc8537c4117c181c6e3b82175fb75754afd79bf3ddfee35fffc3fd06a92800eace6a0956679e4133f2fa34b3ba669afa021760aa77888b9c", 0x79}, {&(0x7f0000000080)="d28db9f368560b356d88aa03ce06d2c70d3b90d495f0924847596b0f531e8b6e773631ba1e071defa0b3cbe552ef8e4c2d7ce49a8e875345607dcefc3976f4025bbe367b67a8d9d79cdd749976b4c0b00823b6a1162a30cdc28a54990ff70bcd7a9fb9745a527f5c4c132c1514dbe43c37454492b3c6e39bdaf767788aeaea6d93ac93877fbacf3529b10600078d79f2a78c95819a67135487190637f407a2c84466b38c2877bf095df531e67e366e5284961318e0358b", 0xb7}, {&(0x7f0000000140)="159e07aa3c5d87fd5a6f0edb5b2b46a08a2f33ac22d2ce1e8886f2ed2bc204180869677fa000cb7550c753aa503025f0a5ff841dd069e1eb3f7d153bd96a51bbf7c77c9659117db82b103138fbcc039060e7556a2a13340054446efa5a6ea671ab12203d2184b59c4fc2d43cad7198a8ff6269e42320189be03e3da664ae42836dd545fddd408f86475c314335261da7de3b4cc04d4638870872d102b8c62f80a8ef4dfb583f67f6ea1be67e0ba9c577918f633f8361d2736a924881284d7bbdbf2b1b7db25692e59b6733c6e0c184f80c55393f17c975b15510", 0xda}], 0x3, 0xb, 0x0) read$FUSE(r0, 0x0, 0x0) 06:44:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x8000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x6000000, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x1000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1477.664323][ T4894] binder: 4890:4894 ioctl c0306201 0 returned -14 06:44:50 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0xfdfdffff, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:50 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) 06:44:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x7000000, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:50 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x8, 0x80000, 0x35ac) getsockname(r1, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, &(0x7f0000000000)=0x80) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000002c0)=0x38) accept(r0, &(0x7f0000000300)=@nfc, &(0x7f0000000240)=0x80) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x400, 0x70bd2c, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x14}, 0x4008090) 06:44:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x2000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0xff000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:50 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:50 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x119b40) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000380)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1c020f11}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000326bd7000fcdbdf2531000000080001005100000008000300", @ANYRES32=0x0, @ANYBLOB="6e00010024000200"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) read$FUSE(r0, 0x0, 0x0) 06:44:50 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x8000000, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:50 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x3000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:50 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0xfffffdfd, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:50 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x3, 0x0, 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:51 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000340)='/dev/input/mice\x00', 0x80000) recvmsg$can_raw(r0, &(0x7f0000001940)={&(0x7f0000000380)=@ax25={{0x3, @bcast}, [@remote, @remote, @default, @bcast, @remote, @remote, @bcast]}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000400)=""/253, 0xfd}, {&(0x7f0000000500)}, {&(0x7f0000000540)=""/248, 0xf8}, {&(0x7f0000001680)=""/144, 0x90}, {&(0x7f0000001740)=""/248, 0xf8}], 0x5, &(0x7f00000018c0)=""/96, 0x60}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) read$FUSE(r1, 0x0, 0x0) 06:44:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x4000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:51 executing program 2: r0 = socket(0x2c, 0x800, 0x10001) recvmsg$can_raw(r0, &(0x7f0000002400)={&(0x7f0000001240)=@vsock, 0x80, &(0x7f0000002380)=[{&(0x7f00000012c0)=""/21, 0x15}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/128, 0x80}], 0x3, &(0x7f00000023c0)=""/2, 0x2}, 0x100) socket$inet_udp(0x2, 0x3, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r1, 0x7a9, &(0x7f0000000000)={{@local, 0x5}, 0x0, 0x4, 0x0, 0x1f, 0x7, 0x4, 0x2, 0x6}) 06:44:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0xfdfdffff, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x100000000000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000240), 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0xff000000, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:51 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x5000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:51 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x200000000000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:51 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RREADLINK(r1, &(0x7f00000000c0)={0x10, 0x17, 0x2, {0x7, './file0'}}, 0x10) write$P9_RSETATTR(r0, &(0x7f0000000040)={0x7, 0x1b, 0x4}, 0x0) 06:44:51 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000240), 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:51 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0xfffffdfd, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:52 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000200)={r0, 0xc0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, &(0x7f0000000040)={0x5, 0x1}, 0x0, 0x0, &(0x7f0000000080)={0x1, 0xc, 0x1, 0x4}, &(0x7f00000000c0)=0x10001, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=0x9}}, 0x10) 06:44:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x300000000000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x6000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:52 executing program 2: syz_open_dev$ptys(0xc, 0x3, 0x1) socket$inet_udp(0x2, 0x3, 0x0) 06:44:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x100000000000000, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x3, &(0x7f0000000240), 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x7000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x400000000000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x200000000000000, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x3, &(0x7f0000000240)=[@enter_looper], 0x0, 0x0, 0x0}) 06:44:52 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000440)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r0, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x100}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8010}, 0x4004000) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x0) sendmsg$AUDIT_USER(r1, &(0x7f0000000ac0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000a40)={0x4c, 0x3ed, 0x100, 0x70bd28, 0x25dfdbfe, "74bf1a7a7988d5c20b887444adbbd4b21c294672415918bf9917ba2fafd399696788ace7fc6eb838d5f4622a4104bff62aa687ae89f3cf6c9c98b31e", [""]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x2000004) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = socket(0x18, 0x800, 0x800) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf250f00000008003a002a0e0000080032000000000108000b00018000000500290001000000050030000000000005002a00000000000a0009c20000020000000000"], 0x50}}, 0x40) r4 = syz_genetlink_get_family_id$wireguard(0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000e80)={&(0x7f0000000340), 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x458, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0x418, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0, 0x40, 0x20, 0x0, 0x7fff, {{0x12, 0x4, 0x3, 0x1a, 0x48, 0x68, 0x0, 0xf7, 0x29, 0x0, @private=0xa010102, @multicast1, {[@noop, @timestamp={0x44, 0x10, 0x11, 0x0, 0x5, [0x401, 0x1, 0x5]}, @lsrr={0x83, 0xb, 0xe8, [@dev={0xac, 0x14, 0x14, 0x34}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x17, 0x6b, [@rand_addr=0x64010100, @broadcast, @loopback, @local, @local]}]}}}}}) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, &(0x7f0000000d80)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000d00)={0x38, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={[], 0x24}}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x46bd}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000c80)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x1c}}, 0x4000040) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'erspan0\x00', &(0x7f00000000c0)={'ip_vti0\x00', r5, 0x7800, 0x700, 0x8, 0x256a, {{0x25, 0x4, 0x1, 0x3, 0x94, 0x64, 0x0, 0x74, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x4a, 0x3, 0x2, [{@rand_addr=0x64010101, 0x7ff}]}, @timestamp_addr={0x44, 0x34, 0xe2, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@empty, 0x9}, {@rand_addr=0x64010102, 0x1}, {@remote, 0x5}, {@local, 0x45}, {@multicast1, 0x8}]}, @rr={0x7, 0x2b, 0xc3, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @local, @rand_addr=0x64010102, @empty, @loopback, @empty]}, @timestamp={0x44, 0x14, 0x5d, 0x0, 0xd, [0x800, 0x101, 0x100, 0x168e8]}]}}}}}) 06:44:52 executing program 4: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000000)={0x339c}, 0x8) openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4400) write$P9_RMKNOD(r1, &(0x7f0000000140)={0x14, 0x13, 0x2, {0x0, 0x4, 0x3}}, 0x14) read$FUSE(r0, 0x0, 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) getpeername(r2, &(0x7f0000000040), &(0x7f00000000c0)=0x80) 06:44:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x8000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1479.723691][ T5070] binder: 5063:5070 unknown command 0 06:44:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x500000000000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x300000000000000, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1479.779229][ T5070] binder: 5063:5070 ioctl c0306201 20000340 returned -22 06:44:52 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x100000000000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:52 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0xfdfdffff, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:52 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x600000000000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:52 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x400000000000000, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:52 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) socket(0x3, 0xa, 0x1f) r0 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r1 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0x1402, 0x0, 0x70bd2c, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40004}, 0x40) 06:44:53 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x119b40) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000380)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1c020f11}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000326bd7000fcdbdf2531000000080001005100000008000300", @ANYRES32=0x0, @ANYBLOB="6e00010024000200"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) read$FUSE(r0, 0x0, 0x0) 06:44:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x700000000000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0xff000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:53 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0xc481) read$FUSE(r0, 0x0, 0x0) 06:44:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x500000000000000, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:53 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x119b40) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000380)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1c020f11}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000326bd7000fcdbdf2531000000080001005100000008000300", @ANYRES32=0x0, @ANYBLOB="6e00010024000200"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) read$FUSE(r0, 0x0, 0x0) 06:44:53 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000001400)) 06:44:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0xfffffdfd, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x800000000000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:53 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0xfdfdffff00000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:53 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x100000000000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:53 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x600000000000000, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:53 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x119b40) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000380)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1c020f11}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000326bd7000fcdbdf2531000000080001005100000008000300", @ANYRES32=0x0, @ANYBLOB="6e00010024000200"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) read$FUSE(r0, 0x0, 0x0) 06:44:53 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x6168c1) read$FUSE(r0, 0x0, 0x0) 06:44:54 executing program 2: r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x20010, 0xffffffffffffffff, 0x10000000) pipe(&(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f00000013c0)) accept4(r1, 0x0, &(0x7f0000001980), 0x80000) syz_io_uring_setup(0x245f, &(0x7f0000001ac0)={0x0, 0x55c1, 0x0, 0x2, 0x223, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001b40)=0x0, &(0x7f0000001b80)) syz_io_uring_submit(r2, r0, &(0x7f0000001bc0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa}, 0xfff) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2000, @fd_index=0x5, 0x9, 0x0, 0x0, 0x8, 0x0, {0x3}}, 0x3450) socket$inet_udp(0x2, 0x3, 0x0) 06:44:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x200000000000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0xff00000000000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x700000000000000, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:54 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x40000, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) read$FUSE(r0, 0x0, 0x0) write$tun(r0, &(0x7f0000000080)={@void, @void, @eth={@empty, @multicast, @val={@void, {0x8100, 0x2, 0x0, 0x4}}, {@generic={0x3, "280fea96d3cdb20e149cc8cf25c81db30aca6e2a19348d3b4a364a22a6e479de1f58e4a0e8c69b913434e2b73dcf3f69e5472bc9637410ad5e19938da6995cea57ca3680735deb3ae672939883e7de0c83"}}}}, 0x63) sendmsg$AUDIT_USER(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xbc, 0x3ed, 0x200, 0x70bd2a, 0x25dfdbfb, "01713257d2c05dc2f63a44eb9683788affe3637f93abec43bc7a32a1d4d29c291f32e62f972bffd074347fc13579d8941aabff86dca592e5838e6bca50fa5657d358f6e8482754b8828d277c52c5708b48bef0f5b0685ffd7b356719d6071b33a1731c2e288e0bb0012040051dbbad9a0d2de86863ce474ce9cff22099e6bee98b8d9297e7582afb32c37e72a1aeaf7862c9fb91f633702ee7ad27dfb81df600a9b40928465eceb6cf", ["", "", "", "", ""]}, 0xbc}, 0x1, 0x0, 0x0, 0x200040c0}, 0xc0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0)='nl80211\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r1, 0x9b8bb35467f61b6c, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x63}, @void, @void}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x24}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x7fff, 0x4f}}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x80) 06:44:54 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x119b40) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r3 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000380)) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1c020f11}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000326bd7000fcdbdf2531000000080001005100000008000300", @ANYRES32=0x0, @ANYBLOB="6e00010024000200"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x1) 06:44:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x300000000000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6302}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x800000000000000, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:54 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x119b40) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000380)) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1c020f11}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x8010}, 0x4000) 06:44:54 executing program 4: ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000040)) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x141442) read$FUSE(r0, 0x0, 0x0) 06:44:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x400000000000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:54 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) socketpair(0x21, 0xa, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) sendto$phonet(r0, &(0x7f0000000540)="1f63c49b535fe698e553773ac64e06b221e732fc901d3b28fcc538b7e5e9bb35c0bbd6dad4dcd530f40b637258a6cd2c90609a24de27475ceb853da1614fe16d06", 0x41, 0x0, &(0x7f00000005c0)={0x23, 0x9, 0x4, 0x40}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r2, 0x541b, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r3, 0x541b, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_FLOW={0x6}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000880}, 0x85) [ 1481.500746][ T5219] binder: 5212:5219 unknown command 25346 [ 1481.522928][ T5219] binder: 5212:5219 ioctl c0306201 20000340 returned -22 06:44:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0xfdfdffff00000000, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6303}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x500000000000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:54 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x119b40) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000380)) syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') 06:44:54 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0xff00000000000000, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1481.725049][ T5238] binder: 5235:5238 unknown command 25347 [ 1481.750707][ T5238] binder: 5235:5238 ioctl c0306201 20000340 returned -22 06:44:54 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000026cc0458ef17c8822bf2c14200028bd7000ffdbdf250900020073797a3200000000e653a58115bbbb8476add3b2bf5f155a30f009e931b6ff8762c2"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x20040029) r1 = socket(0x2f, 0x800, 0x2e3) syz_io_uring_setup(0x66a6, &(0x7f0000000280)={0x0, 0xac0f, 0x0, 0x1, 0x2b7}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff7000/0x7000)=nil, &(0x7f0000000300)=0x0, &(0x7f0000000340)) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ff6000/0x2000)=nil, 0x2000, 0xa, 0x100010, 0xffffffffffffffff, 0x10000000) syz_io_uring_submit(r2, r3, &(0x7f0000000380)=@IORING_OP_FADVISE={0x18, 0x1, 0x0, @fd_index=0x9, 0x1, 0x0, 0x7ff, 0x4, 0x1}, 0x800) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xac, 0x453, 0x100, 0x70bd26, 0x25dfdbfb, "976541c0f1d142883db20fd88bdebae00f0a4e6fea95d721bebe29580c7abadeb84c7ff39706e91677a2fb987c2a8aba6e96f13f1eb4ebd8702959af6de42341747f1c44f12804a4eaeaceed7409edf43fe716ff84d53e8aa2a1a21b5c5d4b2e0639af30320004b8db2657accb287c90edfbe461ea9f691eea14423d6441c6feeaf4afa916f1dd13a8aa8108f856c611e57ba5d2b6be039141", ["", "", "", "", ""]}, 0xac}, 0x1, 0x0, 0x0, 0x40000}, 0x40) 06:44:54 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6304}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:54 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x600000000000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:54 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x119b40) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000380)) [ 1481.936230][ T5251] binder: 5249:5251 unknown command 25348 [ 1481.957339][ T5251] binder: 5249:5251 ioctl c0306201 20000340 returned -22 06:44:55 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x119b40) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000380)) 06:44:55 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer={0x630b}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x700000000000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6305}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:55 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getpeername(r0, &(0x7f0000000000)=@nfc, &(0x7f0000000080)=0x80) [ 1482.792213][ T5336] binder: 5328:5336 unknown command 0 [ 1482.800638][ T5337] binder: 5329:5337 unknown command 25349 [ 1482.869718][ T5337] binder: 5329:5337 ioctl c0306201 20000340 returned -22 [ 1482.870710][ T5336] binder: 5328:5336 ioctl c0306201 20000340 returned -22 06:44:55 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x119b40) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000380)) 06:44:55 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x800000000000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:55 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6306}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer={0x630c}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:56 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x2eabc1) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) r2 = getpid() pidfd_open(r2, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) syz_extract_tcp_res(0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000001ac0)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000002280)={'batadv0\x00'}) openat$mice(0xffffffffffffff9c, &(0x7f0000002440)='/dev/input/mice\x00', 0x14002) r4 = getpid() pidfd_open(r4, 0x0) clone3(&(0x7f0000000500)={0x1812c400, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300), {0x12}, &(0x7f0000000340)=""/214, 0xd6, &(0x7f0000000440)=""/67, &(0x7f00000004c0)=[r2, 0xffffffffffffffff, 0xffffffffffffffff, r4], 0x4, {r0}}, 0x58) ioctl$FIONREAD(r1, 0x541b, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000580)='/dev/net/tun\x00', 0x900, 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000840)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r5, 0x541b, 0x0) process_madvise(r5, &(0x7f0000000240)=[{&(0x7f0000000040)="e7e7aa8bea2c28e04fc4ed40ce826b917da02ad22eaacf0bd7271246b7052b1e7a607c80799464eccd3300877bf268b42eed39ed0219fcf8f2dc82f70681014bd2e3f8b921879fbe", 0x48}, {&(0x7f00000000c0)="2b807e8a4e17bb13f43479aabf4d18a31b280f4f205d8426e69d8e5b6e9d2647729cc3dca7a177d176a3eda97163af9dd8a3667f485fbfc217c984ebacb650be19e96650887c4de439ea225d178b86aee18f6062a9548b0345ca0b2c010dd5b3d853b44d6566d9bd", 0x68}, {&(0x7f0000000140)="41d873faf7a78a17654e883d5abfeff0f59f21cb9a59a1feaa440aedbce6af607ce9a5dde1ec59794bc0b76f48153d1cab4b16fb6b938db26576ca68dc3be4afbef213883239257b25924713190bdd10059c8a18609e274e5ab0cd7de4af7f45e0fcba359f4718feaa883c95416d9cce7a6c738c09c904c1a8d230fabdc9417d6c2a66c2fc41ac62a3045616b8a16e46017fb3ee89efc685f3af59496f1a320b82412b26252e05c04143f8fe1dd63bcde3d6576d9ccdd7b07463d1b1c6359cc5abe0049f2619f90413", 0xc9}], 0x3, 0x3, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x3f2, 0x100, 0x70bd2a, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x2000040) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) 06:44:56 executing program 2: ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000080)={r0, 0x80000001, 0x1000}) socket$inet_udp(0x2, 0x3, 0x0) 06:44:56 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x119b40) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0)='nl80211\x00') getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000380)) 06:44:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0xfdfdffff00000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1483.297997][ T5369] binder: 5368:5369 unknown command 25350 [ 1483.366597][ T5373] binder: 5370:5373 unknown command 0 [ 1483.375789][ T5369] binder: 5368:5369 ioctl c0306201 20000340 returned -22 [ 1483.420667][ T5373] binder: 5370:5373 ioctl c0306201 20000340 returned -22 06:44:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6307}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer={0x630d}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0xff00000000000000, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:56 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x119b40) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)=0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000380)) 06:44:56 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x230180) read$FUSE(r0, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) r2 = pidfd_getfd(r1, r0, 0x0) read$FUSE(r2, &(0x7f0000000680)={0x2020}, 0x2020) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, &(0x7f0000000040)) 06:44:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x4c, r1, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x1) socket$inet_udp(0x2, 0x3, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x50}}, 0x40) r3 = syz_genetlink_get_family_id$wireguard(0x0) r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r4, 0x7a9, &(0x7f0000000380)={{@any, 0x5757e1b9}, 0x800, 0x8, 0x6, 0x2, 0x2, 0x4, 0x1000, 0x3}) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000000a00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x5c, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xffff}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffff}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xffff8000}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000e80)={&(0x7f0000000340), 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x458, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PEERS={0x418, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0, 0x15}, @l2={0x1f, 0x5, @any, 0x7fff}, @ipx={0x4, 0x3ff, 0x2, "90657e52924e", 0x8}, 0x1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x1000, 0x7, 0x800}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000280)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x1f}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x1) 06:44:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6302}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1483.672455][ T5390] binder: 5386:5390 unknown command 25351 [ 1483.680877][ T5396] binder: 5391:5396 unknown command 0 [ 1483.694987][ T5396] binder: 5391:5396 ioctl c0306201 20000340 returned -22 [ 1483.709392][ T5390] binder: 5386:5390 ioctl c0306201 20000340 returned -22 06:44:56 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x119b40) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)=0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000380)) 06:44:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer={0x40046302}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:56 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) clone3(&(0x7f0000000280)={0x200000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r1, 0x0, 0x0) 06:44:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6308}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1483.831538][ T5403] binder: 5400:5403 unknown command 25346 [ 1483.850983][ T5403] binder: 5400:5403 ioctl c0306201 20000340 returned -22 06:44:56 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6303}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1483.921747][ T5410] binder: BC_ACQUIRE_RESULT not supported [ 1483.945070][ T5410] binder: 5407:5410 ioctl c0306201 20000340 returned -22 06:44:56 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x119b40) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000040)=0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000380)) [ 1483.971313][ T5415] binder: 5411:5415 unknown command 25352 [ 1484.003076][ T5415] binder: 5411:5415 ioctl c0306201 20000340 returned -22 06:44:56 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) r1 = accept4(r0, &(0x7f0000000000)=@sco={0x1f, @none}, &(0x7f0000000080)=0x80, 0x800) sendmsg$AUDIT_TRIM(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3f6, 0x400, 0x70bd29, 0x25dfdbfd, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2004c005}, 0x40000) 06:44:56 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer={0x40046304}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1484.030373][ T5420] binder: 5417:5420 unknown command 25347 [ 1484.060738][ T5420] binder: 5417:5420 ioctl c0306201 20000340 returned -22 06:44:56 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6309}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:56 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) gettid() bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) r1 = pidfd_getfd(r0, r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r1, 0x0, 0x1a6, &(0x7f00000001c0)='/det\x01\x00n\x93u\x95/mice\x00\xc8\xdc\xf4\xda\xadR\xf7\x05\xbf\x1c\x11`\xdc\xd8[gu8:\x9dfF\x9e\xd3\xb1\x1d\xbf$(\x18k\x96\xa0\xa2\xf05\x15v}F.\xaa\xce\x00k\xf3\xa4\x9dV\xb0\xb19\x947\x06\xfd\xa3u<\xd0\x01#{lD\xbc]\x87\xd0\xd3\xf7\xd1\xa9Q\xb9\n\xa3\xa0\x9c\xbd@Q\xa5\x84\xaa\xee\xb2|\x9eVr\xae\x0e\x90\xed\xa9\x04P\xcdMo{S\x8a\x94F\xe53\xd1\x80\xe0\xb2C1\xb7\t\x93\x96!\xd0\\[\x1e\xe6\xe9\x1f \xd04+aB]\xd9\xd9we;0\xdc!\xa4\x9d$\x80\x85\xa7Tl\x1cTU]\x0f\xb5yU\xa2\xe7\a\xdae\xbd_\xc7#\x1f\x88\xd5\x83\xfd\x11\x00\"\x81\xd3\f\xa2\x05\xe2\xd5\xa0\xde)cS\xa4\xaci\xfc\xb1\xc1W\x9fQ]\x13\xc5\x0eE\xaf\xc8\x92<\nYW\xe1\x83v\xa3\f!\xd8w\xb7\xbcV\x9f\xa9\xdc>\xdf\xe32\xeb\xe1\x93dt\xd8\xc4\x1a\xfe\n\x1d\x9fB\xc12\xf1\xbf\xec\xd6\xd67\xcf\xe6\x12\x06s\xbd\xa2\x17\xea\xce\xe1\xc0\xdfW\xa7%\x8d\x1a\xb3\x98q:\x00\xa7\x1b<\x00\xe4\x91\xb0\xf6\x7f|P\x8eQ\xf4\xb7\x87\xea\xb7\x8b\x82\x7f\x88\xfb(&\xa30\xe6\'\xb9\x1bGf\x1f\xb6\xa0\xdb\xf5o\xe5\xb8\\\xa1;\x81\xfbP\xbe\xa1\xf1:\x1c\xc10\xcb\xd7\fM\xb2\xd7\x16\x9d\x87\x17\x8fZ02\xeb\xbdP\xa6\x15J\xdf!\xa2\xe1b\xb3\x06\xd9CLp\a\xed\xc6\xa9\xdc\xf4}\xf9\x8ec\x18F\xe8D\xf7\xe6\xdbV/\xc99\x99~\x8eC\xeb\x1f\xd1\x1f0\xe2\xb8+\xb6\xfe\xe9i\xd7\xa5\xe6,d\xe5\x90v\x16\xa1\x1f7\xedn\xd2'}, 0x30) r2 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x305002) ioctl$SG_GET_PACK_ID(r2, 0x227c, &(0x7f0000000100)) 06:44:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6304}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:57 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x119b40) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000380)) [ 1484.145189][ T5427] binder: 5425:5427 unknown command 0 [ 1484.161107][ T5427] binder: 5425:5427 ioctl c0306201 20000340 returned -22 [ 1484.219636][ T5433] binder: 5429:5433 unknown command 25353 [ 1484.241635][ T5433] binder: 5429:5433 ioctl c0306201 20000340 returned -22 06:44:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer={0x40046307}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:57 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r2, 0x541b, 0x0) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r1, 0x7af, &(0x7f0000000000)={@any, 0x1ff}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x10040) getsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) read$FUSE(r0, 0x0, 0x0) [ 1484.274104][ T5439] binder: 5435:5439 unknown command 25348 [ 1484.304842][ T5439] binder: 5435:5439 ioctl c0306201 20000340 returned -22 06:44:57 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000380)) 06:44:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x630a}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:57 executing program 2: sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x20}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x804) socket$inet_udp(0x2, 0x3, 0x0) 06:44:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6305}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1484.411062][ T5449] binder: 5444:5449 unknown command 0 [ 1484.443526][ T5449] binder: 5444:5449 ioctl c0306201 20000340 returned -22 06:44:57 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000380)) 06:44:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086302}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1484.493629][ T5459] binder: 5451:5459 unknown command 25354 [ 1484.524848][ T5459] binder: 5451:5459 ioctl c0306201 20000340 returned -22 06:44:57 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x40000) ioctl$FIONREAD(r1, 0x541b, 0x0) socket$can_raw(0x1d, 0x3, 0x1) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x10) ioctl$FIONREAD(r2, 0x541b, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000002c0)={0x0, 0x1, r3, 0x3c2}) [ 1484.599845][ T5463] binder: 5461:5463 unknown command 25349 [ 1484.635758][ T5463] binder: 5461:5463 ioctl c0306201 20000340 returned -22 06:44:57 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000780)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x1c, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4000000) r2 = socket$inet_udp(0x2, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000080)={'syztnl2\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='erspan0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="0008000000000001000000420e00003400640000ff2f90787f000001ac1414bb441c79110a0180ac1414aa0001000000000000000000000000000000000000007b3fd959bba0d1eb71d387871a024dd20406c829a81ce01da52d54"]}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000001340)='/dev/input/mice\x00', 0x0) sendmsg$AUDIT_TTY_SET(r3, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x3f9, 0x200, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$AUDIT_ADD_RULE(r3, &(0x7f0000001840)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001800)={&(0x7f00000013c0)={0x428, 0x3f3, 0x4, 0x70bd26, 0x25dfdbfe, {0x0, 0x1, 0x39, [0x8, 0xa1, 0x3f, 0x1, 0x5ad, 0x10001, 0x3ff, 0x4, 0x0, 0x401, 0x3, 0x18b, 0xfff, 0x5, 0x401, 0x6, 0x1000, 0xfffffffd, 0x2, 0x2, 0x5, 0x6, 0x800, 0x101, 0x3ec2, 0xffffff1f, 0x7, 0x0, 0xa69, 0xd9, 0x80, 0x8, 0x80000001, 0xfffff89a, 0x3bdb, 0x1f, 0x200, 0x0, 0x200, 0x1, 0x1, 0x5, 0x5, 0x7fffffff, 0x9, 0x0, 0x6, 0x80000001, 0x5, 0x1, 0x8, 0x7d44c180, 0x1f, 0x1ff, 0x119, 0x2, 0x1, 0x2b, 0x1f, 0x100, 0x2, 0x4, 0x712, 0x401], [0x8, 0xffff, 0x2e7c, 0x1, 0x40d00, 0x36, 0x1, 0x2, 0x1000, 0x8, 0x7, 0x9, 0x3ff, 0xa434, 0x58a, 0xfffffff7, 0x6, 0x7, 0x1ff, 0x3, 0x101, 0x1, 0x400, 0x40, 0x51, 0xf9, 0x3, 0x49b1, 0x1, 0x8, 0x6, 0x20, 0x7, 0x8001, 0x9, 0x1000, 0xe9e, 0xb985, 0x80000000, 0x7f, 0x8, 0x7fffffff, 0xf65e, 0xc8, 0x8, 0x9, 0x7b33, 0x100, 0x5, 0x0, 0xc3, 0x4, 0xbaf0, 0x3, 0x1ff, 0x7, 0x400, 0x80, 0x4, 0x8, 0x5, 0x7fff, 0x5], [0x343d, 0x8000, 0x4, 0x1, 0xe5, 0x81, 0x4f, 0x0, 0x8, 0x6, 0x20001f, 0x7, 0xffffff6f, 0x9, 0x1, 0x400, 0x9, 0x1, 0x6, 0xfff, 0x1f, 0xfff, 0x9, 0x20, 0x1, 0x8, 0x4, 0xd6, 0x6, 0x800, 0x5, 0x2, 0x4, 0x2, 0x9, 0x0, 0xffff0001, 0xfffffff7, 0x9, 0x5, 0x6, 0x3994, 0x87d, 0x8b1, 0x7, 0x800, 0x4, 0x37, 0x0, 0x2, 0x8, 0x5, 0x0, 0x3, 0xfffffeff, 0x7f, 0xffffffff, 0xf3000000, 0x1b, 0x8, 0x3, 0xfffffc00, 0xfffffffe, 0x5], [0x91, 0x4, 0x1, 0x0, 0x5, 0x5, 0x4, 0x8000, 0x0, 0xfff, 0x80000000, 0x1000, 0x9, 0xfff, 0x1, 0x2, 0x0, 0x400, 0x3f, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, 0x9, 0x1, 0x2, 0x10001, 0x5, 0x6, 0x10000, 0x80000000, 0x81, 0x6, 0x4, 0x4, 0x7, 0x0, 0x7, 0x76, 0x8000, 0xba13, 0x80000000, 0x0, 0x800, 0x5ac4, 0x8001, 0x40000000, 0x1, 0x1000, 0x400, 0x9, 0x3f, 0x7, 0x8, 0x0, 0x0, 0x4, 0x6, 0x6, 0x743, 0xff], 0x6, ['%]^@\xab\x00']}, ["", "", "", "", "", ""]}, 0x428}, 0x1, 0x0, 0x0, 0x4000004}, 0x48800) 06:44:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x630b}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1484.658752][ T5468] binder: 5465:5468 unknown command 1074291458 [ 1484.696334][ T5468] binder: 5465:5468 ioctl c0306201 20000340 returned -22 06:44:57 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000380)) 06:44:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6306}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer={0x4008630a}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:57 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) pipe(&(0x7f0000000000)) read$FUSE(r0, 0x0, 0x0) sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"/664], 0x1f0}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) 06:44:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x630d}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:57 executing program 5: socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f0000000340), &(0x7f0000000380)) [ 1484.901518][ T5489] binder: 5484:5489 unknown command 25350 [ 1484.924888][ T5491] binder: BC_ATTEMPT_ACQUIRE not supported [ 1484.944651][ T5491] binder: 5486:5491 ioctl c0306201 20000340 returned -22 06:44:57 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, 0x0, 0x0) sendmsg$AUDIT_TRIM(r2, &(0x7f00000021c0)={&(0x7f0000002100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002180)={&(0x7f0000002140)={0x10, 0x3f6, 0x2, 0x70bd2d, 0x25dfdbfb, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040000) ioctl$IMGETVERSION(r1, 0x80044942, &(0x7f0000000040)) [ 1484.972196][ T5489] binder: 5484:5489 ioctl c0306201 20000340 returned -22 06:44:57 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6310}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:57 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x10ba02) read$FUSE(r0, 0x0, 0x0) 06:44:57 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer={0x4008630c}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:57 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, &(0x7f0000000380)) 06:44:57 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6307}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1485.132405][ T5507] binder: 5503:5507 unknown command 1074291468 [ 1485.160547][ T5507] binder: 5503:5507 ioctl c0306201 20000340 returned -22 [ 1485.167270][ T5512] binder: 5504:5512 unknown command 25360 06:44:58 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) [ 1485.187522][ T5514] binder: 5509:5514 unknown command 25351 [ 1485.191015][ T5512] binder: 5504:5512 ioctl c0306201 20000340 returned -22 [ 1485.217976][ T5514] binder: 5509:5514 ioctl c0306201 20000340 returned -22 06:44:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086310}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6312}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:58 executing program 2: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x400, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, r2) socket$inet_udp(0x2, 0x3, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) 06:44:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6308}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:58 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 06:44:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer={0x40086312}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1485.543579][ T5542] binder: 5534:5542 unknown command 25362 [ 1485.577781][ T5542] binder: 5534:5542 ioctl c0306201 20000340 returned -22 06:44:58 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)=0x0) read$FUSE(r0, &(0x7f00000026c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)={0x3e8, 0x0, 0x0, [{{0x4, 0x3, 0x8, 0x8, 0x200, 0x7, {0x3, 0x10000, 0x7, 0x2, 0x70, 0x7, 0xeba, 0x8000, 0x74, 0x4000, 0x0, 0xee00, r3, 0xffffffff, 0x101}}, {0x3, 0x10001, 0x1, 0x1, ']'}}, {{0x3, 0x1, 0x1, 0xf59, 0xfffffff9, 0x1, {0x0, 0x8, 0x3, 0x1, 0x4, 0x8, 0x8001, 0x5, 0x20, 0x4000, 0x4, r4, r5, 0x5, 0xdd1}}, {0x1, 0x6, 0x10, 0x6, '/dev/input/mice\x00'}}, {{0x1, 0x3, 0x9, 0x7, 0xffffffff, 0x1000, {0x4, 0xff, 0x9, 0xae4, 0x6, 0x9, 0x9, 0x7a, 0x0, 0x4000, 0x1000, 0xee00, 0xee00, 0x1, 0x3}}, {0x6, 0xec4, 0x7, 0x8, '\\T,(\x1c}\x16'}}, {{0x5, 0x2, 0x100, 0x40, 0x7f7f, 0x5, {0x2, 0x2, 0x4, 0xe18, 0xeb7, 0x3a8, 0x8, 0x1, 0x3f, 0x2000, 0x9, 0x0, 0xee00, 0x4, 0x81}}, {0x0, 0x9, 0x10, 0xfffffffa, '/dev/input/mice\x00'}}, {{0x0, 0x0, 0x6, 0x9, 0x9, 0x8, {0x2, 0x752, 0x6, 0x1dd, 0x7fff, 0x0, 0x3, 0x1ed8dae2, 0x3, 0x4000, 0x400, 0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x6}}, {0x0, 0x0, 0x10, 0x400, '/dev/input/mice\x00'}}, {{0x0, 0x3, 0x7, 0x0, 0x5, 0x8, {0x0, 0x1, 0x5, 0x6, 0x3670000000000, 0x7fffffff, 0x4, 0xdff, 0x3, 0x6000, 0xfffffffe, 0xee01, 0xee00, 0x7}}, {0x2, 0x8000, 0x2, 0x3, ',-'}}]}, 0x3e8) [ 1485.601980][ T5550] binder: 5541:5550 unknown command 25352 [ 1485.683758][ T5550] binder: 5541:5550 ioctl c0306201 20000340 returned -22 06:44:58 executing program 5: r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0x0, 0x0) 06:44:58 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40046302}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1485.753187][ T5568] binder: 5562:5568 unknown command 1074291474 06:44:58 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x202) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x18) socket$inet_udp(0x2, 0x3, 0x0) [ 1485.822720][ T5568] binder: 5562:5568 ioctl c0306201 20000340 returned -22 06:44:58 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6309}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:58 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x4200) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mISDNtimer\x00', 0x200, 0x0) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f0000000080)=0x2) read$FUSE(r0, 0x0, 0x0) [ 1485.986241][ T5589] binder: BC_ACQUIRE_RESULT not supported 06:44:58 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer={0x400c630e}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:58 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)=0x0) read$FUSE(r0, &(0x7f00000026c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)={0x3e8, 0x0, 0x0, [{{0x4, 0x3, 0x8, 0x8, 0x200, 0x7, {0x3, 0x10000, 0x7, 0x2, 0x70, 0x7, 0xeba, 0x8000, 0x74, 0x4000, 0x0, 0xee00, r3, 0xffffffff, 0x101}}, {0x3, 0x10001, 0x1, 0x1, ']'}}, {{0x3, 0x1, 0x1, 0xf59, 0xfffffff9, 0x1, {0x0, 0x8, 0x3, 0x1, 0x4, 0x8, 0x8001, 0x5, 0x20, 0x4000, 0x4, r4, r5, 0x5, 0xdd1}}, {0x1, 0x6, 0x10, 0x6, '/dev/input/mice\x00'}}, {{0x1, 0x3, 0x9, 0x7, 0xffffffff, 0x1000, {0x4, 0xff, 0x9, 0xae4, 0x6, 0x9, 0x9, 0x7a, 0x0, 0x4000, 0x1000, 0xee00, 0xee00, 0x1, 0x3}}, {0x6, 0xec4, 0x7, 0x8, '\\T,(\x1c}\x16'}}, {{0x5, 0x2, 0x100, 0x40, 0x7f7f, 0x5, {0x2, 0x2, 0x4, 0xe18, 0xeb7, 0x3a8, 0x8, 0x1, 0x3f, 0x2000, 0x9, 0x0, 0xee00, 0x4, 0x81}}, {0x0, 0x9, 0x10, 0xfffffffa, '/dev/input/mice\x00'}}, {{0x0, 0x0, 0x6, 0x9, 0x9, 0x8, {0x2, 0x752, 0x6, 0x1dd, 0x7fff, 0x0, 0x3, 0x1ed8dae2, 0x3, 0x4000, 0x400, 0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x6}}, {0x0, 0x0, 0x10, 0x400, '/dev/input/mice\x00'}}, {{0x0, 0x3, 0x7, 0x0, 0x5, 0x8, {0x0, 0x1, 0x5, 0x6, 0x3670000000000, 0x7fffffff, 0x4, 0xdff, 0x3, 0x6000, 0xfffffffe, 0xee01, 0xee00, 0x7}}, {0x2, 0x8000, 0x2, 0x3, ',-'}}]}, 0x3e8) [ 1486.051834][ T5589] binder: 5581:5589 ioctl c0306201 20000340 returned -22 [ 1486.076396][ T5598] binder: 5591:5598 unknown command 25353 [ 1486.125376][ T5598] binder: 5591:5598 ioctl c0306201 20000340 returned -22 06:44:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40046304}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1486.182531][ T5603] binder: 5599:5603 unknown command 0 [ 1486.251134][ T5603] binder: 5599:5603 ioctl c0306201 20000340 returned -22 06:44:59 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x4000c1) read$FUSE(r0, 0x0, 0x0) 06:44:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x630a}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:59 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)=0x0) read$FUSE(r0, &(0x7f00000026c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)={0x3e8, 0x0, 0x0, [{{0x4, 0x3, 0x8, 0x8, 0x200, 0x7, {0x3, 0x10000, 0x7, 0x2, 0x70, 0x7, 0xeba, 0x8000, 0x74, 0x4000, 0x0, 0xee00, r3, 0xffffffff, 0x101}}, {0x3, 0x10001, 0x1, 0x1, ']'}}, {{0x3, 0x1, 0x1, 0xf59, 0xfffffff9, 0x1, {0x0, 0x8, 0x3, 0x1, 0x4, 0x8, 0x8001, 0x5, 0x20, 0x4000, 0x4, r4, r5, 0x5, 0xdd1}}, {0x1, 0x6, 0x10, 0x6, '/dev/input/mice\x00'}}, {{0x1, 0x3, 0x9, 0x7, 0xffffffff, 0x1000, {0x4, 0xff, 0x9, 0xae4, 0x6, 0x9, 0x9, 0x7a, 0x0, 0x4000, 0x1000, 0xee00, 0xee00, 0x1, 0x3}}, {0x6, 0xec4, 0x7, 0x8, '\\T,(\x1c}\x16'}}, {{0x5, 0x2, 0x100, 0x40, 0x7f7f, 0x5, {0x2, 0x2, 0x4, 0xe18, 0xeb7, 0x3a8, 0x8, 0x1, 0x3f, 0x2000, 0x9, 0x0, 0xee00, 0x4, 0x81}}, {0x0, 0x9, 0x10, 0xfffffffa, '/dev/input/mice\x00'}}, {{0x0, 0x0, 0x6, 0x9, 0x9, 0x8, {0x2, 0x752, 0x6, 0x1dd, 0x7fff, 0x0, 0x3, 0x1ed8dae2, 0x3, 0x4000, 0x400, 0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x6}}, {0x0, 0x0, 0x10, 0x400, '/dev/input/mice\x00'}}, {{0x0, 0x3, 0x7, 0x0, 0x5, 0x8, {0x0, 0x1, 0x5, 0x6, 0x3670000000000, 0x7fffffff, 0x4, 0xdff, 0x3, 0x6000, 0xfffffffe, 0xee01, 0xee00, 0x7}}, {0x2, 0x8000, 0x2, 0x3, ',-'}}]}, 0x3e8) 06:44:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40046307}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer={0x400c630f}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1486.445624][ T5615] binder: 5613:5615 unknown command 25354 [ 1486.472323][ T5615] binder: 5613:5615 ioctl c0306201 20000340 returned -22 06:44:59 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f00000026c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r3 = syz_open_dev$sg(&(0x7f0000000400)='/dev/sg#\x00', 0xffffffffffff0000, 0xa000) pidfd_getfd(r0, r3, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000000)={0x3e8, 0x7ffffffffffffffa, 0x0, [{{0x4, 0x0, 0x2, 0xffffffffffffaef8, 0x5, 0x100, {0x1, 0x7dd4, 0x200, 0x1, 0x6, 0x8, 0xa98, 0x2, 0x44, 0x8000, 0x80, 0xee01, 0xee01, 0x1}}, {0x2, 0x4, 0x10, 0x80, '/dev/input/mice\x00'}}, {{0x4, 0x3, 0xfff, 0x0, 0x1, 0x5, {0x2, 0x1, 0x7, 0x3, 0x7ff, 0x6, 0x3, 0x7, 0x7, 0x4000, 0x200, 0xee00, 0xffffffffffffffff, 0x796, 0x7000}}, {0x0, 0x0, 0x2, 0x8ed, '/{'}}, {{0x5, 0x1, 0x20000000000000, 0x3, 0xfffffc00, 0x10000, {0x5, 0x4, 0x6, 0x7, 0x5, 0xfffffffffffffffa, 0xffff, 0x7f, 0x1, 0xa000, 0x5, 0xffffffffffffffff, 0xee00, 0x0, 0x6516}}, {0x0, 0x5, 0x10, 0xcc4, '/dev/input/mice\x00'}}, {{0x3, 0x0, 0x6, 0x6d5, 0xfffffc00, 0x8001, {0x3, 0x8, 0x7c6b, 0x3, 0x5, 0x8001, 0x8001, 0x0, 0x5, 0xa000, 0x80000001, r1, 0xee00, 0x0, 0x4a}}, {0x1, 0x5, 0x10, 0x640, '/dev/input/mice\x00'}}, {{0x3, 0x1, 0x5, 0x67, 0x8, 0x2, {0x3, 0x7, 0xfff, 0x59a4, 0xcd, 0x223, 0x5, 0x4, 0x0, 0x4000, 0x7, 0xffffffffffffffff, r2, 0x3, 0x80000000}}, {0x1, 0x2, 0x4, 0x1ff, '^${\\'}}, {{0x4, 0x2, 0x6, 0x80000000, 0x8, 0x5, {0x0, 0x0, 0x0, 0x80000000, 0x4, 0x200000000000, 0x3, 0x0, 0x4, 0x1000, 0x7fffffff, 0xee00, 0xee01, 0xffffffff, 0xfffffffa}}, {0x5, 0x5e9, 0x1, 0x8001, '/'}}]}, 0x3e8) read$FUSE(r0, 0x0, 0x0) 06:44:59 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002040)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000004080)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_io_uring_submit(0x0, 0x0, &(0x7f0000006400)=@IORING_OP_STATX={0x15, 0x4, 0x0, 0xffffffffffffff9c, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000063c0)='./file0\x00', 0x308, 0x100, 0x1}, 0x200) accept4(r0, &(0x7f00000060c0)=@can, &(0x7f0000006140)=0x80, 0x800) r5 = geteuid() r6 = getegid() r7 = getuid() read$FUSE(0xffffffffffffffff, &(0x7f0000006440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f00000084c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f000000a500)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f000000c600)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f000000e640)={0x4f8, 0x0, 0x0, [{{0x6, 0x2, 0x5ef613ee, 0x3, 0xc98, 0x2, {0x2, 0x5, 0x100, 0x5, 0xc8, 0x1ff, 0x10000, 0x821, 0x23, 0x1000, 0x0, r1, r2, 0x8001, 0xe00}}, {0x3, 0x4, 0x3, 0x0, '-^!'}}, {{0x5, 0x2, 0x3, 0x9, 0x0, 0x6, {0x6, 0x6, 0x6, 0x3, 0x1000, 0x10000, 0x7, 0x3, 0x17f, 0x4000, 0x1, 0xffffffffffffffff, r3, 0x3, 0x1}}, {0x0, 0x2, 0x1, 0x4198, '\x9d'}}, {{0x3, 0x2, 0x7, 0x66, 0xfff, 0xffff0000, {0x0, 0x2, 0x8, 0x3f, 0xa44, 0x9, 0xb, 0xaab, 0x4, 0x8000, 0x1, 0xffffffffffffffff, r4, 0x5, 0x7fffffff}}, {0x3, 0x6, 0x1, 0x4, '['}}, {{0x3, 0x0, 0x80000000, 0x9, 0x0, 0x1, {0x1, 0x5e7, 0x0, 0x79cc, 0x3, 0xff, 0x6, 0xcf50, 0x6, 0x8000, 0x200, r5, r6, 0x9, 0x1}}, {0x6, 0xfffffffffffffffa, 0x0, 0x3}}, {{0x6, 0x0, 0x1000, 0x23, 0xffff, 0x9, {0x5, 0x1, 0xe358, 0xffffffffffffff83, 0x50b9175, 0x2, 0x10000, 0xd9200000, 0x101, 0x2000, 0x1, r7, 0xee00, 0x8001, 0xfffffffd}}, {0x3, 0x365, 0x3, 0x9, ']#\''}}, {{0x5, 0x200, 0x1, 0x4, 0x4, 0x9, {0x5, 0x7, 0xa1d, 0x2, 0x3, 0x7, 0x7, 0x400, 0x10001, 0x6000, 0xffff7fff, 0xee00, 0x0, 0x80, 0x3}}, {0x1, 0x1ff, 0x1, 0x1f, '-'}}, {{0x3, 0x2, 0x3, 0x7fff, 0x99, 0x1, {0x4, 0x800, 0x85, 0xf4, 0x3, 0x1, 0xd6f, 0x0, 0x5, 0x2000, 0x7, r8, r9, 0x7f, 0xd88}}, {0x5, 0x51353d93, 0x0, 0x1f}}, {{0x4, 0x0, 0xba04, 0x80, 0x7fff, 0x3e, {0x3, 0xdf11, 0x80, 0x100000001, 0xd9f, 0x0, 0x1, 0x6, 0xe00, 0x2000, 0x20000, r10, r11, 0x4}}, {0x2, 0x10000, 0x0, 0x5}}]}, 0x4f8) 06:44:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x630b}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:59 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff}) read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)=0x0) read$FUSE(r0, &(0x7f00000026c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)={0x3e8, 0x0, 0x0, [{{0x4, 0x3, 0x8, 0x8, 0x200, 0x7, {0x3, 0x10000, 0x7, 0x2, 0x70, 0x7, 0xeba, 0x8000, 0x74, 0x4000, 0x0, 0xee00, r3, 0xffffffff, 0x101}}, {0x3, 0x10001, 0x1, 0x1, ']'}}, {{0x3, 0x1, 0x1, 0xf59, 0xfffffff9, 0x1, {0x0, 0x8, 0x3, 0x1, 0x4, 0x8, 0x8001, 0x5, 0x20, 0x4000, 0x4, r4, r5, 0x5, 0xdd1}}, {0x1, 0x6, 0x10, 0x6, '/dev/input/mice\x00'}}, {{0x1, 0x3, 0x9, 0x7, 0xffffffff, 0x1000, {0x4, 0xff, 0x9, 0xae4, 0x6, 0x9, 0x9, 0x7a, 0x0, 0x4000, 0x1000, 0xee00, 0xee00, 0x1, 0x3}}, {0x6, 0xec4, 0x7, 0x8, '\\T,(\x1c}\x16'}}, {{0x5, 0x2, 0x100, 0x40, 0x7f7f, 0x5, {0x2, 0x2, 0x4, 0xe18, 0xeb7, 0x3a8, 0x8, 0x1, 0x3f, 0x2000, 0x9, 0x0, 0xee00, 0x4, 0x81}}, {0x0, 0x9, 0x10, 0xfffffffa, '/dev/input/mice\x00'}}, {{0x0, 0x0, 0x6, 0x9, 0x9, 0x8, {0x2, 0x752, 0x6, 0x1dd, 0x7fff, 0x0, 0x3, 0x1ed8dae2, 0x3, 0x4000, 0x400, 0xffffffffffffffff, 0xffffffffffffffff, 0x80000001, 0x6}}, {0x0, 0x0, 0x10, 0x400, '/dev/input/mice\x00'}}, {{0x0, 0x3, 0x7, 0x0, 0x5, 0x8, {0x0, 0x1, 0x5, 0x6, 0x3670000000000, 0x7fffffff, 0x4, 0xdff, 0x3, 0x6000, 0xfffffffe, 0xee01, 0xee00, 0x7}}, {0x2, 0x8000, 0x2, 0x3, ',-'}}]}, 0x3e8) 06:44:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40086303}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1486.593243][ T5625] binder: 5620:5625 unknown command 0 [ 1486.621735][ T5625] binder: 5620:5625 ioctl c0306201 20000340 returned -22 06:44:59 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040)) r1 = socket(0x28, 0x800, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000000)=0x1, 0x4) 06:44:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer={0x40106308}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x630d}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:59 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_udp(0x2, 0x3, 0x0) 06:44:59 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') pipe(&(0x7f0000000000)) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)) read$FUSE(r0, &(0x7f00000026c0)={0x2020}, 0x2020) 06:44:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x4008630a}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1486.842472][ T5646] binder: 5642:5646 unknown command 0 06:44:59 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x50}}, 0x40) r3 = syz_genetlink_get_family_id$wireguard(0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000e80)={&(0x7f0000000340), 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x458, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x418, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0}) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="997be600", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB], 0x3a8}, 0x1, 0x0, 0x0, 0x4008004}, 0x8080) read$FUSE(r0, 0x0, 0x0) [ 1486.886078][ T5646] binder: 5642:5646 ioctl c0306201 20000340 returned -22 06:44:59 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6310}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:44:59 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer={0x40106309}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:44:59 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') pipe(&(0x7f0000000000)) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000040)) [ 1486.983873][ T5657] binder: BC_ATTEMPT_ACQUIRE not supported [ 1487.020015][ T5657] binder: 5652:5657 ioctl c0306201 20000340 returned -22 06:44:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000b80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x19102800}, 0xc, &(0x7f0000000b40)={&(0x7f0000000040)={0xaec, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0xb7b43c1376c2ecfb}, @WGDEVICE_A_PEERS={0xab8, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PRESHARED_KEY={0x24, 0x2, "9ddb35924b7be4ff93f7140a126c1cb1ff161625bea7cbdaa9f8dc93dd258c7a"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x1000, @remote, 0x865}}]}, {0xf0, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0xc8, 0x9, 0x0, 0x1, [{0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "514033206f3890c2491c836c68ddadff27a0bc72d462eead605e530278b9e55f"}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x2f4, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x2a0, 0x9, 0x0, 0x1, [{0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x4}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}, {0x10c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, [], 0x1}, 0x1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8f27, @loopback}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1ff}]}, {0x62c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x628, 0x9, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x3c}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, [], 0x1}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}, {0x4}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, [], 0x14}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x2}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x21}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}]}, {0xc4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, [], 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xb}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x11}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}]}]}]}, {0x50, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_FLAGS={0x8, 0x3, 0x16799ee23d687ca8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @multicast1}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0x6}}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e24}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x4}]}, 0xaec}, 0x1, 0x0, 0x0, 0x40}, 0x4004) socket$inet_udp(0x2, 0x3, 0x0) [ 1487.062696][ T5663] binder: 5659:5663 unknown command 25360 [ 1487.073666][ T5664] binder: 5662:5664 unknown command 0 [ 1487.082210][ T5663] binder: 5659:5663 ioctl c0306201 20000340 returned -22 06:44:59 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40086310}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:00 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') pipe(&(0x7f0000000000)) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) [ 1487.112727][ T5664] binder: 5662:5664 ioctl c0306201 20000340 returned -22 06:45:00 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x6312}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer={0x40406300}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x400c630e}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1487.253191][ T5676] binder: 5673:5676 unknown command 25362 [ 1487.273022][ T5676] binder: 5673:5676 ioctl c0306201 20000340 returned -22 06:45:00 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000004700)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') pipe(&(0x7f0000000000)) 06:45:00 executing program 2: r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmsg$can_raw(r0, &(0x7f0000001640)={&(0x7f00000001c0)=@ax25={{0x3, @null}, [@null, @null, @remote, @rose, @remote, @bcast, @bcast, @rose]}, 0x80, &(0x7f0000001540)=[{&(0x7f0000000240)=""/80, 0x50}, {&(0x7f00000002c0)=""/126, 0x7e}, {&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f0000000340)=""/160, 0xa0}, {&(0x7f0000000400)=""/196, 0xc4}, {&(0x7f0000000500)=""/43, 0x2b}, {&(0x7f0000000540)=""/4096, 0x1000}], 0x7, &(0x7f00000015c0)=""/66, 0x42}, 0x40002020) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000180)={&(0x7f0000000000)=@caif, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)}], 0x1, &(0x7f0000000100)=""/117, 0x75}, 0x40010144) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x50}}, 0x40) r2 = syz_genetlink_get_family_id$wireguard(0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000e80)={&(0x7f0000000340), 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x458, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x418, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0}, 0x2020) syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/pid_for_children\x00') 06:45:00 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x80) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) getpeername(r1, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r2, 0x541b, 0x0) read$FUSE(r2, &(0x7f0000000680)={0x2020}, 0x2020) 06:45:00 executing program 2: ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) socket$inet_udp(0x2, 0x3, 0x0) 06:45:00 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) syz_open_dev$tty1(0xc, 0x4, 0x1) read$FUSE(r0, 0x0, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') 06:45:00 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40106308}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1487.993213][ T5714] binder: BC_ACQUIRE_RESULT not supported [ 1488.030863][ T5714] binder: 5705:5714 ioctl c0306201 20000340 returned -22 06:45:00 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer={0x40486311}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:00 executing program 2: sendto$phonet(0xffffffffffffffff, &(0x7f0000000000)="e186a1fb23ad8cdd43c8f0fea75cd2ad7250cf4d0b22295ed88d49f09c63f7103148a3d30b7b8cc8dd93ecf20360d4589666809deb6f0b035c2a4439e45af943a0bed99e16181b15b2fa97f04ba7c5bb89f0dffe628f61b5fa59d861079e059c8837a9ee3893ecf9340c692784297d029a1a97ac2f0af9f00098446decea851b3290726bcb93c5e4f339883fbecbcf46a5da6554e993ad0264453316e5dd3dc3a15bca57ae8e8645b6768f56a5638190d9410a43", 0xb4, 0xc001, &(0x7f00000000c0)={0x23, 0x17, 0xff, 0x6}, 0x10) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000180)='/dev/input/mice\x00', 0x62c2f4c089319650) ioctl$FIONREAD(r0, 0x541b, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0xffffffffffffffff, r0, 0x0, 0x23, &(0x7f0000000100)='%\\.-[^x-}$r\\,}]/-,3#-^$(#}-@-,:$-\\\x00'}, 0x30) socket$inet_udp(0x2, 0x3, 0x0) 06:45:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40046304}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:01 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') 06:45:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40106309}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer={0x40486312}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40046307}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40406300}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:01 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x20c241) read$FUSE(r0, 0x0, 0x0) ioctl$TIOCMIWAIT(r0, 0x545c, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0xffffffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4800) 06:45:01 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') 06:45:01 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40086303}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:01 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) clone3(&(0x7f00000001c0)={0x4000200, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x30}, &(0x7f00000000c0)=""/74, 0x4a, &(0x7f0000000140)=""/19, &(0x7f0000000180)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x8}, 0x58) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240)='/dev/input/mice\x00', 0x101000) ioctl$NS_GET_OWNER_UID(r1, 0xb704, &(0x7f0000000280)) pidfd_getfd(r0, r1, 0x0) 06:45:01 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x630b, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:01 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1489.107509][ T5816] binder: 5805:5816 unknown command 0 [ 1489.160640][ T5816] binder: 5805:5816 ioctl c0306201 20000340 returned -22 06:45:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40486311}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:02 executing program 5: syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/pid_for_children\x00') 06:45:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x4008630a}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:02 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x30f, 0x0, 0x400, 0x400, r0, 0x20, [], 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu={0x4, 0x0, 0x8, 0x0, 0xa, 0x80, 0x1}], &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, r0, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x0, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map={0x18, 0x8, 0x1, 0x0, r0}, @map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x42}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='syzkaller\x00', 0xf1, 0xcb, &(0x7f0000000100)=""/203, 0x41000, 0x2, [], 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x5, 0x0, 0x3ff}, 0x10, 0xffffffffffffffff}, 0x78) read$FUSE(r0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/mISDNtimer\x00', 0x40000, 0x0) 06:45:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x630c, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1489.447705][ T5836] binder: BC_ATTEMPT_ACQUIRE not supported 06:45:02 executing program 5: syz_open_procfs$namespace(0x0, 0x0) [ 1489.498064][ T5836] binder: 5831:5836 ioctl c0306201 20000340 returned -22 [ 1489.513292][ T5844] binder: 5838:5844 unknown command 0 06:45:02 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x38a40) read$FUSE(r0, 0x0, 0x0) getsockname(r0, &(0x7f0000000040)=@qipcrtr, &(0x7f00000000c0)=0x80) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000100)={0x14, 0x13, 0x1, {0x40, 0x0, 0x4}}, 0x14) 06:45:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40486312}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1489.567917][ T5844] binder: 5838:5844 ioctl c0306201 20000340 returned -22 06:45:02 executing program 2: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="0000000000000000df124b215d251200000008007f00"], 0x1c}}, 0x8000) socket$inet_udp(0x2, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 06:45:02 executing program 5: syz_open_procfs$namespace(0x0, 0x0) 06:45:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40086310}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x630d, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x3, 0x0, &(0x7f00000002c0)="f5"}) 06:45:02 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) 06:45:02 executing program 5: syz_open_procfs$namespace(0x0, 0x0) 06:45:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x400c630e}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1489.834330][ T5860] binder: 5857:5860 unknown command 0 [ 1489.873622][ T5860] binder: 5857:5860 ioctl c0306201 20000340 returned -22 06:45:02 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x5, 0x0, &(0x7f00000002c0)="f5"}) 06:45:02 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40046302, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:02 executing program 4: bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x5, 0x8}, 0xc) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) 06:45:02 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x50}}, 0x40) r4 = syz_genetlink_get_family_id$wireguard(0x0) getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000e40)={&(0x7f0000001980)={0x464, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0x424, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0}, &(0x7f0000000440)=0x80) sendmsg$BATADV_CMD_GET_BLA_CLAIM(0xffffffffffffffff, &(0x7f0000000ec0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, r2, 0x8, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x400}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xbe6}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048080}, 0x100) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000001e00)={0x898, r7, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r8}, @WGDEVICE_A_PEERS={0x844, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r9, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r7, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r10 = accept4(r9, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r10, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r2, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x17ab45d4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1ff}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040) 06:45:02 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r0, @ANYBLOB="0000000000000000df124b215d251200000008007f00"], 0x1c}}, 0x8000) socket$inet_udp(0x2, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 06:45:02 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x400c630f}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x7, 0x0, &(0x7f00000002c0)="f5"}) [ 1490.137176][ T5884] binder: BC_ACQUIRE_RESULT not supported 06:45:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40106308}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:03 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x5ce02) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, 0x0, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x24}, @void, @val={0xc, 0x99, {0x101, 0x46}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x1b}}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r0}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x22}}]}, 0x48}, 0x1, 0x0, 0x0, 0x400c891}, 0x20000041) sendmsg$BATADV_CMD_GET_MESH(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000008c0)=ANY=[@ANYBLOB="5c00001e", @ANYRESDEC, @ANYBLOB="00042bbd7000fddbdf2501000000050033000200000008002c00ff03000008003200ff01000005002a000100000005002f000100000008003b0000000000080031000500000005003000010000000500370001000000"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000300)='gtp\x00') r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r2, 0x541b, 0x0) ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r2, 0x7af, &(0x7f0000000500)={@my=0x1, 0x7}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x42}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) getpeername(r0, &(0x7f0000000340)=@can={0x1d, 0x0}, &(0x7f00000003c0)=0x80) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000004c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x60, r1, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x60}, 0x1, 0x0, 0x0, 0x44080}, 0x20004010) getpeername(r2, &(0x7f0000000540)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000005c0)=0x80) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x2c, r1, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_FLOW={0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200408c4}, 0x800) sendmsg$AUDIT_USER_TTY(r4, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x98, 0x464, 0x20, 0x70bd2d, 0x25dfdbff, "efdee5720b45b7492b4dffca1d2c450d60b404f462fa5a1df98043480a0ad7bd51560a2ffed0f873be820cf99a2e7d3706893d87c1b09ca6b46bc52cd47f53258d9c0c9848db971e999b3369706551339b4a20bf02983f02674a6d8b8836a34976539853a98c1a59511305aae688481d0404895f8e12b9c2572759310da7588f1ebc716515208e", ["", "", "", ""]}, 0x98}, 0x1, 0x0, 0x0, 0x20040001}, 0x1) r5 = pidfd_getfd(r2, r4, 0x0) sendmsg$AUDIT_GET(r5, &(0x7f0000000980)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f00000000c0)={0x10, 0x3e8, 0x800, 0x70bd27, 0x25dfdbff, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) read$FUSE(r0, 0x0, 0x0) [ 1490.181838][ T5884] binder: 5877:5884 ioctl c0306201 20000340 returned -22 06:45:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40046304, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:03 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x5, 0x0, &(0x7f00000002c0)="f5"}) 06:45:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0xc, 0x0, &(0x7f00000002c0)="f5"}) 06:45:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40106309}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:03 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f2, 0x1, 0x70bd29, 0x25dfdbff, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x20008064) socket$kcm(0x29, 0x5, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x0) r1 = getpid() pidfd_open(r1, 0x0) sendmsg$AUDIT_SET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, 0x3e9, 0x120, 0x70bd27, 0x25dfdbff, {0x8, 0x0, 0x1, r1, 0x9, 0x8, 0x7, 0xfffffffc, 0x0, 0xf403463}, ["", "", "", "", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x4000) 06:45:03 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x6a4383) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x9}]}) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x0) sendmsg$AUDIT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x8, 0x70bd25, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40}, 0x40895) read$FUSE(r0, 0x0, 0x0) [ 1490.398942][ T5909] binder: 5905:5909 unknown command 0 [ 1490.428957][ T5909] binder: 5905:5909 ioctl c0306201 20000340 returned -22 06:45:03 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x30f, 0x0, 0x400, 0x400, r0, 0x20, [], 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu={0x4, 0x0, 0x8, 0x0, 0xa, 0x80, 0x1}], &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, r0, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x0, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map={0x18, 0x8, 0x1, 0x0, r0}, @map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x42}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='syzkaller\x00', 0xf1, 0xcb, &(0x7f0000000100)=""/203, 0x41000, 0x2, [], 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x5, 0x0, 0x3ff}, 0x10, 0xffffffffffffffff}, 0x78) read$FUSE(r0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/mISDNtimer\x00', 0x40000, 0x0) 06:45:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40046307, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x10, 0x0, &(0x7f00000002c0)="f5"}) 06:45:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40406300}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:03 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) pidfd_send_signal(r0, 0xa, &(0x7f0000000000)={0x17, 0x81, 0x9}, 0x0) read$FUSE(r0, 0x0, 0x0) 06:45:03 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x30f, 0x0, 0x400, 0x400, r0, 0x20, [], 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu={0x4, 0x0, 0x8, 0x0, 0xa, 0x80, 0x1}], &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, r0, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x0, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map={0x18, 0x8, 0x1, 0x0, r0}, @map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x42}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='syzkaller\x00', 0xf1, 0xcb, &(0x7f0000000100)=""/203, 0x41000, 0x2, [], 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x5, 0x0, 0x3ff}, 0x10, 0xffffffffffffffff}, 0x78) read$FUSE(r0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/mISDNtimer\x00', 0x40000, 0x0) [ 1490.642354][ T5929] binder: 5926:5929 unknown command 0 [ 1490.678345][ T5929] binder: 5926:5929 ioctl c0306201 20000340 returned -22 06:45:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x300, 0x0, &(0x7f00000002c0)="f5"}) 06:45:03 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getpeername(r1, &(0x7f0000000000)=@in, &(0x7f0000000080)=0x80) r2 = accept4(r0, &(0x7f00000000c0)=@rc, &(0x7f0000000140)=0x80, 0x80800) sendmsg$AUDIT_TRIM(r2, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x10, 0x3f6, 0x2, 0x70bd2b, 0x25dfdbfb, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8004}, 0x10004005) 06:45:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40406301}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40086303, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:03 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x30f, 0x0, 0x400, 0x400, r0, 0x20, [], 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu={0x4, 0x0, 0x8, 0x0, 0xa, 0x80, 0x1}], &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, r0, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x0, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map={0x18, 0x8, 0x1, 0x0, r0}, @map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x42}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='syzkaller\x00', 0xf1, 0xcb, &(0x7f0000000100)=""/203, 0x41000, 0x2, [], 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x5, 0x0, 0x3ff}, 0x10, 0xffffffffffffffff}, 0x78) read$FUSE(r0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000540)='/dev/mISDNtimer\x00', 0x40000, 0x0) 06:45:03 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x44, @empty, @empty, 0x0, 0x8, 0x8, 0xfffffffe}}) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x0) sendmsg$AUDIT_USER(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, 0x3ed, 0x800, 0x70bd29, 0x25dfdbff, "23bde437b0e2548ab8a1ddc5d17ff5632e9a87ba22975304e60e1cd1082ceab256b200989e851a6ad51f8e3553f95d39c9fcf76faa7df3ff67fb2130e18d", ["", ""]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 06:45:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0xff00, 0x0, &(0x7f00000002c0)="f5"}) 06:45:03 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40486311}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1490.914271][ T5953] binder: 5947:5953 unknown command 0 06:45:03 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x30f, 0x0, 0x400, 0x400, r0, 0x20, [], 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu={0x4, 0x0, 0x8, 0x0, 0xa, 0x80, 0x1}], &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, r0, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x0, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map={0x18, 0x8, 0x1, 0x0, r0}, @map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x42}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='syzkaller\x00', 0xf1, 0xcb, &(0x7f0000000100)=""/203, 0x41000, 0x2, [], 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x5, 0x0, 0x3ff}, 0x10, 0xffffffffffffffff}, 0x78) read$FUSE(r0, 0x0, 0x0) [ 1490.956836][ T5953] binder: 5947:5953 ioctl c0306201 20000340 returned -22 06:45:03 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x4008630a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:03 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x442421) ioctl$FIONREAD(r0, 0x541b, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) r2 = pidfd_getfd(r0, 0xffffffffffffffff, 0x0) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f0000000080)) ioctl$FIONREAD(r1, 0x541b, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r3, 0x541b, 0x0) r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x2, 0x0) ioctl$TIOCVHANGUP(r4, 0x5437, 0x0) 06:45:03 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x2, &(0x7f00000002c0)="f5"}) 06:45:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper={0x40486312}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1491.178802][ T5969] binder: BC_ATTEMPT_ACQUIRE not supported [ 1491.184830][ T5969] binder: 5965:5969 ioctl c0306201 20000340 returned -22 06:45:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x3, &(0x7f00000002c0)="f5"}) 06:45:04 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x30f, 0x0, 0x400, 0x400, r0, 0x20, [], 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu={0x4, 0x0, 0x8, 0x0, 0xa, 0x80, 0x1}], &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, r0, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x2, 0xb, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x0, 0x1, 0x0, 0x2, 0xfffffffffffffffe, 0xfffffffffffffff0}, @map={0x18, 0x8, 0x1, 0x0, r0}, @map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x42}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f00000000c0)='syzkaller\x00', 0xf1, 0xcb, &(0x7f0000000100)=""/203, 0x41000, 0x2, [], 0x0, 0x9, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x1, 0x5, 0x0, 0x3ff}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x11}, 0x14}}, 0x0) socket$inet_udp(0x2, 0x3, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x450, 0x3f4, 0x10, 0x70bd2a, 0x25dfdbfc, {0x4, 0x0, 0x29, [0x4, 0x5, 0x9, 0x9c77, 0x5d, 0xffff, 0x80000000, 0x4, 0x6, 0x400, 0x6, 0x20, 0x7, 0x80000000, 0xfff, 0x7, 0x3f, 0x4, 0x100, 0x9, 0x8000, 0x5, 0x0, 0x8, 0x101, 0xfffffff8, 0x7ff, 0x6, 0x7, 0x80000001, 0x4, 0x6, 0x4, 0x1, 0x4, 0x9e, 0x9, 0x5, 0x10000, 0xac, 0x800, 0x3, 0x9, 0x7, 0xaa6, 0x8f1, 0x3, 0xffffffff, 0x9, 0x1, 0xfffffffe, 0x4, 0x9, 0x7, 0x5e6, 0x4, 0x2, 0x7ff, 0x81, 0x0, 0x9, 0x200, 0x8001, 0x27be], [0x1, 0x4, 0x5, 0x8, 0x80, 0x80, 0x1, 0x4, 0x5, 0x8000, 0x3, 0x55c, 0x2, 0x0, 0xd33, 0x400, 0x3, 0x7ff, 0x4, 0x3, 0x8, 0xff, 0x7, 0x1f8, 0x3, 0x1, 0x5, 0x88b0, 0xc7, 0xffffffff, 0x401, 0xfffffe00, 0x1, 0x6, 0x0, 0x1f, 0x2, 0x9, 0x7, 0x8, 0x8e30, 0x1, 0x80000000, 0x1, 0x9, 0x2, 0x4e, 0xd, 0x3, 0x1, 0x1, 0x6, 0xe2, 0x20, 0x0, 0x80000001, 0xffffffff, 0x3, 0xfffff98a, 0x1, 0x4d, 0x3f, 0x0, 0x80000001], [0x4, 0x1, 0x5, 0x28, 0x3, 0xfffffff9, 0x8, 0x7, 0x0, 0x9, 0x3, 0xffff, 0x52c, 0x9, 0x3, 0x5, 0x8, 0xfffff800, 0x0, 0x3d3, 0x1ff, 0x80000000, 0x2, 0xffffff1c, 0x2, 0x0, 0xf1, 0x1, 0x4000000, 0x2, 0x2, 0x101, 0x4, 0x9, 0x3, 0x8000, 0x8, 0xe, 0xc5, 0x0, 0x80000001, 0x2, 0x10001, 0x8001, 0xd7, 0x9, 0x7, 0x3, 0x1, 0x1f, 0x74b, 0x1, 0xaa, 0xffffff9e, 0x4, 0x8000, 0x7fffffff, 0x680, 0x1, 0x37, 0xffffaaff, 0x3ff, 0xffff, 0x20], [0x3, 0x8, 0x7, 0x1, 0x609e, 0x1000, 0x8, 0x7, 0x19, 0x5, 0xe8, 0x8, 0x0, 0xffffffff, 0x0, 0x1, 0x3, 0x40, 0x40, 0x401, 0x7ff, 0x10000, 0x10000, 0x6, 0x6, 0x1, 0x5, 0x2, 0x1, 0x7, 0x40, 0x3, 0x9, 0x10000, 0x0, 0x3, 0x1, 0x400, 0x1, 0x3, 0x68, 0x7fffffff, 0x0, 0xfffffc00, 0x6, 0x1, 0x3, 0xffffffff, 0x0, 0xffff, 0x3, 0x8, 0x6, 0x3b, 0xa7f6, 0x3, 0x1ff, 0xfffffffe, 0x9, 0x8, 0x6, 0x3, 0x0, 0x1], 0x2e, ['batadv\x00', '-^]@,\x00', 'batadv\x00', 'batadv\x00', 'batadv\x00', 'batadv\x00', ']{\\*\x00']}, ["", "", ""]}, 0x450}}, 0x80) 06:45:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40086310, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x3, 0x0, &(0x7f00000002c0)="f5"}) 06:45:04 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x30f, 0x0, 0x400, 0x400, r0, 0x20, [], 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x4}, 0x40) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu={0x4, 0x0, 0x8, 0x0, 0xa, 0x80, 0x1}], &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, r0, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x4, &(0x7f00000002c0)="f5"}) 06:45:04 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000000)=0x2) r1 = getegid() read$FUSE(r0, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000040)={0x290, 0xffffffffffffffda, 0x0, [{{0x5, 0x2, 0x101, 0x2, 0x8, 0x1, {0x6, 0xccc, 0x0, 0x100000000, 0x7, 0x6, 0x9, 0xff, 0x6, 0x4000, 0xbf02, 0xee00, r1, 0x1, 0x70b}}, {0x1, 0x1, 0x4, 0x8, '\'\x9b,)'}}, {{0x6, 0x1, 0x101, 0xff, 0x8, 0x80, {0x5, 0x95f3, 0x3, 0x0, 0x2, 0x4, 0x6, 0x1, 0xfff, 0x4000, 0x1, 0x0, 0xee00, 0x9, 0xd26e}}, {0x0, 0x3, 0x0, 0x7}}, {{0x1, 0x8000, 0xfffffffffffffbd3, 0x8001, 0xeb, 0x3, {0x5, 0x9, 0x4, 0x6, 0x9, 0x4, 0x5, 0x7f, 0x2, 0xa000, 0xf86e, 0xffffffffffffffff, 0x0, 0x30defeca, 0x4}}, {0x3, 0x0, 0x10, 0x80000000, '/dev/input/mice\x00'}}, {{0x2, 0x1, 0x56, 0x1, 0xffff, 0x42, {0x2, 0x1, 0x80000000, 0x7, 0x401, 0x3, 0x7, 0x3, 0x0, 0x6000, 0xfff, 0x0, r2, 0x0, 0x6}}, {0x3, 0x80, 0x5, 0x0, ',(]%%'}}]}, 0x290) [ 1491.400630][ T5982] binder: 5980:5982 unknown command 0 [ 1491.418393][ T5982] binder: 5980:5982 ioctl c0306201 20000340 returned -22 06:45:04 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x400c630e, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:04 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu={0x4, 0x0, 0x8, 0x0, 0xa, 0x80, 0x1}], &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, r0, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x5, &(0x7f00000002c0)="f5"}) 06:45:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x5, 0x0, &(0x7f00000002c0)="f5"}) 06:45:04 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) r1 = pidfd_open(0xffffffffffffffff, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) pidfd_getfd(r1, r2, 0x0) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x200080) write$FUSE_ENTRY(r3, &(0x7f0000000040)={0x90, 0x0, 0x0, {0x4, 0x0, 0x9, 0x6, 0x40, 0xc4, {0x1, 0x4, 0x0, 0x0, 0x6, 0x4, 0x401, 0x10001, 0x4, 0x1000, 0x401, 0xee00, 0xee00, 0x9, 0xbd}}}, 0x90) 06:45:04 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) [ 1491.822248][ T6025] binder: 6017:6025 unknown command 0 [ 1491.906036][ T6025] binder: 6017:6025 ioctl c0306201 20000340 returned -22 06:45:04 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x6, &(0x7f00000002c0)="f5"}) 06:45:04 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu={0x4, 0x0, 0x8, 0x0, 0xa, 0x80, 0x1}], &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:04 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x7, 0x0, &(0x7f00000002c0)="f5"}) 06:45:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x400c630f, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:05 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 06:45:05 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) 06:45:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x7, &(0x7f00000002c0)="f5"}) 06:45:05 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) [ 1492.309237][ T6068] binder: 6066:6068 unknown command 0 06:45:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0xc, 0x0, &(0x7f00000002c0)="f5"}) [ 1492.390653][ T6068] binder: 6066:6068 ioctl c0306201 20000340 returned -22 06:45:05 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) write$P9_RREAD(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="4b0000007502004000000084ba099b54287994b70f9e7821e281a2459d2462a1e3c95d799b233622ee0f41daf79f9f66830d94c37b5d5a927045a4f43a26b7acc91c9696d33625f4caeb59"], 0x4b) ioctl$IMGETVERSION(r0, 0x80044942, &(0x7f0000000040)) 06:45:05 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 06:45:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40106308, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:05 executing program 2: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000002500)={&(0x7f0000000080)=@nfc_llcp, 0x80, &(0x7f0000002400)=[{&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/166, 0xa6}, {&(0x7f00000011c0)=""/190, 0xbe}, {&(0x7f0000001280)=""/235, 0xeb}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/87, 0x57}], 0x6, &(0x7f0000002480)=""/121, 0x79}, 0x40000040) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f0000000040)=[{}, {}, {}, {}], &(0x7f00000025c0)=0x20) r1 = socket(0x6, 0x4, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000004f40)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000005040)={'gretap0\x00', &(0x7f0000004f80)={'erspan0\x00', r2, 0x10, 0x8000, 0x6, 0x6, {{0x20, 0x4, 0x0, 0x34, 0x80, 0x65, 0x0, 0x0, 0x29, 0x0, @rand_addr=0x64010101, @multicast1, {[@rr={0x7, 0x1b, 0x67, [@loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x2a}, @private=0xa010101, @empty, @local]}, @lsrr={0x83, 0x13, 0xe0, [@private=0xa010100, @remote, @local, @rand_addr=0x64010100]}, @lsrr={0x83, 0x1b, 0x29, [@remote, @multicast1, @loopback, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}, @generic={0x88, 0x7, "8b2e8376d5"}, @timestamp_prespec={0x44, 0x1c, 0x27, 0x3, 0x1, [{@broadcast}, {@local, 0x7}, {@loopback, 0x8}]}]}}}}}) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000002540), 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000002580)={'batadv_slave_0\x00'}) socket$inet_udp(0x2, 0x3, 0x0) 06:45:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x8, &(0x7f00000002c0)="f5"}) 06:45:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x10, 0x0, &(0x7f00000002c0)="f5"}) [ 1492.661582][ T6091] binder: 6089:6091 unknown command 0 [ 1492.679204][ T6091] binder: 6089:6091 ioctl c0306201 20000340 returned -22 06:45:05 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) pidfd_getfd(r0, r0, 0x0) read$FUSE(r0, 0x0, 0x0) 06:45:05 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) 06:45:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40106309, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x300, &(0x7f00000002c0)="f5"}) 06:45:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x300, 0x0, &(0x7f00000002c0)="f5"}) 06:45:05 executing program 2: ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0xd, 0x3266d1be}) socket$inet_udp(0x2, 0x3, 0x0) 06:45:05 executing program 4: r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)=""/88, 0x58}, {&(0x7f0000000080)=""/248, 0xf8}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000180)=""/177, 0xb1}, {&(0x7f0000000240)=""/176, 0xb0}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000340)=""/56, 0x38}, {&(0x7f0000000380)=""/211, 0xd3}], 0x8}, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r1, 0x0, 0x0) 06:45:05 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) [ 1492.888005][ T6111] binder: 6105:6111 unknown command 0 [ 1492.919564][ T6111] binder: 6105:6111 ioctl c0306201 20000340 returned -22 06:45:05 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x500, &(0x7f00000002c0)="f5"}) 06:45:05 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:05 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0xff00, 0x0, &(0x7f00000002c0)="f5"}) 06:45:05 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0xc) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, &(0x7f0000000080)) 06:45:05 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x0) accept4(0xffffffffffffffff, &(0x7f00000001c0)=@un=@abs, &(0x7f0000000240)=0x80, 0x800) recvmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/28, 0x1c}], 0x1, &(0x7f0000000080)=""/227, 0xe3}, 0x12040) 06:45:05 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x600, &(0x7f00000002c0)="f5"}) 06:45:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x2, &(0x7f00000002c0)="f5"}) 06:45:06 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xd, 0xfffffffc, 0x2, 0x2, 0x1946, 0x1, 0x0, [], 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1}, 0x40) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r0, 0x9}) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, 0x0, 0x0) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) read$FUSE(r1, 0x0, 0x0) 06:45:06 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x0, 0x0, &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x700, &(0x7f00000002c0)="f5"}) 06:45:06 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$NS_GET_OWNER_UID(r0, 0xb704, &(0x7f0000000000)) 06:45:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x3, &(0x7f00000002c0)="f5"}) 06:45:06 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) write$P9_RREADDIR(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="680000002900210300000010000000000300000000000000ff030000000000003107002e2f66696c65302001000000000000000000000003000000000000007f07002e2f66695c65300404000000030000000000000036000000000000004e07002e2f66696c6530"], 0x68) read$FUSE(r0, 0x0, 0x0) 06:45:06 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000280), &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:06 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000000)) 06:45:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0xff00, &(0x7f00000002c0)="f5"}) 06:45:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x4, &(0x7f00000002c0)="f5"}) 06:45:06 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000280), &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x5, &(0x7f00000002c0)="f5"}) 06:45:06 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 06:45:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x1000000, &(0x7f00000002c0)="f5"}) 06:45:06 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x0, &(0x7f0000000280), &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:06 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000000)) r2 = accept4(r1, 0x0, &(0x7f0000000080), 0x80000) ioctl$IMSETDEVNAME(r2, 0x80184947, &(0x7f00000000c0)={0xffffffff, 'syz0\x00'}) ioctl$KDGKBTYPE(r0, 0x4b33, &(0x7f0000000040)) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttyS3\x00', 0x80, 0x0) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x3) read$FUSE(r0, &(0x7f0000000680)={0x2020}, 0x2020) ioctl$TIOCL_SCROLLCONSOLE(r3, 0x541c, &(0x7f0000000100)={0xd, 0x200}) 06:45:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:06 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x2000000, &(0x7f00000002c0)="f5"}) 06:45:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x6, &(0x7f00000002c0)="f5"}) 06:45:06 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu={0x0, 0x0, 0x8, 0x0, 0xa, 0x80, 0x1}], &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:06 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:06 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x7, &(0x7f00000002c0)="f5"}) 06:45:06 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) ioctl$IMGETDEVINFO(0xffffffffffffffff, 0x80044944, &(0x7f0000000000)={0x8000}) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000240)={r0, 0xc0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=0x84, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x7, 0x2}, 0x0, 0x0, &(0x7f00000000c0)={0x5, 0x4, 0xa, 0x7}, &(0x7f0000000100)=0x101, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=0x9}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000280)={r1}, 0x4) 06:45:07 executing program 4: r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x0) sendmsg$AUDIT_TTY_GET(r0, &(0x7f00000037c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003780)={&(0x7f0000003740)={0x10, 0x3f8, 0x100, 0x70bd2c, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r1, 0x0, 0x0) read$FUSE(r1, &(0x7f0000000680)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = getpid() pidfd_open(r4, 0x0) clone3(&(0x7f0000003800)={0x90080, &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0, {0x12}, &(0x7f00000026c0)=""/4096, 0x1000, &(0x7f0000000480)=""/39, &(0x7f00000004c0)=[r3, r4, r3, r3], 0x4, {r1}}, 0x58) r6 = getpid() r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) clone3(&(0x7f00000036c0)={0x0, &(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280), {0x36}, &(0x7f00000002c0)=""/102, 0x66, &(0x7f0000000340)=""/128, &(0x7f0000000580)=[r5, r6], 0x2, {r7}}, 0x58) r8 = getegid() write$FUSE_DIRENTPLUS(r1, &(0x7f0000000000)={0x1f8, 0x0, 0x0, [{{0x1, 0x1, 0x7, 0xc31e, 0x57c, 0xc59, {0x1, 0x0, 0x5, 0xfffffffffffffc00, 0x6, 0x7fff, 0x9, 0x5, 0x6, 0x8000, 0x200, r2, r8, 0x1}}, {0x2, 0x4, 0x2, 0xfffffffe, '$('}}, {{0x2, 0x0, 0x9, 0x4, 0x6, 0x1, {0x1, 0x623, 0x7, 0x1, 0x8001, 0x7, 0x6, 0xf, 0xffff, 0x2000, 0x6, 0xee01, 0xffffffffffffffff, 0x7, 0x1}}, {0x4, 0x20, 0x3, 0x6, '{(/'}}, {{0x6, 0x0, 0x80000000, 0x100, 0x2, 0xffff3da2, {0x6, 0x7, 0x841, 0x4, 0x400, 0xff00000000000000, 0x81, 0x1ff, 0xf, 0x1000, 0x6, 0xee00, 0xee00, 0x5, 0x1}}, {0x4, 0x5, 0x10, 0x6994, '/dev/input/mice\x00'}}]}, 0x1f8) 06:45:07 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu={0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x1}], &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x3000000, &(0x7f00000002c0)="f5"}) 06:45:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x8, &(0x7f00000002c0)="f5"}) 06:45:07 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu={0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1}], &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x4000000, &(0x7f00000002c0)="f5"}) 06:45:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:07 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) r1 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), 0x2d, 0x0, &(0x7f0000000140)="1b9c06c9d70a64f71684d312713368d14a64dc1e202d338218e10cea47690ad4434b415327878ed6181f4c35aa"}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dri/renderD128\x00', 0x111000, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x121080, 0x0) 06:45:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x300, &(0x7f00000002c0)="f5"}) 06:45:07 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r1, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r2}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r1, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r4 = accept4(r3, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r4, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, 0x0, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r3, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, 0x0, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) r5 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_SET_MESH(r5, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x50}}, 0x40) r6 = syz_genetlink_get_family_id$wireguard(0x0) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f0000000e80)={&(0x7f0000000340), 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x458, r6, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PEERS={0x418, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x440, 0x3f4, 0x400, 0x882f, 0x25dfdbff, {0x0, 0x1, 0x1a, [0x400, 0x0, 0x7fff00, 0x5, 0xef, 0x184, 0x0, 0x1800000, 0x3, 0x4, 0x3ff, 0x20, 0x100, 0x9cb1, 0x800, 0x800, 0x6, 0xe50, 0xee4b, 0x2, 0x7, 0x7fff, 0x81, 0x6, 0x8, 0x1, 0xad, 0x9, 0x2, 0x8, 0x11, 0x7ff, 0x7ff, 0x1, 0x8, 0x8, 0x1, 0x3, 0x9, 0xffffffd1, 0x7f, 0x3, 0x7ff, 0x800, 0x7f, 0x100, 0xead, 0x0, 0x8, 0x8000, 0x8, 0x7, 0x6, 0x9, 0xffff8001, 0x80000000, 0x5, 0x77, 0x1, 0x10001, 0x9, 0x3, 0x9, 0x8], [0xfffffff8, 0x1, 0x7, 0x20, 0x4c, 0x1, 0x20, 0x3, 0x9, 0xa7f8, 0x9, 0x3f, 0x2, 0x6, 0x3, 0x4, 0x2, 0x67, 0x9, 0x1, 0xbda5, 0x4, 0x3, 0x9, 0x2, 0xd69, 0x0, 0x10001, 0x1, 0xff, 0x3, 0x99, 0x3, 0x5, 0x400, 0x7, 0x5, 0xffffffff, 0xee2, 0x80000000, 0x7, 0x0, 0x975, 0xbe, 0x41d, 0x3, 0x0, 0x5, 0x7fffffff, 0x3, 0xb688, 0xfffffffe, 0x37, 0x3d27, 0x9, 0x5, 0x7fffffff, 0xa0, 0x1, 0x0, 0xc5, 0x4, 0x1000, 0x3], [0x8, 0x7fff, 0x14000, 0x6, 0x5, 0x846, 0x6, 0x40, 0x9, 0x24000, 0x3, 0x0, 0xffff, 0x800, 0xfffffffb, 0x4, 0x6, 0x28, 0xfffffff9, 0x4, 0x5, 0xae9a, 0x6, 0x8, 0x7, 0x100, 0x4, 0x9, 0x7fffffff, 0x9069, 0x284, 0x7, 0x4, 0x2, 0x105, 0x8, 0x4, 0x5, 0x8, 0xf0, 0xdf0, 0xc8b, 0x560f, 0x2, 0x4, 0x4, 0x3, 0x7, 0x2, 0x6, 0x7, 0x4, 0xffffffff, 0x88, 0x3, 0x3008, 0x8, 0x1f, 0x2d7, 0x8, 0x9, 0x4, 0x8, 0x10000], [0x80, 0x0, 0x2, 0x6, 0x7, 0x8000, 0x81, 0x7, 0x4, 0x0, 0x4, 0x7f, 0x3, 0x401, 0x7b62b273, 0x8, 0x80000, 0xa1c, 0x1ff, 0x0, 0x2, 0x5e6, 0x4, 0x3, 0x1, 0x7, 0x7f, 0x2, 0x9, 0x1ff, 0xffffffff, 0x8, 0xff, 0x10001, 0x6, 0x4, 0x3, 0x1, 0x6, 0x6, 0xffffd8ae, 0x10000, 0x1c0e8e1, 0x8, 0x7, 0x5a6, 0x3, 0x7, 0x67f2, 0x81, 0x2, 0x7, 0xffffffff, 0x4, 0xc173, 0x5, 0x2, 0x1f, 0x5, 0x3f, 0x7, 0x9, 0x6, 0x8ace], 0x1e, ['.#,/%\x00', '!$%-{]{\x00', '/dev/input/mice\x00']}, ["", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0xffff9988, 0x6, 0x7, 0x688, r0, 0x1000, [], 0x0, r0, 0x3, 0x4, 0x5}, 0x40) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r4, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0x6, &(0x7f0000000080)=@raw=[@alu={0x4, 0x0, 0x2, 0xb, 0xb, 0x6, 0xfffffffffffffffc}, @map={0x18, 0x2, 0x1, 0x0, r0}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1ff}], &(0x7f0000000600)='syzkaller\x00', 0x8, 0x35, &(0x7f0000000680)=""/53, 0x1f00, 0x10, [], 0x0, 0x1d, r4, 0x8, &(0x7f00000006c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x7, 0x800, 0x7}, 0x10, 0xffffffffffffffff, r0}, 0x78) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000000)={0x4, 'syz0\x00'}) 06:45:07 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu], &(0x7f00000002c0)='GPL\x00', 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x600, &(0x7f00000002c0)="f5"}) 06:45:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x6000000, &(0x7f00000002c0)="f5"}) 06:45:07 executing program 2: syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) socket$can_raw(0x1d, 0x3, 0x1) 06:45:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:07 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu], 0x0, 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:07 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x700, &(0x7f00000002c0)="f5"}) 06:45:07 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) getpeername(r0, &(0x7f0000000000)=@ethernet={0x0, @multicast}, &(0x7f0000000080)=0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) accept4(r1, 0x0, &(0x7f00000000c0), 0x80000) 06:45:07 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x7000000, &(0x7f00000002c0)="f5"}) 06:45:07 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:07 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) clone3(&(0x7f0000000240)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x2a}, &(0x7f00000000c0)=""/65, 0x41, &(0x7f0000000140)=""/104, &(0x7f00000001c0)=[0xffffffffffffffff], 0x1, {r0}}, 0x58) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r1, 0x0, 0x0) 06:45:07 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu], 0x0, 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0xff00, &(0x7f00000002c0)="f5"}) 06:45:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x8000000, &(0x7f00000002c0)="f5"}) 06:45:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:08 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu], 0x0, 0x1, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:08 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) 06:45:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x1000000, &(0x7f00000002c0)="f5"}) 06:45:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0xfdfdffff, &(0x7f00000002c0)="f5"}) 06:45:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:08 executing program 4: r0 = socket(0xb, 0x80000, 0x2a98) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="000425bd7000fedbdf250d00000005003300000000000a000900aaaaaaaaaabb00000500380001000000"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x40080) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r2, 0x0, 0x0) 06:45:08 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu], &(0x7f00000002c0)='GPL\x00', 0x0, 0xc0, &(0x7f0000000300)=""/192, 0x41100, 0x3, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x2000000, &(0x7f00000002c0)="f5"}) 06:45:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0xff000000, &(0x7f00000002c0)="f5"}) 06:45:08 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) 06:45:08 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x3, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:08 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) r1 = accept4(r0, 0x0, &(0x7f0000000000), 0x80000) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x50}}, 0x40) r3 = syz_genetlink_get_family_id$wireguard(0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000e80)={&(0x7f0000000340), 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x458, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x418, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) bind$isdn_base(r2, &(0x7f0000000280)={0x22, 0x7f, 0xb5, 0x8, 0x1}, 0x6) r3 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r2, 0x28, &(0x7f00000002c0)}, 0x10) read$FUSE(r1, 0x0, 0x0) socketpair(0x4, 0x3, 0x7, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$CAN_RAW_FILTER(r4, 0x65, 0x1, &(0x7f00000001c0)=[{}], &(0x7f0000000200)=0x8) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xfffffc01}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3272}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24040004}, 0x0) 06:45:08 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x4000000, &(0x7f00000002c0)="f5"}) 06:45:08 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x100000000000000, &(0x7f00000002c0)="f5"}) 06:45:08 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:08 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:08 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r3, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r6 = accept4(r5, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r2, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40c0000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000054}, 0x4000) 06:45:08 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x5000000, &(0x7f00000002c0)="f5"}) 06:45:08 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x0, r0, 0x80000001, 0x80000}) read$FUSE(r0, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r3, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r6 = accept4(r5, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r2, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4b97}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x20044000) 06:45:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x200000000000000, &(0x7f00000002c0)="f5"}) 06:45:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:09 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0x5, 0x10, 0x7f, 0x10001}, 0x10, 0xffffffffffffffff}, 0x78) 06:45:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x300000000000000, &(0x7f00000002c0)="f5"}) 06:45:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x6000000, &(0x7f00000002c0)="f5"}) 06:45:09 executing program 4: sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x1, 0x1, 0x0, 0x0, 0x3d, 0x1, 0x3, 0x0, 0x3}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x20040050) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x408001) read$FUSE(r0, 0x0, 0x0) 06:45:09 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x4200, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x80400) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x2f, 0x40, 0xd8, 0xb62, 0xa, @private1={0xfc, 0x1, [], 0x1}, @mcast2, 0x7800, 0x7800, 0x10001, 0xe3}}) 06:45:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:09 executing program 5: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x1, &(0x7f0000000280)=@raw=[@alu], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) 06:45:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x400000000000000, &(0x7f00000002c0)="f5"}) 06:45:09 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x400a02) write$P9_RLOPEN(r0, &(0x7f0000000000)={0x18, 0xd, 0x4, {{0x2, 0xfffffffe, 0x3}, 0x9}}, 0x18) read$FUSE(r0, 0x0, 0x0) 06:45:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x7000000, &(0x7f00000002c0)="f5"}) 06:45:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:09 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000000)={0x0, 0x0, r0, 0x80000001, 0x80000}) read$FUSE(r0, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r3, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r6 = accept4(r5, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r2, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4b97}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x8041}, 0x20044000) 06:45:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x8000000, &(0x7f00000002c0)="f5"}) 06:45:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f00000002c0)="f5"}) 06:45:09 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0xa94f82) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x20010, 0xffffffffffffffff, 0x10000000) pipe(&(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f00000013c0)) accept4(r2, 0x0, &(0x7f0000001980), 0x80000) syz_io_uring_setup(0x245f, &(0x7f0000001ac0)={0x0, 0x55c1, 0x0, 0x2, 0x223, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001b40)=0x0, &(0x7f0000001b80)) syz_io_uring_submit(r3, r1, &(0x7f0000001bc0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa}, 0xfff) r4 = socket(0x26, 0x5, 0xdd) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004, @fd=r4, 0x749f8b12, 0xac6, 0x4, 0x2e, 0x1}, 0x1) r5 = socket$kcm(0x29, 0x7, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) read$FUSE(r0, 0x0, 0x0) 06:45:09 executing program 2: write$P9_RLINK(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x47, 0x2}, 0x7) socket$inet_udp(0x2, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vmci\x00', 0x2, 0x0) socket$isdn_base(0x22, 0x3, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r2, &(0x7f0000000200)={0x8, 0x35, 0x1}, 0x8) io_uring_setup(0x4faa, &(0x7f0000000240)={0x0, 0x89d, 0x8, 0x2, 0x8b}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000100)={r1, 0x1, r0, 0x20000003}) 06:45:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:09 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) 06:45:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0xfdfdffff, &(0x7f00000002c0)="f5"}) 06:45:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x600000000000000, &(0x7f00000002c0)="f5"}) 06:45:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:09 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0xa94f82) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x20010, 0xffffffffffffffff, 0x10000000) pipe(&(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f00000013c0)) accept4(r2, 0x0, &(0x7f0000001980), 0x80000) syz_io_uring_setup(0x245f, &(0x7f0000001ac0)={0x0, 0x55c1, 0x0, 0x2, 0x223, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001b40)=0x0, &(0x7f0000001b80)) syz_io_uring_submit(r3, r1, &(0x7f0000001bc0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa}, 0xfff) r4 = socket(0x26, 0x5, 0xdd) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004, @fd=r4, 0x749f8b12, 0xac6, 0x4, 0x2e, 0x1}, 0x1) r5 = socket$kcm(0x29, 0x7, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) read$FUSE(r0, 0x0, 0x0) 06:45:09 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f00000061c0)={0x90, 0x0, r2, {0x6, 0x1, 0x2, 0x5, 0x41193d73, 0x7ff, {0x0, 0x92, 0x100000001, 0x8, 0x25, 0x81, 0x0, 0xfffffff8, 0x3, 0xc000, 0x3, r3, r4, 0x5, 0x200}}}, 0x90) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, @nfc={0x27, 0x1, 0x1, 0x6}, @ipx={0x4, 0x4, 0x80, "8c420fbf2d11", 0x5d}, @rc={0x1f, @any, 0x7f}, 0x1, 0x0, 0x0, 0x0, 0x1ff, &(0x7f0000000000)='vlan0\x00', 0x2ee9501c, 0x5, 0x9482}) read$FUSE(r1, &(0x7f0000006280)={0x2020}, 0x2020) 06:45:09 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0xa94f82) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x20010, 0xffffffffffffffff, 0x10000000) pipe(&(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f00000013c0)) accept4(r2, 0x0, &(0x7f0000001980), 0x80000) syz_io_uring_setup(0x245f, &(0x7f0000001ac0)={0x0, 0x55c1, 0x0, 0x2, 0x223, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001b40)=0x0, &(0x7f0000001b80)) syz_io_uring_submit(r3, r1, &(0x7f0000001bc0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa}, 0xfff) r4 = socket(0x26, 0x5, 0xdd) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004, @fd=r4, 0x749f8b12, 0xac6, 0x4, 0x2e, 0x1}, 0x1) r5 = socket$kcm(0x29, 0x7, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) read$FUSE(r0, 0x0, 0x0) 06:45:09 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0xff000000, &(0x7f00000002c0)="f5"}) 06:45:09 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x700000000000000, &(0x7f00000002c0)="f5"}) 06:45:09 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:09 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0xa94f82) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x20010, 0xffffffffffffffff, 0x10000000) pipe(&(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f00000013c0)) accept4(r2, 0x0, &(0x7f0000001980), 0x80000) syz_io_uring_setup(0x245f, &(0x7f0000001ac0)={0x0, 0x55c1, 0x0, 0x2, 0x223, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001b40)=0x0, &(0x7f0000001b80)) syz_io_uring_submit(r3, r1, &(0x7f0000001bc0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa}, 0xfff) r4 = socket(0x26, 0x5, 0xdd) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004, @fd=r4, 0x749f8b12, 0xac6, 0x4, 0x2e, 0x1}, 0x1) r5 = socket$kcm(0x29, 0x7, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) read$FUSE(r0, 0x0, 0x0) 06:45:10 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0xff000000, &(0x7f00000002c0)="f5"}) 06:45:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0xfffffdfd, &(0x7f00000002c0)="f5"}) 06:45:10 executing program 2: syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) socket$inet_udp(0x2, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x3f7, 0x4, 0x70bd2c, 0x25dfdbfe, {0x0, 0x7, '', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r3, 0x541b, 0x0) r4 = pidfd_getfd(r3, r1, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedbdf250900000008003c0009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xa000) 06:45:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x800000000000000, &(0x7f00000002c0)="f5"}) 06:45:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:10 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0xa94f82) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x20010, 0xffffffffffffffff, 0x10000000) pipe(&(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPKT(r2, 0x80045438, &(0x7f00000013c0)) accept4(r2, 0x0, &(0x7f0000001980), 0x80000) syz_io_uring_setup(0x245f, &(0x7f0000001ac0)={0x0, 0x55c1, 0x0, 0x2, 0x223, 0x0, r2}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001b40)=0x0, &(0x7f0000001b80)) syz_io_uring_submit(r3, r1, &(0x7f0000001bc0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa}, 0xfff) r4 = socket(0x26, 0x5, 0xdd) syz_io_uring_submit(r3, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004, @fd=r4, 0x749f8b12, 0xac6, 0x4, 0x2e, 0x1}, 0x1) r5 = socket$kcm(0x29, 0x7, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) read$FUSE(r0, 0x0, 0x0) 06:45:10 executing program 5: r0 = socket$inet_udp(0x2, 0x3, 0x0) pidfd_getfd(0xffffffffffffffff, r0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) ioctl$NS_GET_PARENT(r1, 0xb702, 0x0) 06:45:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x100000000000000, &(0x7f00000002c0)="f5"}) 06:45:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0xfdfdffff00000000, &(0x7f00000002c0)="f5"}) 06:45:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:10 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0xa94f82) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x20010, 0xffffffffffffffff, 0x10000000) pipe(&(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f00000013c0)) accept4(r1, 0x0, &(0x7f0000001980), 0x80000) syz_io_uring_setup(0x245f, &(0x7f0000001ac0)={0x0, 0x55c1, 0x0, 0x2, 0x223, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001b40)=0x0, &(0x7f0000001b80)) syz_io_uring_submit(r2, r0, &(0x7f0000001bc0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa}, 0xfff) r3 = socket(0x26, 0x5, 0xdd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004, @fd=r3, 0x749f8b12, 0xac6, 0x4, 0x2e, 0x1}, 0x1) r4 = socket$kcm(0x29, 0x7, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 06:45:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x200000000000000, &(0x7f00000002c0)="f5"}) 06:45:10 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000001440)='/dev/input/mice\x00', 0x8002) socket$inet_udp(0x2, 0x3, 0x0) ioctl$IMGETDEVINFO(r0, 0x80044944, &(0x7f0000000000)={0xfff}) 06:45:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0xff00000000000000, &(0x7f00000002c0)="f5"}) 06:45:10 executing program 5: syz_extract_tcp_res$synack(&(0x7f0000000000), 0x1, 0x0) socket$inet_udp(0x2, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x3f7, 0x4, 0x70bd2c, 0x25dfdbfe, {0x0, 0x7, '', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r3, 0x541b, 0x0) r4 = pidfd_getfd(r3, r1, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x21000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="00082bbd7000fedbdf250900000008003c0009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0xa000) 06:45:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:10 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0xa94f82) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x20010, 0xffffffffffffffff, 0x10000000) pipe(&(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f00000013c0)) accept4(r1, 0x0, &(0x7f0000001980), 0x80000) syz_io_uring_setup(0x245f, &(0x7f0000001ac0)={0x0, 0x55c1, 0x0, 0x2, 0x223, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001b40)=0x0, &(0x7f0000001b80)) syz_io_uring_submit(r2, r0, &(0x7f0000001bc0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa}, 0xfff) r3 = socket(0x26, 0x5, 0xdd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004, @fd=r3, 0x749f8b12, 0xac6, 0x4, 0x2e, 0x1}, 0x1) socket$kcm(0x29, 0x7, 0x0) 06:45:10 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010425bd7000ffdbdf258f00000008003a007c7f0000080032000000000108000b0001a0fbff0400290001000000050030000000000005e66c4595953c2f002abf1ac8cade146b3e000180514e"], 0x50}}, 0x40) r2 = syz_genetlink_get_family_id$wireguard(0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x20010, 0xffffffffffffffff, 0x10000000) pipe(&(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPKT(r5, 0x80045438, &(0x7f00000013c0)) accept4(r5, 0x0, &(0x7f0000001980), 0x80000) syz_io_uring_setup(0x245f, &(0x7f0000001ac0)={0x0, 0x55c1, 0x0, 0x2, 0x223, 0x0, r5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001b40)=0x0, &(0x7f0000001b80)) syz_io_uring_submit(r6, r4, &(0x7f0000001bc0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa}, 0xfff) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r7, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) syz_io_uring_submit(r6, 0x0, &(0x7f0000000380)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x2, 0x0, @fd=r7, 0x9, 0x0, 0x0, 0x5}, 0xecf) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000e80)={&(0x7f0000000340), 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x458, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x418, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x440, 0x3f4, 0x400, 0x882f, 0x25dfdbff, {0x0, 0x1, 0x1a, [0x400, 0x0, 0x7fff00, 0x5, 0xef, 0x184, 0x0, 0x1800000, 0x3, 0x4, 0x3ff, 0x20, 0x100, 0x9cb1, 0x800, 0x800, 0x6, 0xe50, 0xee4b, 0x2, 0x7, 0x7fff, 0x81, 0x6, 0x8, 0x1, 0xad, 0x9, 0x2, 0x8, 0x11, 0x7ff, 0x7ff, 0x1, 0x8, 0x8, 0x1, 0x3, 0x9, 0xffffffd1, 0x7f, 0x3, 0x7ff, 0x800, 0x7f, 0x100, 0xead, 0x0, 0x8, 0x8000, 0x8, 0x7, 0x6, 0x9, 0xffff8001, 0x80000000, 0x5, 0x77, 0x1, 0x10001, 0x9, 0x3, 0x9, 0x8], [0xfffffff8, 0x1, 0x7, 0x20, 0x4c, 0x1, 0x20, 0x3, 0x9, 0xa7f8, 0x9, 0x3f, 0x2, 0x6, 0x3, 0x4, 0x2, 0x67, 0x9, 0x1, 0xbda5, 0x4, 0x3, 0x9, 0x2, 0xd69, 0x0, 0x10001, 0x1, 0xff, 0x3, 0x99, 0x3, 0x5, 0x400, 0x7, 0x5, 0xffffffff, 0xee2, 0x80000000, 0x7, 0x0, 0x975, 0xbe, 0x41d, 0x3, 0x0, 0x5, 0x7fffffff, 0x3, 0xb688, 0xfffffffe, 0x37, 0x3d27, 0x9, 0x5, 0x7fffffff, 0xa0, 0x1, 0x0, 0xc5, 0x4, 0x1000, 0x3], [0x8, 0x7fff, 0x14000, 0x6, 0x5, 0x846, 0x6, 0x40, 0x9, 0x24000, 0x3, 0x0, 0xffff, 0x800, 0xfffffffb, 0x4, 0x6, 0x28, 0xfffffff9, 0x4, 0x5, 0xae9a, 0x6, 0x8, 0x7, 0x100, 0x4, 0x9, 0x7fffffff, 0x9069, 0x284, 0x7, 0x4, 0x2, 0x105, 0x8, 0x4, 0x5, 0x8, 0xf0, 0xdf0, 0xc8b, 0x560f, 0x2, 0x4, 0x4, 0x3, 0x7, 0x2, 0x6, 0x7, 0x4, 0xffffffff, 0x88, 0x3, 0x3008, 0x8, 0x1f, 0x2d7, 0x8, 0x9, 0x4, 0x8, 0x10000], [0x80, 0x0, 0x2, 0x6, 0x7, 0x8000, 0x81, 0x7, 0x4, 0x0, 0x4, 0x7f, 0x3, 0x401, 0x7b62b273, 0x8, 0x80000, 0xa1c, 0x1ff, 0x0, 0x2, 0x5e6, 0x4, 0x3, 0x1, 0x7, 0x7f, 0x2, 0x9, 0x1ff, 0xffffffff, 0x8, 0xff, 0x10001, 0x6, 0x4, 0x3, 0x1, 0x6, 0x6, 0xffffd8ae, 0x10000, 0x1c0e8e1, 0x8, 0x7, 0x5a6, 0x3, 0x7, 0x67f2, 0x81, 0x2, 0x7, 0xffffffff, 0x4, 0xc173, 0x5, 0x2, 0x1f, 0x5, 0x3f, 0x7, 0x9, 0x6, 0x8ace], 0x1e, ['.#,/%\x00', '!$%-{]{\x00', '/dev/input/mice\x00']}, ["", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0xffff9988, 0x6, 0x7, 0x688, r0, 0x1000, [], 0x0, r0, 0x3, 0x4, 0x5}, 0x40) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r4, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0x6, &(0x7f0000000080)=@raw=[@alu={0x4, 0x0, 0x2, 0xb, 0xb, 0x6, 0xfffffffffffffffc}, @map={0x18, 0x2, 0x1, 0x0, r0}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1ff}], &(0x7f0000000600)='syzkaller\x00', 0x8, 0x35, &(0x7f0000000680)=""/53, 0x1f00, 0x10, [], 0x0, 0x1d, r4, 0x8, &(0x7f00000006c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x7, 0x800, 0x7}, 0x10, 0xffffffffffffffff, r0}, 0x78) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000000)={0x4, 'syz0\x00'}) 06:45:10 executing program 2: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r5 = accept4(r4, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r1, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x200, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) socket$inet_udp(0x2, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) 06:45:10 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0xa94f82) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x20010, 0xffffffffffffffff, 0x10000000) pipe(&(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f00000013c0)) accept4(r1, 0x0, &(0x7f0000001980), 0x80000) syz_io_uring_setup(0x245f, &(0x7f0000001ac0)={0x0, 0x55c1, 0x0, 0x2, 0x223, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001b40)=0x0, &(0x7f0000001b80)) syz_io_uring_submit(r2, r0, &(0x7f0000001bc0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa}, 0xfff) r3 = socket(0x26, 0x5, 0xdd) syz_io_uring_submit(r2, 0x0, &(0x7f0000000040)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x2004, @fd=r3, 0x749f8b12, 0xac6, 0x4, 0x2e, 0x1}, 0x1) 06:45:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x400000000000000, &(0x7f00000002c0)="f5"}) 06:45:10 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) socketpair(0x22, 0x1, 0xfff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x440, 0x3f4, 0x400, 0x882f, 0x25dfdbff, {0x0, 0x1, 0x1a, [0x400, 0x0, 0x7fff00, 0x5, 0xef, 0x184, 0x0, 0x1800000, 0x3, 0x4, 0x3ff, 0x20, 0x100, 0x9cb1, 0x800, 0x800, 0x6, 0xe50, 0xee4b, 0x2, 0x7, 0x7fff, 0x81, 0x6, 0x8, 0x1, 0xad, 0x9, 0x2, 0x8, 0x11, 0x7ff, 0x7ff, 0x1, 0x8, 0x8, 0x1, 0x3, 0x9, 0xffffffd1, 0x7f, 0x3, 0x7ff, 0x800, 0x7f, 0x100, 0xead, 0x0, 0x8, 0x8000, 0x8, 0x7, 0x6, 0x9, 0xffff8001, 0x80000000, 0x5, 0x77, 0x1, 0x10001, 0x9, 0x3, 0x9, 0x8], [0xfffffff8, 0x1, 0x7, 0x20, 0x4c, 0x1, 0x20, 0x3, 0x9, 0xa7f8, 0x9, 0x3f, 0x2, 0x6, 0x3, 0x4, 0x2, 0x67, 0x9, 0x1, 0xbda5, 0x4, 0x3, 0x9, 0x2, 0xd69, 0x0, 0x10001, 0x1, 0xff, 0x3, 0x99, 0x3, 0x5, 0x400, 0x7, 0x5, 0xffffffff, 0xee2, 0x80000000, 0x7, 0x0, 0x975, 0xbe, 0x41d, 0x3, 0x0, 0x5, 0x7fffffff, 0x3, 0xb688, 0xfffffffe, 0x37, 0x3d27, 0x9, 0x5, 0x7fffffff, 0xa0, 0x1, 0x0, 0xc5, 0x4, 0x1000, 0x3], [0x8, 0x7fff, 0x14000, 0x6, 0x5, 0x846, 0x6, 0x40, 0x9, 0x24000, 0x3, 0x0, 0xffff, 0x800, 0xfffffffb, 0x4, 0x6, 0x28, 0xfffffff9, 0x4, 0x5, 0xae9a, 0x6, 0x8, 0x7, 0x100, 0x4, 0x9, 0x7fffffff, 0x9069, 0x284, 0x7, 0x4, 0x2, 0x105, 0x8, 0x4, 0x5, 0x8, 0xf0, 0xdf0, 0xc8b, 0x560f, 0x2, 0x4, 0x4, 0x3, 0x7, 0x2, 0x6, 0x7, 0x4, 0xffffffff, 0x88, 0x3, 0x3008, 0x8, 0x1f, 0x2d7, 0x8, 0x9, 0x4, 0x8, 0x10000], [0x80, 0x0, 0x2, 0x6, 0x7, 0x8000, 0x81, 0x7, 0x4, 0x0, 0x4, 0x7f, 0x3, 0x401, 0x7b62b273, 0x8, 0x80000, 0xa1c, 0x1ff, 0x0, 0x2, 0x5e6, 0x4, 0x3, 0x1, 0x7, 0x7f, 0x2, 0x9, 0x1ff, 0xffffffff, 0x8, 0xff, 0x10001, 0x6, 0x4, 0x3, 0x1, 0x6, 0x6, 0xffffd8ae, 0x10000, 0x1c0e8e1, 0x8, 0x7, 0x5a6, 0x3, 0x7, 0x67f2, 0x81, 0x2, 0x7, 0xffffffff, 0x4, 0xc173, 0x5, 0x2, 0x1f, 0x5, 0x3f, 0x7, 0x9, 0x6, 0x8ace], 0x1e, ['.#,/%\x00', '!$%-{]{\x00', '/dev/input/mice\x00']}, ["", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0xffff9988, 0x6, 0x7, 0x688, r0, 0x1000, [], 0x0, r0, 0x3, 0x4, 0x5}, 0x40) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r4, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0x6, &(0x7f0000000080)=@raw=[@alu={0x4, 0x0, 0x2, 0xb, 0xb, 0x6, 0xfffffffffffffffc}, @map={0x18, 0x2, 0x1, 0x0, r0}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1ff}], &(0x7f0000000600)='syzkaller\x00', 0x8, 0x35, &(0x7f0000000680)=""/53, 0x1f00, 0x10, [], 0x0, 0x1d, r4, 0x8, &(0x7f00000006c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x7, 0x800, 0x7}, 0x10, 0xffffffffffffffff, r0}, 0x78) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000000)={0x4, 'syz0\x00'}) 06:45:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c6300003c5aea13df5a3fcb5736902dccf8a2bf2960dfb81e31f8a2de9e57dca82622f751c6b358654ae101d8e60476255d36f6e052c34450ee54eee250"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:10 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0xa94f82) r0 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x20010, 0xffffffffffffffff, 0x10000000) pipe(&(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f00000013c0)) accept4(r1, 0x0, &(0x7f0000001980), 0x80000) syz_io_uring_setup(0x245f, &(0x7f0000001ac0)={0x0, 0x55c1, 0x0, 0x2, 0x223, 0x0, r1}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001b40)=0x0, &(0x7f0000001b80)) syz_io_uring_submit(r2, r0, &(0x7f0000001bc0)=@IORING_OP_FSYNC={0x3, 0x5, 0x0, @fd_index=0xa}, 0xfff) socket(0x26, 0x5, 0xdd) 06:45:10 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) 06:45:10 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:10 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x500000000000000, &(0x7f00000002c0)="f5"}) 06:45:11 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) socketpair(0x22, 0x1, 0xfff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r2, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x440, 0x3f4, 0x400, 0x882f, 0x25dfdbff, {0x0, 0x1, 0x1a, [0x400, 0x0, 0x7fff00, 0x5, 0xef, 0x184, 0x0, 0x1800000, 0x3, 0x4, 0x3ff, 0x20, 0x100, 0x9cb1, 0x800, 0x800, 0x6, 0xe50, 0xee4b, 0x2, 0x7, 0x7fff, 0x81, 0x6, 0x8, 0x1, 0xad, 0x9, 0x2, 0x8, 0x11, 0x7ff, 0x7ff, 0x1, 0x8, 0x8, 0x1, 0x3, 0x9, 0xffffffd1, 0x7f, 0x3, 0x7ff, 0x800, 0x7f, 0x100, 0xead, 0x0, 0x8, 0x8000, 0x8, 0x7, 0x6, 0x9, 0xffff8001, 0x80000000, 0x5, 0x77, 0x1, 0x10001, 0x9, 0x3, 0x9, 0x8], [0xfffffff8, 0x1, 0x7, 0x20, 0x4c, 0x1, 0x20, 0x3, 0x9, 0xa7f8, 0x9, 0x3f, 0x2, 0x6, 0x3, 0x4, 0x2, 0x67, 0x9, 0x1, 0xbda5, 0x4, 0x3, 0x9, 0x2, 0xd69, 0x0, 0x10001, 0x1, 0xff, 0x3, 0x99, 0x3, 0x5, 0x400, 0x7, 0x5, 0xffffffff, 0xee2, 0x80000000, 0x7, 0x0, 0x975, 0xbe, 0x41d, 0x3, 0x0, 0x5, 0x7fffffff, 0x3, 0xb688, 0xfffffffe, 0x37, 0x3d27, 0x9, 0x5, 0x7fffffff, 0xa0, 0x1, 0x0, 0xc5, 0x4, 0x1000, 0x3], [0x8, 0x7fff, 0x14000, 0x6, 0x5, 0x846, 0x6, 0x40, 0x9, 0x24000, 0x3, 0x0, 0xffff, 0x800, 0xfffffffb, 0x4, 0x6, 0x28, 0xfffffff9, 0x4, 0x5, 0xae9a, 0x6, 0x8, 0x7, 0x100, 0x4, 0x9, 0x7fffffff, 0x9069, 0x284, 0x7, 0x4, 0x2, 0x105, 0x8, 0x4, 0x5, 0x8, 0xf0, 0xdf0, 0xc8b, 0x560f, 0x2, 0x4, 0x4, 0x3, 0x7, 0x2, 0x6, 0x7, 0x4, 0xffffffff, 0x88, 0x3, 0x3008, 0x8, 0x1f, 0x2d7, 0x8, 0x9, 0x4, 0x8, 0x10000], [0x80, 0x0, 0x2, 0x6, 0x7, 0x8000, 0x81, 0x7, 0x4, 0x0, 0x4, 0x7f, 0x3, 0x401, 0x7b62b273, 0x8, 0x80000, 0xa1c, 0x1ff, 0x0, 0x2, 0x5e6, 0x4, 0x3, 0x1, 0x7, 0x7f, 0x2, 0x9, 0x1ff, 0xffffffff, 0x8, 0xff, 0x10001, 0x6, 0x4, 0x3, 0x1, 0x6, 0x6, 0xffffd8ae, 0x10000, 0x1c0e8e1, 0x8, 0x7, 0x5a6, 0x3, 0x7, 0x67f2, 0x81, 0x2, 0x7, 0xffffffff, 0x4, 0xc173, 0x5, 0x2, 0x1f, 0x5, 0x3f, 0x7, 0x9, 0x6, 0x8ace], 0x1e, ['.#,/%\x00', '!$%-{]{\x00', '/dev/input/mice\x00']}, ["", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0xffff9988, 0x6, 0x7, 0x688, r0, 0x1000, [], 0x0, r0, 0x3, 0x4, 0x5}, 0x40) r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r4, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0x6, &(0x7f0000000080)=@raw=[@alu={0x4, 0x0, 0x2, 0xb, 0xb, 0x6, 0xfffffffffffffffc}, @map={0x18, 0x2, 0x1, 0x0, r0}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x1ff}], &(0x7f0000000600)='syzkaller\x00', 0x8, 0x35, &(0x7f0000000680)=""/53, 0x1f00, 0x10, [], 0x0, 0x1d, r4, 0x8, &(0x7f00000006c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x7, 0x800, 0x7}, 0x10, 0xffffffffffffffff, r0}, 0x78) ioctl$IMSETDEVNAME(r1, 0x80184947, &(0x7f0000000000)={0x4, 'syz0\x00'}) 06:45:11 executing program 2: r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000480)) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f00000004c0), &(0x7f0000000500)=0x4) socket$inet_udp(0x2, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r2, 0x541b, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0x1402, 0x200, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r3}]}, 0x50}, 0x1, 0x0, 0x0, 0x1000}, 0x40010) 06:45:11 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0xa94f82) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x20010, 0xffffffffffffffff, 0x10000000) pipe(&(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000013c0)) accept4(r0, 0x0, &(0x7f0000001980), 0x80000) syz_io_uring_setup(0x245f, &(0x7f0000001ac0)={0x0, 0x55c1, 0x0, 0x2, 0x223, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000001b40), &(0x7f0000001b80)) socket(0x26, 0x5, 0xdd) 06:45:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:11 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) socketpair(0x22, 0x1, 0xfff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x440, 0x3f4, 0x400, 0x882f, 0x25dfdbff, {0x0, 0x1, 0x1a, [0x400, 0x0, 0x7fff00, 0x5, 0xef, 0x184, 0x0, 0x1800000, 0x3, 0x4, 0x3ff, 0x20, 0x100, 0x9cb1, 0x800, 0x800, 0x6, 0xe50, 0xee4b, 0x2, 0x7, 0x7fff, 0x81, 0x6, 0x8, 0x1, 0xad, 0x9, 0x2, 0x8, 0x11, 0x7ff, 0x7ff, 0x1, 0x8, 0x8, 0x1, 0x3, 0x9, 0xffffffd1, 0x7f, 0x3, 0x7ff, 0x800, 0x7f, 0x100, 0xead, 0x0, 0x8, 0x8000, 0x8, 0x7, 0x6, 0x9, 0xffff8001, 0x80000000, 0x5, 0x77, 0x1, 0x10001, 0x9, 0x3, 0x9, 0x8], [0xfffffff8, 0x1, 0x7, 0x20, 0x4c, 0x1, 0x20, 0x3, 0x9, 0xa7f8, 0x9, 0x3f, 0x2, 0x6, 0x3, 0x4, 0x2, 0x67, 0x9, 0x1, 0xbda5, 0x4, 0x3, 0x9, 0x2, 0xd69, 0x0, 0x10001, 0x1, 0xff, 0x3, 0x99, 0x3, 0x5, 0x400, 0x7, 0x5, 0xffffffff, 0xee2, 0x80000000, 0x7, 0x0, 0x975, 0xbe, 0x41d, 0x3, 0x0, 0x5, 0x7fffffff, 0x3, 0xb688, 0xfffffffe, 0x37, 0x3d27, 0x9, 0x5, 0x7fffffff, 0xa0, 0x1, 0x0, 0xc5, 0x4, 0x1000, 0x3], [0x8, 0x7fff, 0x14000, 0x6, 0x5, 0x846, 0x6, 0x40, 0x9, 0x24000, 0x3, 0x0, 0xffff, 0x800, 0xfffffffb, 0x4, 0x6, 0x28, 0xfffffff9, 0x4, 0x5, 0xae9a, 0x6, 0x8, 0x7, 0x100, 0x4, 0x9, 0x7fffffff, 0x9069, 0x284, 0x7, 0x4, 0x2, 0x105, 0x8, 0x4, 0x5, 0x8, 0xf0, 0xdf0, 0xc8b, 0x560f, 0x2, 0x4, 0x4, 0x3, 0x7, 0x2, 0x6, 0x7, 0x4, 0xffffffff, 0x88, 0x3, 0x3008, 0x8, 0x1f, 0x2d7, 0x8, 0x9, 0x4, 0x8, 0x10000], [0x80, 0x0, 0x2, 0x6, 0x7, 0x8000, 0x81, 0x7, 0x4, 0x0, 0x4, 0x7f, 0x3, 0x401, 0x7b62b273, 0x8, 0x80000, 0xa1c, 0x1ff, 0x0, 0x2, 0x5e6, 0x4, 0x3, 0x1, 0x7, 0x7f, 0x2, 0x9, 0x1ff, 0xffffffff, 0x8, 0xff, 0x10001, 0x6, 0x4, 0x3, 0x1, 0x6, 0x6, 0xffffd8ae, 0x10000, 0x1c0e8e1, 0x8, 0x7, 0x5a6, 0x3, 0x7, 0x67f2, 0x81, 0x2, 0x7, 0xffffffff, 0x4, 0xc173, 0x5, 0x2, 0x1f, 0x5, 0x3f, 0x7, 0x9, 0x6, 0x8ace], 0x1e, ['.#,/%\x00', '!$%-{]{\x00', '/dev/input/mice\x00']}, ["", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0xffff9988, 0x6, 0x7, 0x688, r0, 0x1000, [], 0x0, r0, 0x3, 0x4, 0x5}, 0x40) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r3, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0x6, &(0x7f0000000080)=@raw=[@alu={0x4, 0x0, 0x2, 0xb, 0xb, 0x6, 0xfffffffffffffffc}, @map={0x18, 0x2, 0x1, 0x0, r0}, @exit, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x1ff}], &(0x7f0000000600)='syzkaller\x00', 0x8, 0x35, &(0x7f0000000680)=""/53, 0x1f00, 0x10, [], 0x0, 0x1d, r3, 0x8, &(0x7f00000006c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000700)={0x0, 0x7, 0x800, 0x7}, 0x10, 0xffffffffffffffff, r0}, 0x78) 06:45:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x600000000000000, &(0x7f00000002c0)="f5"}) 06:45:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:11 executing program 3: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r5 = accept4(r4, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r1, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xfff}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040010}, 0x880) r6 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x700000000000000, &(0x7f00000002c0)="f5"}) 06:45:11 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) socketpair(0x22, 0x1, 0xfff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x440, 0x3f4, 0x400, 0x882f, 0x25dfdbff, {0x0, 0x1, 0x1a, [0x400, 0x0, 0x7fff00, 0x5, 0xef, 0x184, 0x0, 0x1800000, 0x3, 0x4, 0x3ff, 0x20, 0x100, 0x9cb1, 0x800, 0x800, 0x6, 0xe50, 0xee4b, 0x2, 0x7, 0x7fff, 0x81, 0x6, 0x8, 0x1, 0xad, 0x9, 0x2, 0x8, 0x11, 0x7ff, 0x7ff, 0x1, 0x8, 0x8, 0x1, 0x3, 0x9, 0xffffffd1, 0x7f, 0x3, 0x7ff, 0x800, 0x7f, 0x100, 0xead, 0x0, 0x8, 0x8000, 0x8, 0x7, 0x6, 0x9, 0xffff8001, 0x80000000, 0x5, 0x77, 0x1, 0x10001, 0x9, 0x3, 0x9, 0x8], [0xfffffff8, 0x1, 0x7, 0x20, 0x4c, 0x1, 0x20, 0x3, 0x9, 0xa7f8, 0x9, 0x3f, 0x2, 0x6, 0x3, 0x4, 0x2, 0x67, 0x9, 0x1, 0xbda5, 0x4, 0x3, 0x9, 0x2, 0xd69, 0x0, 0x10001, 0x1, 0xff, 0x3, 0x99, 0x3, 0x5, 0x400, 0x7, 0x5, 0xffffffff, 0xee2, 0x80000000, 0x7, 0x0, 0x975, 0xbe, 0x41d, 0x3, 0x0, 0x5, 0x7fffffff, 0x3, 0xb688, 0xfffffffe, 0x37, 0x3d27, 0x9, 0x5, 0x7fffffff, 0xa0, 0x1, 0x0, 0xc5, 0x4, 0x1000, 0x3], [0x8, 0x7fff, 0x14000, 0x6, 0x5, 0x846, 0x6, 0x40, 0x9, 0x24000, 0x3, 0x0, 0xffff, 0x800, 0xfffffffb, 0x4, 0x6, 0x28, 0xfffffff9, 0x4, 0x5, 0xae9a, 0x6, 0x8, 0x7, 0x100, 0x4, 0x9, 0x7fffffff, 0x9069, 0x284, 0x7, 0x4, 0x2, 0x105, 0x8, 0x4, 0x5, 0x8, 0xf0, 0xdf0, 0xc8b, 0x560f, 0x2, 0x4, 0x4, 0x3, 0x7, 0x2, 0x6, 0x7, 0x4, 0xffffffff, 0x88, 0x3, 0x3008, 0x8, 0x1f, 0x2d7, 0x8, 0x9, 0x4, 0x8, 0x10000], [0x80, 0x0, 0x2, 0x6, 0x7, 0x8000, 0x81, 0x7, 0x4, 0x0, 0x4, 0x7f, 0x3, 0x401, 0x7b62b273, 0x8, 0x80000, 0xa1c, 0x1ff, 0x0, 0x2, 0x5e6, 0x4, 0x3, 0x1, 0x7, 0x7f, 0x2, 0x9, 0x1ff, 0xffffffff, 0x8, 0xff, 0x10001, 0x6, 0x4, 0x3, 0x1, 0x6, 0x6, 0xffffd8ae, 0x10000, 0x1c0e8e1, 0x8, 0x7, 0x5a6, 0x3, 0x7, 0x67f2, 0x81, 0x2, 0x7, 0xffffffff, 0x4, 0xc173, 0x5, 0x2, 0x1f, 0x5, 0x3f, 0x7, 0x9, 0x6, 0x8ace], 0x1e, ['.#,/%\x00', '!$%-{]{\x00', '/dev/input/mice\x00']}, ["", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0xffff9988, 0x6, 0x7, 0x688, r0, 0x1000, [], 0x0, r0, 0x3, 0x4, 0x5}, 0x40) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r2, 0x541b, 0x0) 06:45:11 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0xa94f82) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x20010, 0xffffffffffffffff, 0x10000000) pipe(&(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000013c0)) accept4(r0, 0x0, &(0x7f0000001980), 0x80000) socket(0x26, 0x5, 0xdd) 06:45:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:11 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000000)) 06:45:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x800000000000000, &(0x7f00000002c0)="f5"}) 06:45:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0x1d6, 0x0, &(0x7f0000000500)="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"}) openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x0) 06:45:11 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) socketpair(0x22, 0x1, 0xfff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x440, 0x3f4, 0x400, 0x882f, 0x25dfdbff, {0x0, 0x1, 0x1a, [0x400, 0x0, 0x7fff00, 0x5, 0xef, 0x184, 0x0, 0x1800000, 0x3, 0x4, 0x3ff, 0x20, 0x100, 0x9cb1, 0x800, 0x800, 0x6, 0xe50, 0xee4b, 0x2, 0x7, 0x7fff, 0x81, 0x6, 0x8, 0x1, 0xad, 0x9, 0x2, 0x8, 0x11, 0x7ff, 0x7ff, 0x1, 0x8, 0x8, 0x1, 0x3, 0x9, 0xffffffd1, 0x7f, 0x3, 0x7ff, 0x800, 0x7f, 0x100, 0xead, 0x0, 0x8, 0x8000, 0x8, 0x7, 0x6, 0x9, 0xffff8001, 0x80000000, 0x5, 0x77, 0x1, 0x10001, 0x9, 0x3, 0x9, 0x8], [0xfffffff8, 0x1, 0x7, 0x20, 0x4c, 0x1, 0x20, 0x3, 0x9, 0xa7f8, 0x9, 0x3f, 0x2, 0x6, 0x3, 0x4, 0x2, 0x67, 0x9, 0x1, 0xbda5, 0x4, 0x3, 0x9, 0x2, 0xd69, 0x0, 0x10001, 0x1, 0xff, 0x3, 0x99, 0x3, 0x5, 0x400, 0x7, 0x5, 0xffffffff, 0xee2, 0x80000000, 0x7, 0x0, 0x975, 0xbe, 0x41d, 0x3, 0x0, 0x5, 0x7fffffff, 0x3, 0xb688, 0xfffffffe, 0x37, 0x3d27, 0x9, 0x5, 0x7fffffff, 0xa0, 0x1, 0x0, 0xc5, 0x4, 0x1000, 0x3], [0x8, 0x7fff, 0x14000, 0x6, 0x5, 0x846, 0x6, 0x40, 0x9, 0x24000, 0x3, 0x0, 0xffff, 0x800, 0xfffffffb, 0x4, 0x6, 0x28, 0xfffffff9, 0x4, 0x5, 0xae9a, 0x6, 0x8, 0x7, 0x100, 0x4, 0x9, 0x7fffffff, 0x9069, 0x284, 0x7, 0x4, 0x2, 0x105, 0x8, 0x4, 0x5, 0x8, 0xf0, 0xdf0, 0xc8b, 0x560f, 0x2, 0x4, 0x4, 0x3, 0x7, 0x2, 0x6, 0x7, 0x4, 0xffffffff, 0x88, 0x3, 0x3008, 0x8, 0x1f, 0x2d7, 0x8, 0x9, 0x4, 0x8, 0x10000], [0x80, 0x0, 0x2, 0x6, 0x7, 0x8000, 0x81, 0x7, 0x4, 0x0, 0x4, 0x7f, 0x3, 0x401, 0x7b62b273, 0x8, 0x80000, 0xa1c, 0x1ff, 0x0, 0x2, 0x5e6, 0x4, 0x3, 0x1, 0x7, 0x7f, 0x2, 0x9, 0x1ff, 0xffffffff, 0x8, 0xff, 0x10001, 0x6, 0x4, 0x3, 0x1, 0x6, 0x6, 0xffffd8ae, 0x10000, 0x1c0e8e1, 0x8, 0x7, 0x5a6, 0x3, 0x7, 0x67f2, 0x81, 0x2, 0x7, 0xffffffff, 0x4, 0xc173, 0x5, 0x2, 0x1f, 0x5, 0x3f, 0x7, 0x9, 0x6, 0x8ace], 0x1e, ['.#,/%\x00', '!$%-{]{\x00', '/dev/input/mice\x00']}, ["", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0xffff9988, 0x6, 0x7, 0x688, r0, 0x1000, [], 0x0, r0, 0x3, 0x4, 0x5}, 0x40) openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) 06:45:11 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0xa94f82) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x20010, 0xffffffffffffffff, 0x10000000) pipe(&(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPKT(r0, 0x80045438, &(0x7f00000013c0)) socket(0x26, 0x5, 0xdd) 06:45:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:11 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) socketpair(0x22, 0x1, 0xfff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x440, 0x3f4, 0x400, 0x882f, 0x25dfdbff, {0x0, 0x1, 0x1a, [0x400, 0x0, 0x7fff00, 0x5, 0xef, 0x184, 0x0, 0x1800000, 0x3, 0x4, 0x3ff, 0x20, 0x100, 0x9cb1, 0x800, 0x800, 0x6, 0xe50, 0xee4b, 0x2, 0x7, 0x7fff, 0x81, 0x6, 0x8, 0x1, 0xad, 0x9, 0x2, 0x8, 0x11, 0x7ff, 0x7ff, 0x1, 0x8, 0x8, 0x1, 0x3, 0x9, 0xffffffd1, 0x7f, 0x3, 0x7ff, 0x800, 0x7f, 0x100, 0xead, 0x0, 0x8, 0x8000, 0x8, 0x7, 0x6, 0x9, 0xffff8001, 0x80000000, 0x5, 0x77, 0x1, 0x10001, 0x9, 0x3, 0x9, 0x8], [0xfffffff8, 0x1, 0x7, 0x20, 0x4c, 0x1, 0x20, 0x3, 0x9, 0xa7f8, 0x9, 0x3f, 0x2, 0x6, 0x3, 0x4, 0x2, 0x67, 0x9, 0x1, 0xbda5, 0x4, 0x3, 0x9, 0x2, 0xd69, 0x0, 0x10001, 0x1, 0xff, 0x3, 0x99, 0x3, 0x5, 0x400, 0x7, 0x5, 0xffffffff, 0xee2, 0x80000000, 0x7, 0x0, 0x975, 0xbe, 0x41d, 0x3, 0x0, 0x5, 0x7fffffff, 0x3, 0xb688, 0xfffffffe, 0x37, 0x3d27, 0x9, 0x5, 0x7fffffff, 0xa0, 0x1, 0x0, 0xc5, 0x4, 0x1000, 0x3], [0x8, 0x7fff, 0x14000, 0x6, 0x5, 0x846, 0x6, 0x40, 0x9, 0x24000, 0x3, 0x0, 0xffff, 0x800, 0xfffffffb, 0x4, 0x6, 0x28, 0xfffffff9, 0x4, 0x5, 0xae9a, 0x6, 0x8, 0x7, 0x100, 0x4, 0x9, 0x7fffffff, 0x9069, 0x284, 0x7, 0x4, 0x2, 0x105, 0x8, 0x4, 0x5, 0x8, 0xf0, 0xdf0, 0xc8b, 0x560f, 0x2, 0x4, 0x4, 0x3, 0x7, 0x2, 0x6, 0x7, 0x4, 0xffffffff, 0x88, 0x3, 0x3008, 0x8, 0x1f, 0x2d7, 0x8, 0x9, 0x4, 0x8, 0x10000], [0x80, 0x0, 0x2, 0x6, 0x7, 0x8000, 0x81, 0x7, 0x4, 0x0, 0x4, 0x7f, 0x3, 0x401, 0x7b62b273, 0x8, 0x80000, 0xa1c, 0x1ff, 0x0, 0x2, 0x5e6, 0x4, 0x3, 0x1, 0x7, 0x7f, 0x2, 0x9, 0x1ff, 0xffffffff, 0x8, 0xff, 0x10001, 0x6, 0x4, 0x3, 0x1, 0x6, 0x6, 0xffffd8ae, 0x10000, 0x1c0e8e1, 0x8, 0x7, 0x5a6, 0x3, 0x7, 0x67f2, 0x81, 0x2, 0x7, 0xffffffff, 0x4, 0xc173, 0x5, 0x2, 0x1f, 0x5, 0x3f, 0x7, 0x9, 0x6, 0x8ace], 0x1e, ['.#,/%\x00', '!$%-{]{\x00', '/dev/input/mice\x00']}, ["", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xe, 0xffff9988, 0x6, 0x7, 0x688, r0, 0x1000, [], 0x0, r0, 0x3, 0x4, 0x5}, 0x40) 06:45:11 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0xa94f82) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x20010, 0xffffffffffffffff, 0x10000000) pipe(&(0x7f0000000fc0)) socket(0x26, 0x5, 0xdd) 06:45:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0xfdfdffff00000000, &(0x7f00000002c0)="f5"}) 06:45:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) 06:45:11 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:11 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) socketpair(0x22, 0x1, 0xfff, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f00000005c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100001}, 0xc, &(0x7f0000000580)={&(0x7f0000000140)={0x440, 0x3f4, 0x400, 0x882f, 0x25dfdbff, {0x0, 0x1, 0x1a, [0x400, 0x0, 0x7fff00, 0x5, 0xef, 0x184, 0x0, 0x1800000, 0x3, 0x4, 0x3ff, 0x20, 0x100, 0x9cb1, 0x800, 0x800, 0x6, 0xe50, 0xee4b, 0x2, 0x7, 0x7fff, 0x81, 0x6, 0x8, 0x1, 0xad, 0x9, 0x2, 0x8, 0x11, 0x7ff, 0x7ff, 0x1, 0x8, 0x8, 0x1, 0x3, 0x9, 0xffffffd1, 0x7f, 0x3, 0x7ff, 0x800, 0x7f, 0x100, 0xead, 0x0, 0x8, 0x8000, 0x8, 0x7, 0x6, 0x9, 0xffff8001, 0x80000000, 0x5, 0x77, 0x1, 0x10001, 0x9, 0x3, 0x9, 0x8], [0xfffffff8, 0x1, 0x7, 0x20, 0x4c, 0x1, 0x20, 0x3, 0x9, 0xa7f8, 0x9, 0x3f, 0x2, 0x6, 0x3, 0x4, 0x2, 0x67, 0x9, 0x1, 0xbda5, 0x4, 0x3, 0x9, 0x2, 0xd69, 0x0, 0x10001, 0x1, 0xff, 0x3, 0x99, 0x3, 0x5, 0x400, 0x7, 0x5, 0xffffffff, 0xee2, 0x80000000, 0x7, 0x0, 0x975, 0xbe, 0x41d, 0x3, 0x0, 0x5, 0x7fffffff, 0x3, 0xb688, 0xfffffffe, 0x37, 0x3d27, 0x9, 0x5, 0x7fffffff, 0xa0, 0x1, 0x0, 0xc5, 0x4, 0x1000, 0x3], [0x8, 0x7fff, 0x14000, 0x6, 0x5, 0x846, 0x6, 0x40, 0x9, 0x24000, 0x3, 0x0, 0xffff, 0x800, 0xfffffffb, 0x4, 0x6, 0x28, 0xfffffff9, 0x4, 0x5, 0xae9a, 0x6, 0x8, 0x7, 0x100, 0x4, 0x9, 0x7fffffff, 0x9069, 0x284, 0x7, 0x4, 0x2, 0x105, 0x8, 0x4, 0x5, 0x8, 0xf0, 0xdf0, 0xc8b, 0x560f, 0x2, 0x4, 0x4, 0x3, 0x7, 0x2, 0x6, 0x7, 0x4, 0xffffffff, 0x88, 0x3, 0x3008, 0x8, 0x1f, 0x2d7, 0x8, 0x9, 0x4, 0x8, 0x10000], [0x80, 0x0, 0x2, 0x6, 0x7, 0x8000, 0x81, 0x7, 0x4, 0x0, 0x4, 0x7f, 0x3, 0x401, 0x7b62b273, 0x8, 0x80000, 0xa1c, 0x1ff, 0x0, 0x2, 0x5e6, 0x4, 0x3, 0x1, 0x7, 0x7f, 0x2, 0x9, 0x1ff, 0xffffffff, 0x8, 0xff, 0x10001, 0x6, 0x4, 0x3, 0x1, 0x6, 0x6, 0xffffd8ae, 0x10000, 0x1c0e8e1, 0x8, 0x7, 0x5a6, 0x3, 0x7, 0x67f2, 0x81, 0x2, 0x7, 0xffffffff, 0x4, 0xc173, 0x5, 0x2, 0x1f, 0x5, 0x3f, 0x7, 0x9, 0x6, 0x8ace], 0x1e, ['.#,/%\x00', '!$%-{]{\x00', '/dev/input/mice\x00']}, ["", "", ""]}, 0x440}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) 06:45:11 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) getsockname(r0, &(0x7f0000000000)=@hci, &(0x7f0000000080)=0x80) 06:45:11 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0xff00000000000000, &(0x7f00000002c0)="f5"}) 06:45:11 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0xa94f82) mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xe, 0x20010, 0xffffffffffffffff, 0x10000000) socket(0x26, 0x5, 0xdd) 06:45:11 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000000)=[@enter_looper], 0x37, 0x0, &(0x7f0000000040)="063f4f6518f43fef6a4df9a735101ed64d63741818fdb8b69eef9fddc85d42d478e3d7b653c3180ce64cf5eb3f65124f8408767bcdc779"}) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)=ANY=[@ANYBLOB="3100015e", @ANYRES16=r3, @ANYBLOB="020027bd7000fedbdf250000000008000100", @ANYRES32=r4, @ANYBLOB="380808805400008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c0800030008000000240002004eadbcb8810e5378f83a4a1aa0d6ad175eb0a3acae2c4d9c2b262abdf9ca25bcc40400806c03098064000080060001000a00000014000200fc0100000000000000000000000000000500030002000000060001000a0000001400020000000000000000000000000000000000050003000000000006000100020000000800020000000000050003000200000040000080060001000200000008000200e00000010500030000000000060001000a00000014000200fc0100000000000000000000000000010500030002000000b8000080060001000a0000001400020000000000000000000000ffff0a0101020500030003000000060001000a00000014000200fe8000000000000000000000000000370500030001000000060001000200000008000200ac1414210500030000000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200000000000500030000000000060001000200000008000200e00000020500030003000000ac000080060001000a00000014000200000000000000000000000000000000000500030001000000060001000a00000014000200fe8800000000000000000000000000010500030001000000060001000a00000014000200fc0100000000000000000000000000000500030000000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000200000008000200ac1e01010500030001000000ac000080060001000a00000014000200ff0200000000000000000000000000010500030001000000060001000a00000014000200fe8000000000000000000000000000bb0500030000000000060001000a00000014000200fc0200000000000000000000000000010500030002000000060001000a00000014000200fe8000000000000000000000000000260500030003000000060001000200000008000200ac1414bb050003000000000028000080060001000a00000014000200ff010000000000000000000000000001050003000000000058000080060001000200000008000200e00000020500030003000000060001000200000008000200ac14140e0500030002000000060001000a00000014000200fe80000000000000000000000000000a0500030002000000340000800600010002000000080002000a01010205000300010000000600010002000000080002000000000005000300030000001400040002004e24e00000020000000000000000200004000a004e2400000003fe8800000000000000000000000000010800000024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c0800030002000000bc000980b8000080060001000200000008000200ffffffff0500030003000000060001000a00000014000200200100000000000000000000000000000500030003000000060001000a00000014000200000000000000000000000000000000000500030002000000060001000a00000014000200fe8000000000000000000000000000bb0500030001000000060001000200000008000200ffffffff0500030000000000060001000200000008000200ac1414aa05000300030000001400040002004e20ffffffff000000000000000008000a00010000001400040002004e240a01010000000000000000000600050009000000180000801400040002004e22ffffffff0000000000000000b4020080b00209807c000080060001000200000008000200ac1414330500030000000000060001000200000008000200ac1414aa0500030003000000060001000a00000014000200fe8000000000000000000000000000bb0500030002000000060001000a00000014000200fe880000000000000000000000000001050003000300000070000080060001000a00000014000200ff0200000000000000000000000000010500030000000000060001000200000008000200ac1414bb05000300020000000600010002000000080002000000000005000300010000000600010002000000080002007f000001050003000300000070000080060001000200000008000200640101020500030003000000060001000200000008000200e00000020500030001000000060001000a00000014000200000000000000000000000000000000010500030000000000060001000200000008000200ac1e00010500030002000000a0000080060001000200000008000200e00000020500030002000000060001000a00000014000200fc0200000000000000000000000000000500030001000000060001000a00000014000200ff0200000000000000000000000000010500030003000000060001000a00000014000200000000000000000000000000000000000500030003000000060001000200000008000200ffffffff05000300030000004c000080060001000a00000014000200fc0000000000000000000000000000010500030000000000060001000a00000014000200ff010000000000000000000000000001050003000200000064000080060001000a00000014000200000000000000000000000000000000010500030003000000060001000a00000014000200fe80000000000000000000000000003805000300020000000600010002000000080002000000000005000300000000002c0000800600050006000000200004000a004e2400000dbdfc0000000000000000000000000000002000000024000080200004000a004e210000008100000000000000000000ffff7f00000106000000060006004e240000140002007767300000000000000000000000000014000200776731000000000000000000000000000800050001000000"], 0x88c}}, 0x40001) pipe(&(0x7f0000000fc0)={0xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r3, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r6 = accept4(r5, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r2, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)=[{&(0x7f0000000f40)=""/7, 0x11}, {&(0x7f0000000400)=""/67, 0x43}, {&(0x7f0000000480)=""/2}, {&(0x7f00000004c0)=""/59, 0x3b}], 0x4}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x14, r2, 0x200, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x50, r2, 0x20, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:11 executing program 4: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0xa94f82) socket(0x26, 0x5, 0xdd) 06:45:12 executing program 5: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) read$FUSE(r0, 0x0, 0x0) socketpair(0x22, 0x1, 0xfff, &(0x7f00000000c0)) 06:45:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)=0x1ff) 06:45:12 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) clone3(&(0x7f0000000240)={0x40400400, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x2e}, &(0x7f00000000c0), 0x0, &(0x7f0000000100)=""/254, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff], 0x2}, 0x58) pidfd_getfd(r1, r0, 0x0) 06:45:12 executing program 4: socket(0x26, 0x5, 0xdd) 06:45:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:12 executing program 5: openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x8a02) socketpair(0x22, 0x1, 0xfff, &(0x7f00000000c0)) 06:45:12 executing program 4: socket(0x0, 0x5, 0xdd) 06:45:12 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x30, 0x0, &(0x7f0000000040)=[@decrefs={0x40046307, 0x3}, @enter_looper, @increfs={0x40046304, 0x3}, @request_death={0x400c630e, 0x1}, @acquire={0x40046305, 0x3}, @enter_looper], 0x42, 0x0, &(0x7f0000000080)="89fa3f6b0c01f251b0481e6a2d89194f5c7369dcc838407a108652bc58e9e842f025ae2eb1c40eedd3d65a26b996aeb398693a479ef9954d44859fdd4011bb151888"}) 06:45:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:12 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="e5"}) 06:45:12 executing program 5: socketpair(0x22, 0x1, 0xfff, &(0x7f00000000c0)) 06:45:12 executing program 1: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) 06:45:12 executing program 4: socket(0x0, 0x5, 0xdd) 06:45:12 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:12 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000040)={'tunl0\x00', r2, 0x10, 0x20, 0x3, 0x80000001, {{0x22, 0x4, 0x3, 0x6, 0x88, 0x65, 0x0, 0x1, 0x29, 0x0, @multicast1, @multicast2, {[@lsrr={0x83, 0xf, 0xe5, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @empty]}, @generic={0x88, 0xb, "838c39ec4389aafd60"}, @ssrr={0x89, 0xb, 0xd, [@loopback, @dev={0xac, 0x14, 0x14, 0x2d}]}, @timestamp_addr={0x44, 0x14, 0xaf, 0x1, 0x0, [{@loopback, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x3}]}, @rr={0x7, 0x17, 0x4f, [@multicast2, @multicast2, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102]}, @lsrr={0x83, 0xb, 0x73, [@empty, @remote]}, @timestamp={0x44, 0x18, 0x2a, 0x0, 0x4, [0x7, 0x6, 0x6ce, 0x720c, 0x80]}]}}}}}) 06:45:13 executing program 5: socketpair(0x0, 0x1, 0xfff, &(0x7f00000000c0)) 06:45:13 executing program 4: socket(0x0, 0x5, 0xdd) 06:45:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6c3f000000f2b4f3ef84c655010000000000c8cf39f0e39df4e698de7c6adf12f5909b168d344fcc447bd43172f012fe29b9e39fc64b20000000f55c9ccd9c8fea7d8f5c067d18bbcf536f7a2521f44bb83950a38905534538efc7dbe57b4d507f5761886ebd3a4b4d00"/116], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c63080025f76a6b396c11e0c9523153a67ef517649377a200c00db8d0bfe451b40903c761d291ece8f0a9310838d771f378621c4e70ee8538db4984383397ea542802a32576e1a34358d7cc3a16b989e5fcc309922939f583e51b0fc9bab466432a5f055191d72f2ad4642f84a3c5094a22a2"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:13 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3fb, 0x300, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) 06:45:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:13 executing program 5: socketpair(0x0, 0x1, 0xfff, &(0x7f00000000c0)) [ 1500.322741][ T6765] binder: 6760:6765 unknown command 16236 [ 1500.344833][ T6765] binder: 6760:6765 ioctl c0306201 20000340 returned -22 [ 1500.355065][ T6767] binder: 6763:6767 unknown command 549644 06:45:13 executing program 4: socket(0x26, 0x0, 0xdd) [ 1500.387219][ T6767] binder: 6763:6767 ioctl c0306201 20000340 returned -22 06:45:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="cf42bbd7394099eee445acd31b27f91923fb00"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x0) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000000)) r2 = syz_io_uring_setup(0x63f7, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r3, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) getpeername(r3, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000100)=0x80) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x0, 0x40010, r2, 0x8000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00350114946199bb9266bd31000000"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000200), 0x8) 06:45:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:13 executing program 5: socketpair(0x0, 0x1, 0xfff, &(0x7f00000000c0)) 06:45:13 executing program 4: socket(0x26, 0x0, 0xdd) [ 1500.577992][ T6785] binder: 6782:6785 unknown command -675593521 [ 1500.600813][ T6785] binder: 6782:6785 ioctl c0306201 20000340 returned -22 06:45:13 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gretap0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB='gretap0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="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"]}) [ 1500.638728][ T6787] binder: 6783:6787 unknown command 335623424 [ 1500.645043][ T6787] binder: 6783:6787 ioctl c0306201 20000340 returned -22 06:45:13 executing program 4: socket(0x26, 0x0, 0xdd) 06:45:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@flat=@binder={0x73622a85, 0x1114, 0x2}, @fda={0x66646185, 0x7, 0x1, 0x9}, @flat=@handle={0x73682a85, 0x100b}}, &(0x7f00000000c0)={0x0, 0x18, 0x38}}}], 0x1, 0x0, &(0x7f0000000000)="f5"}) 06:45:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:13 executing program 5: socketpair(0x22, 0x0, 0xfff, &(0x7f00000000c0)) [ 1500.751353][ T6799] binder: 6783:6799 unknown command 335623424 [ 1500.783841][ T6799] binder: 6783:6799 ioctl c0306201 20000340 returned -22 06:45:13 executing program 4: socket(0x26, 0x5, 0x0) 06:45:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) clone3(&(0x7f0000000480)={0x300250000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x41}, &(0x7f0000000180)=""/175, 0xaf, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) r2 = syz_io_uring_setup(0x3917, &(0x7f0000000500)={0x0, 0x929, 0x4, 0x2, 0x338}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000280)) pidfd_getfd(r1, r2, 0x0) pidfd_getfd(r1, r0, 0x0) 06:45:13 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x6, 0x1000, 0x59b9, 0x1008, 0x1, 0x1, [], 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x40) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='syztnl2\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="78000007000000090000003f4d2b00f400650000072f9078640101020a010102441cbac00000000e0000ffff000000080000ffff0000004000e7ff03444c6031ac1414bb00000001e0000001000000010a010100000000037f00000100000080ac141438000000080a010100000000090000000000000009ac1414bb000080ade000000200007fff4424ba53ac1414aa000000086401010000010001ac1414bb00000fffe0000002000000004424c121640101007fffffff00000000000001ff00000000000000037f000001000000ff880d29f9d32895c326a4cd82fb8209594ccf590d634c070b46ffffffff0a0101010001830bd6006207999724bd400000"]}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl2\x00', r0, 0x29, 0x40, 0x5, 0x2, 0x4, @dev={0xfe, 0x80, [], 0x1d}, @mcast1, 0x7, 0x40, 0xfffffffb, 0x401}}) socketpair(0x0, 0x0, 0x0, &(0x7f00000001c0)) syz_genetlink_get_family_id$wireguard(&(0x7f0000000980)='wireguard\x00') socket$inet_udp(0x2, 0x3, 0x0) 06:45:13 executing program 5: socketpair(0x22, 0x0, 0x0, &(0x7f00000000c0)) 06:45:13 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:13 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="39bcb1e1"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:13 executing program 4: socket(0x26, 0x5, 0x0) 06:45:13 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000000)={0x0, 0x1, r1, 0x3}) 06:45:13 executing program 5: socketpair(0x22, 0x0, 0x0, &(0x7f00000000c0)) [ 1501.063334][ T6833] binder: 6828:6833 unknown command -508445639 06:45:14 executing program 4: socket(0x26, 0x5, 0x0) 06:45:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1501.111025][ T6833] binder: 6828:6833 ioctl c0306201 20000340 returned -22 06:45:14 executing program 1: socketpair(0x3c, 0x3, 0x100, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000040)=@xdp, 0x80, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/93, 0x5d}, {&(0x7f0000000180)=""/126, 0x7e}], 0x2, &(0x7f0000000380)=""/175, 0xaf}, 0x2001) r1 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:14 executing program 5: socketpair(0x22, 0x0, 0x0, &(0x7f00000000c0)) 06:45:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) clone3(&(0x7f0000000480)={0x300250000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x41}, &(0x7f0000000180)=""/175, 0xaf, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) r2 = syz_io_uring_setup(0x3917, &(0x7f0000000500)={0x0, 0x929, 0x4, 0x2, 0x338}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000280)) pidfd_getfd(r1, r2, 0x0) pidfd_getfd(r1, r0, 0x0) 06:45:14 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) 06:45:14 executing program 3: r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd7000ffdbdf250f00000008003a002a0e0000080032000000000108000b00018000000500290001000000050030000000000005002a00000000000a0009000180c2001c3c3b7a9fff9834d49b0002000008003a1004000000"], 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) socketpair(0x29, 0x80000, 0xff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x24, r6, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0xa87f}]}, 0x24}, 0x1, 0x0, 0x0, 0x2040000}, 0x4000080) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000001500)={0x88c, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r3, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r8 = accept4(r7, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r2, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, r2, 0x300, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x8000) r9 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000180)=[@reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x2, 0x2, 0x23}, @ptr={0x70742a85, 0x1, &(0x7f0000000000), 0x0, 0x1, 0x3d}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/27, 0x1b, 0x1, 0x35}}, &(0x7f00000000c0)={0x0, 0x20, 0x48}}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:14 executing program 5: socketpair(0x22, 0x0, 0xfff, 0x0) 06:45:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) clone3(&(0x7f0000000480)={0x300250000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x41}, &(0x7f0000000180)=""/175, 0xaf, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) r2 = syz_io_uring_setup(0x3917, &(0x7f0000000500)={0x0, 0x929, 0x4, 0x2, 0x338}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000280)) pidfd_getfd(r1, r2, 0x0) pidfd_getfd(r1, r0, 0x0) 06:45:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0xa70b7f4eaedc9f45, 0x0, 0x9, 0x4, 0x1, @private2={0xfc, 0x2, [], 0x1}, @ipv4={[], [], @remote}, 0x8, 0x7800, 0xe8, 0x3f}}) accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) 06:45:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:14 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x2) sendmsg$AUDIT_USER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x74, 0x3ed, 0x300, 0x70bd2b, 0x25dfdbfe, "151fe8612a5a033405711c51c2097cf2b0eee64b0dee3040e508c5c51955309c86837168f8e39591aa4193835914f43f147f5e97901d51c5fc8df1f9fc7b41085f2350ebaba88bad31244f00e029c17d7e074e606e915dbca8c44ef6dd1da55d6f", ["", "", "", "", "", ""]}, 0x74}, 0x1, 0x0, 0x0, 0x44880}, 0x8000) socket$inet_udp(0x2, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) 06:45:14 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e631c400200000000ae000000000000"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:14 executing program 5: socketpair(0x22, 0x0, 0xfff, 0x0) 06:45:14 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) clone3(&(0x7f0000000480)={0x300250000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x41}, &(0x7f0000000180)=""/175, 0xaf, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) r2 = syz_io_uring_setup(0x3917, &(0x7f0000000500)={0x0, 0x929, 0x4, 0x2, 0x338}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000280)) pidfd_getfd(r1, r2, 0x0) pidfd_getfd(r1, r0, 0x0) 06:45:14 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1501.942609][ T6928] binder: 6914:6928 unknown command 1075602190 06:45:14 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000080)=""/165, 0xa5}, {&(0x7f0000000180)=""/158, 0x9e}, {&(0x7f0000000380)=""/87, 0x57}, {&(0x7f0000000400)=""/133, 0x85}, {&(0x7f00000004c0)=""/99, 0x63}], 0x5, &(0x7f00000005c0)=""/184, 0xb8}, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000740)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x54, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x6}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4890}, 0x50) [ 1501.996030][ T6928] binder: 6914:6928 ioctl c0306201 20000340 returned -22 06:45:14 executing program 5: socketpair(0x22, 0x0, 0xfff, 0x0) 06:45:15 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x0) sendmsg$AUDIT_SET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x3e9, 0x100, 0x70bd2d, 0x25dfdbff, {0xa, 0x1, 0x2, 0x0, 0x80000001, 0x9, 0x3, 0x8000, 0x0, 0x7ff}, ["", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) 06:45:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) clone3(&(0x7f0000000480)={0x300250000, &(0x7f0000000000)=0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x41}, &(0x7f0000000180)=""/175, 0xaf, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) r2 = syz_io_uring_setup(0x3917, &(0x7f0000000500)={0x0, 0x929, 0x4, 0x2, 0x338}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000280)) pidfd_getfd(r1, r2, 0x0) 06:45:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) socketpair(0x9, 0xa, 0x800, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000700)='batadv\x00') sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x2000108}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x5c, r2, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x86a5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xcc}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x40}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xb80}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000014}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) 06:45:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) ioctl$TIOCL_PASTESEL(r1, 0x541c, &(0x7f00000006c0)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) r3 = syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x3) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/90, 0x5a, 0x1, 0x7}, @ptr={0x70742a85, 0x1, &(0x7f0000000080)=""/181, 0xb5, 0x1, 0x12}, @fda={0x66646185, 0x7, 0x2, 0x3c}}, &(0x7f0000000200)={0x0, 0x28, 0x50}}}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000280)={0x0, 0x18, 0x30}}, 0x1000}, @exit_looper, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x0, 0x1, 0x2b}, @fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000300)={0x0, 0x20, 0x38}}}, @increfs_done], 0xe6, 0x0, &(0x7f0000000580)="41ac71493225397bae760704fdbc3584c55151bceff3c68667af8b08732f4107eee3cbe974ae111af0c7ff54599728df3c1358b29c8fee8177e2399ea01d9d12bc2908c2d2e6053c10eb5e4609f107c8f68789c6bbdd4127e4693e7e239747eda2ee23e32c248d2f0af6135fe1feb73c356647341b1e92910ca88136fc3abd03559ab4a4869072cb51e9c3830a2c328e118c1c68852937ce58cb57fcb5968e507d7b16321fa2b3562360ed77a6f8f898d5ed533cb55bd244fc467f470df4ec93bea13612b22e28119c20889efd480eac07915f46d9a51f00"/230}) sendmsg$AUDIT_LIST_RULES(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x80020000}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x10, 0x3f5, 0x20, 0x70bd2d, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:15 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0xa70b7f4eaedc9f45, 0x0, 0x9, 0x4, 0x1, @private2={0xfc, 0x2, [], 0x1}, @ipv4={[], [], @remote}, 0x8, 0x7800, 0xe8, 0x3f}}) accept4(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x800) 06:45:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) clone3(&(0x7f0000000480)={0x300250000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x41}, &(0x7f0000000180)=""/175, 0xaf, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) syz_io_uring_setup(0x3917, &(0x7f0000000500)={0x0, 0x929, 0x4, 0x2, 0x338}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000280)) 06:45:15 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1db4135f62bbdd153e766de43fafb744a2c2562a1b1d37ad9a99e0a942cfdfedcc694e0003b4a830b6894b97fa94a833289ff4f271c45a0c85d7e125dcb2d8acac92fc9eef100cb40f1eb44dd0e42a6481df3904b01e8fef0c20c92712dff6adf84450b44cf9a391b0747846f1ff7c14ce901029122a313cab7d95c18f9e5f866363df580068b2368cfeec"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/input/mice\x00', 0x400) ioctl$FIONREAD(r1, 0x541b, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f0000000000)={0x90, 0x0, r2, {0x3, 0x1, 0x400, 0x1, 0x22000, 0xfffffffd, {0x0, 0x81, 0xfffffffffffffffd, 0x8, 0x0, 0x9, 0x10001, 0x1f, 0xffff, 0xc000, 0x1, 0x0, 0x0, 0x4, 0x4}}}, 0x90) [ 1502.466965][ T6965] binder: 6963:6965 unknown command 1986356271 [ 1502.500659][ T6965] binder: 6963:6965 ioctl c0306201 20000340 returned -22 06:45:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:15 executing program 5: socket(0x26, 0x5, 0x0) 06:45:15 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xa, 0x3, &(0x7f0000000380)=@framed, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x78) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r4, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r7 = accept4(r6, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r2, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, r2, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x20}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x10}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x8004) [ 1502.587546][ T6974] binder: 6972:6974 unknown command 1595126813 [ 1502.606574][ T6974] binder: 6972:6974 ioctl c0306201 20000340 returned -22 [ 1502.626798][ T6974] binder: 6972:6974 unknown command 1595126813 06:45:15 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) clone3(&(0x7f0000000480)={0x300250000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x41}, &(0x7f0000000180)=""/175, 0xaf, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) [ 1502.673107][ T6974] binder: 6972:6974 ioctl c0306201 20000340 returned -22 06:45:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:15 executing program 5: socket(0x26, 0x5, 0x0) 06:45:15 executing program 4: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) clone3(&(0x7f0000000480)={0x300250000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x41}, &(0x7f0000000180)=""/175, 0xaf, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 06:45:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:15 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x202, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x0) 06:45:15 executing program 2: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x50}}, 0x40) r2 = syz_genetlink_get_family_id$wireguard(0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000e80)={&(0x7f0000000340), 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x458, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x418, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000002340)={0x1000, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x42c, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0)='batadv\x00') sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x38, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x9}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7}, @BATADV_ATTR_BONDING_ENABLED={0x5}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=r3, @ANYBLOB="000025bd7000fedbdf25000000000800050001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r8 = accept4(r5, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, 0x0, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c200000", @ANYRES16, @ANYBLOB="040027bd7000ffdbdf250900000008002b0004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x20000000) 06:45:15 executing program 5: socket(0x26, 0x5, 0x0) 06:45:15 executing program 4: clone3(&(0x7f0000000480)={0x300250000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x41}, &(0x7f0000000180)=""/175, 0xaf, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 06:45:15 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1503.007292][ T7008] binder: 7004:7008 unknown command 0 [ 1503.027865][ T7008] binder: 7004:7008 ioctl c0306201 20000340 returned -22 06:45:15 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) ioctl$TIOCL_SCROLLCONSOLE(0xffffffffffffffff, 0x541c, &(0x7f0000000080)={0xd, 0x8}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040), 0xd688) r0 = syz_io_uring_setup(0x63f7, &(0x7f0000000000), &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) syz_io_uring_setup(0x55f2, &(0x7f0000000180)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000240)) io_uring_setup(0x40a0, &(0x7f0000000180)={0x0, 0x1ce9, 0x2, 0x3, 0xa3, 0x0, r0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) bind$isdn_base(0xffffffffffffffff, &(0x7f00000000c0)={0x22, 0x1, 0x7, 0x6, 0xff}, 0x6) 06:45:16 executing program 5: socket(0x0, 0x5, 0x0) [ 1503.083084][ T7008] binder: 7004:7008 unknown command 0 [ 1503.108228][ T7008] binder: 7004:7008 ioctl c0306201 20000340 returned -22 06:45:16 executing program 4: clone3(0x0, 0x0) 06:45:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:16 executing program 2: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x5, &(0x7f0000000000)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x400}, @ldst={0x2, 0x1, 0x2, 0x2, 0x8, 0xfffffffffffffff4, 0x10}, @alu={0x7, 0x0, 0x0, 0x1, 0x5, 0xffffffffffffffe0, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x6, [], r0, 0x14, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x3, 0x3, 0x4, 0x80000001}, 0x10, 0xffffffffffffffff}, 0x78) socket$inet_udp(0x2, 0x3, 0x0) 06:45:16 executing program 1: sendmsg$BATADV_CMD_GET_HARDIF(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xa7d}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000894}, 0x40) r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r2 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f00000020c0)={0xf017}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x50}}, 0x40) r5 = syz_genetlink_get_family_id$wireguard(0x0) getsockopt$PNPIPE_IFINDEX(r4, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f0000000e80)={&(0x7f0000000340), 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x458, r5, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PEERS={0x418, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f0000000e80)={&(0x7f0000000340), 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x458, r8, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_PEERS={0x418, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r2, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x880) ioctl$sock_SIOCADDRT(r2, 0x890b, &(0x7f00000000c0)={0x0, @ax25={0x3, @bcast, 0x6}, @in={0x2, 0x4e22, @empty}, @sco, 0x400, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)='veth1_to_team\x00', 0xa94, 0x6, 0x3}) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:16 executing program 5: socket(0x26, 0x0, 0x0) 06:45:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:16 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0209e700"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) eventfd2(0x10000, 0x80001) syz_io_uring_setup(0x773, &(0x7f0000000180)={0x0, 0xf573, 0x4, 0x0, 0x1115}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 06:45:16 executing program 2: r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r0, 0x0, 0x0) sendmsg$AUDIT_USER(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0xdc, 0x3ed, 0x10, 0x70bd2a, 0x25dfdbfe, "f7fedbdcec15065e70d58cf3ad1b9992b808e033cea0ad9a4dcf1d81f72f43ce80f06597eb07be8f33efda854e65320914884e7b4e0d009f590dc22d718e6a5119ba8ef83738231c0bdf21ea236f5eae4443092deaa393954328c93721ba37dfb0f51689eaeeb11c401e7f0acdaaaaf42c3325c9ea9f0b83381d6549cb50f99b4183ed022cf6a90503268315500e619c93a21876fb49657280a4bdd2a419f0f5de7d17f8a9abbffa440be4bfbd1baad80d800b1f74fc6c9c84ab2c46a9d71ec472530021c9bb5f80e356b6", [""]}, 0xdc}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) socket$inet_udp(0x2, 0x3, 0x0) 06:45:16 executing program 4: clone3(&(0x7f0000000480)={0x0, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x41}, &(0x7f0000000180)=""/175, 0xaf, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 06:45:16 executing program 5: socket(0x26, 0x0, 0x0) [ 1503.819606][ T7096] binder: 7092:7096 unknown command 15141122 [ 1503.844868][ T7096] binder: 7092:7096 ioctl c0306201 20000340 returned -22 06:45:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:16 executing program 5: socket(0x26, 0x0, 0x0) 06:45:16 executing program 4: clone3(&(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080), {0x41}, &(0x7f0000000180)=""/175, 0xaf, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 06:45:16 executing program 3: r0 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, r0, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x4010) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, r0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@GTPA_O_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x15}}]}, 0x60}, 0x1, 0x0, 0x0, 0x314048469a0a8408}, 0x8080) r1 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c4cc100"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) ioctl$SG_SET_KEEP_ORPHAN(0xffffffffffffffff, 0x2287, &(0x7f0000000380)=0x4) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x6d1b4145) 06:45:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x50, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}]}, 0x50}}, 0x40) r2 = syz_genetlink_get_family_id$wireguard(0x0) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000e80)={&(0x7f0000000340), 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x458, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x418, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f0000002080)={0x90, 0x0, r1, {0x5, 0x2, 0x9ad9, 0xfffffffffffffffd, 0x9, 0x3f, {0x2, 0x9, 0x9, 0x1a5, 0x800, 0x412, 0x9, 0x3, 0x1, 0x6000, 0x4, 0xffffffffffffffff, 0xee01, 0x4, 0x9}}}, 0x90) socket$inet_udp(0x2, 0x3, 0x0) 06:45:16 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1504.026692][ T7113] binder: 7109:7113 unknown command 12667916 [ 1504.055161][ T7113] binder: 7109:7113 ioctl c0306201 20000340 returned -22 06:45:16 executing program 4: clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, &(0x7f0000000080), {0x41}, &(0x7f0000000180)=""/175, 0xaf, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 06:45:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="08000075a74954ac3f74295514bd8b04"], 0x0, 0x0, &(0x7f0000000040)}) syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x2) [ 1504.118006][ T7121] binder: 7109:7121 unknown command 12667916 [ 1504.129650][ T7122] binder: 7120:7122 unknown command 15141122 [ 1504.146939][ T7122] binder: 7120:7122 ioctl c0306201 20000340 returned -22 [ 1504.160438][ T7121] binder: 7109:7121 ioctl c0306201 20000340 returned -22 06:45:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0209e700"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) eventfd2(0x10000, 0x80001) syz_io_uring_setup(0x773, &(0x7f0000000180)={0x0, 0xf573, 0x4, 0x0, 0x1115}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 06:45:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x800) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000040), 0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f0000000180)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000080)={@fd={0x66642a85, 0x0, r2}, @fda={0x66646185, 0x4, 0x2, 0x39}, @fda={0x66646185, 0x6, 0x2, 0x3e}}, &(0x7f0000000100)={0x0, 0x18, 0x38}}}], 0x9e, 0x0, &(0x7f0000000380)="6ed01192f93d5da963be52e90ba3ee7f219ba977bcf22760ea3d34b581abccfd0e4a89b51227ebf57c6fe464b34230763c806fc9451aa27ea70ab968f6f8f7004086927f504b09e97e29ccfbd6e7634172c9236e741f98b8965cb529d5153d16bf3071186193be999e7173520a504bfe4b2f4084dfb24269bc6335e01791e93b6f3bb361aaa98b74811dd0569294ffecd15b674f6b4c961b1deca20e50c6"}) 06:45:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:17 executing program 4: clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {0x41}, &(0x7f0000000180)=""/175, 0xaf, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) [ 1504.269023][ T7134] binder: 7132:7134 unknown command 1962934280 [ 1504.284372][ T7134] binder: 7132:7134 ioctl c0306201 20000340 returned -22 [ 1504.324717][ T7134] binder: 7132:7134 unknown command 1962934280 [ 1504.351170][ T7134] binder: 7132:7134 ioctl c0306201 20000340 returned -22 [ 1504.369139][ T7141] binder: 7135:7141 unknown command 15141122 06:45:17 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f2, 0x1, 0x70bd2d, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000010}, 0x4004) 06:45:17 executing program 3: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000280)='/dev/input/mice\x00', 0x101200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f00000000c0)={@flat=@binder={0x73622a85, 0x2, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/149, 0x95, 0x1, 0x10}, @flat=@weak_binder={0x77622a85, 0x1f, 0x2}}, &(0x7f0000000180)={0x0, 0x18, 0x40}}, 0x400}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) socket$kcm(0x29, 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0xd594) mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0x6) 06:45:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1504.405039][ T7141] binder: 7135:7141 ioctl c0306201 20000340 returned -22 06:45:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:17 executing program 4: clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000180)=""/175, 0xaf, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 06:45:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0209e700"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) eventfd2(0x10000, 0x80001) syz_io_uring_setup(0x773, &(0x7f0000000180)={0x0, 0xf573, 0x4, 0x0, 0x1115}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000100), &(0x7f00000000c0)) 06:45:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000240)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f00000002c0)="f5"}) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) write$eventfd(r1, &(0x7f0000000c00)=0xffffffffffffffc1, 0x8) r2 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) recvmsg$can_raw(r2, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f00000006c0)=""/107, 0x6b}, {&(0x7f0000000740)=""/88, 0x58}, {&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f00000007c0)=""/165, 0xa5}, {&(0x7f0000000300)=""/43, 0x2b}, {&(0x7f0000000880)=""/244, 0xf4}, {&(0x7f0000000980)=""/49, 0x31}, {&(0x7f00000009c0)=""/110, 0x6e}, {&(0x7f0000000a40)=""/85, 0x55}], 0x9, &(0x7f0000000b80)=""/26, 0x1a}, 0x20) ioctl$FIONREAD(r2, 0x541b, 0x0) ioctl$NS_GET_USERNS(r2, 0xb701, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000540)=[{&(0x7f0000000380)=""/234, 0xea}, {&(0x7f0000000080)=""/113, 0x71}, {&(0x7f0000000180)=""/103, 0x67}, {&(0x7f0000000480)=""/155, 0x9b}, {&(0x7f0000000100)=""/62, 0x3e}], 0x5, &(0x7f00000005c0)=""/234, 0xea}, 0x0) getpid() 06:45:17 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x3e9, 0x20, 0x70bd25, 0x25dfdbff, {0x1, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x80cb, 0x10001, 0x733, 0x0, 0x80}, ["", "", "", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r2 = eventfd2(0x1000, 0x0) write$eventfd(r2, &(0x7f0000000180)=0x3, 0x8) syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xe57d, 0x98000) 06:45:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1504.610200][ T7166] binder: 7162:7166 unknown command 15141122 [ 1504.642139][ T7166] binder: 7162:7166 ioctl c0306201 20000340 returned -22 06:45:17 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x800}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x5cfa}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x22000011}, 0x20000000) 06:45:17 executing program 4: clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000180)=""/175, 0xaf, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 06:45:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0209e700"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) eventfd2(0x10000, 0x80001) [ 1504.735456][ T7171] binder: 7169:7171 unknown command 1986356271 [ 1504.758734][ T7171] binder: 7169:7171 ioctl c0306201 20000340 returned -22 [ 1504.780392][ T7181] binder: 7169:7181 unknown command 1986356271 [ 1504.794281][ T7181] binder: 7169:7181 ioctl c0306201 20000340 returned -22 06:45:17 executing program 3: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x1, 0x0, &(0x7f00000002c0)="f5"}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCEXCL(r1, 0x540c) 06:45:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:17 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000000)={'batadv0\x00'}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\fsGr'], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1504.841528][ T7187] binder: 7183:7187 unknown command 15141122 [ 1504.863941][ T7187] binder: 7183:7187 ioctl c0306201 20000340 returned -22 06:45:17 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'gre0\x00', &(0x7f0000000200)={'erspan0\x00', r2, 0x7800, 0x10, 0x7ff, 0x6, {{0x9, 0x4, 0x0, 0x37, 0x24, 0x64, 0x0, 0x1, 0x29, 0x0, @multicast1, @broadcast, {[@lsrr={0x83, 0xf, 0xb7, [@empty, @empty, @private=0xa010101]}]}}}}}) syz_io_uring_setup(0x7d07, &(0x7f0000000080)={0x0, 0x9f06, 0x2, 0x1, 0x19e, 0x0, r1}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x5, 0x2004, @fd_index=0x7, 0x80, 0x0, 0x0, 0x1b, 0x0, {0x3}}, 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) write$eventfd(r1, &(0x7f0000000000)=0x100000001, 0x8) 06:45:17 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0209e700"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:17 executing program 4: clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {}, &(0x7f0000000180)=""/175, 0xaf, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 06:45:17 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:17 executing program 3: getpeername(0xffffffffffffffff, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80) r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) socket$phonet_pipe(0x23, 0x5, 0x2) [ 1504.997017][ T7198] binder: 7194:7198 unknown command 1917285132 [ 1505.032340][ T7198] binder: 7194:7198 ioctl c0306201 20000340 returned -22 [ 1505.086056][ T7208] binder: 7194:7208 unknown command 1917285132 [ 1505.094587][ T7206] binder: 7201:7206 unknown command 15141122 [ 1505.134584][ T7208] binder: 7194:7208 ioctl c0306201 20000340 returned -22 [ 1505.143256][ T7206] binder: 7201:7206 ioctl c0306201 20000340 returned -22 06:45:18 executing program 4: clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {0x41}, 0x0, 0x0, &(0x7f0000000380)=""/240, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 06:45:18 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x10000) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = getpid() pidfd_open(r1, 0x0) socket$inet_udp(0x2, 0x3, 0x0) 06:45:18 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0209e700"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="ef0000000000000004cf4ad41aef26fc943bc100"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:18 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$IOCTL_VMCI_QUEUEPAIR_SETPF(r0, 0x7a9, &(0x7f0000000000)={{@any, 0x1}, 0x5, 0x26a, 0x3ff, 0x1, 0x7, 0x6, 0x1, 0x7}) r1 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0xfffffffffffffd75, 0x0, &(0x7f0000000240), 0x1, 0x0, &(0x7f00000002c0)="f5"}) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000080)={0x0, @rc={0x1f, @none, 0x40}, @ethernet={0x306, @multicast}, @phonet={0x23, 0x1, 0x4e, 0x7f}, 0x401, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000040)='macvtap0\x00', 0x7fffffff, 0x7, 0x3}) 06:45:18 executing program 4: clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {0x41}, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0x3}, 0x58) 06:45:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:18 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0209e700"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1505.383859][ T7237] binder: 7231:7237 unknown command 239 [ 1505.401065][ T7237] binder: 7231:7237 ioctl c0306201 20000340 returned -22 06:45:18 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1], 0x8, 0x0, &(0x7f0000000080)="7b0c799d02c94e15"}) 06:45:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4c, 0x0, &(0x7f0000000400)=[@reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/252, 0xfc, 0x0, 0x12}, @flat=@weak_binder={0x77622a85, 0xb, 0x1}, @fda={0x66646185, 0x1, 0x2, 0x2b}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) r1 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyprintk\x00', 0x0, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000180)) 06:45:18 executing program 4: clone3(&(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, {0x41}, 0x0, 0x0, 0x0, 0x0}, 0x58) 06:45:18 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x0) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000040)=0xd205, 0x4) r2 = pidfd_getfd(r0, r0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x8a00, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080), 0x4) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f00000000c0)={0x0, 0x1, r3, 0x3}) 06:45:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1505.598599][ T7251] binder: 7249:7251 unknown command 808464432 [ 1505.603168][ T7250] ttyprintk ttyprintk: tty_port_close_start: tty->count = 1 port count = 3 [ 1505.613492][ T7251] binder: 7249:7251 ioctl c0306201 20000340 returned -22 [ 1505.613623][ C0] [ 1505.613629][ C0] ====================================================== [ 1505.613636][ C0] WARNING: possible circular locking dependency detected [ 1505.613642][ C0] 5.11.0-rc2-syzkaller #0 Not tainted 06:45:18 executing program 5: ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0209e700"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:18 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000240)=[@acquire_done={0x40106309, 0x3}], 0xc, 0x0, &(0x7f0000000080)="5ed528c34813b9e20be53ef5"}) socket$nl_generic(0x10, 0x3, 0x10) 06:45:18 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0209e700"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1505.613648][ C0] ------------------------------------------------------ [ 1505.613654][ C0] syz-executor.3/7250 is trying to acquire lock: [ 1505.613659][ C0] ffffffff8b2827e0 (console_owner){....}-{0:0}, at: vprintk_emit+0x282/0x490 [ 1505.613680][ C0] [ 1505.613684][ C0] but task is already holding lock: [ 1505.613688][ C0] ffffffff8fb61358 (&port->lock){-.-.}-{2:2}, at: tty_port_close_start.part.0+0x28/0x550 [ 1505.613707][ C0] [ 1505.613711][ C0] which lock already depends on the new lock. [ 1505.613715][ C0] [ 1505.613718][ C0] [ 1505.613721][ C0] the existing dependency chain (in reverse order) is: [ 1505.613726][ C0] [ 1505.613728][ C0] -> #2 (&port->lock){-.-.}-{2:2}: [ 1505.613744][ C0] _raw_spin_lock_irqsave+0x39/0x50 [ 1505.613749][ C0] tty_port_tty_get+0x1f/0x100 [ 1505.613754][ C0] tty_port_default_wakeup+0x11/0x40 [ 1505.613759][ C0] serial8250_tx_chars+0x487/0xa80 [ 1505.613764][ C0] serial8250_handle_irq.part.0+0x328/0x3d0 [ 1505.613769][ C0] serial8250_default_handle_irq+0xb2/0x220 [ 1505.613798][ C0] serial8250_interrupt+0xfd/0x200 [ 1505.613813][ C0] __handle_irq_event_percpu+0x303/0x8f0 [ 1505.613818][ C0] handle_irq_event+0x102/0x290 [ 1505.613823][ C0] handle_edge_irq+0x25f/0xd00 [ 1505.613828][ C0] asm_call_irq_on_stack+0xf/0x20 [ 1505.613833][ C0] common_interrupt+0x120/0x200 [ 1505.613837][ C0] asm_common_interrupt+0x1e/0x40 [ 1505.613842][ C0] _raw_spin_unlock_irqrestore+0x25/0x50 [ 1505.613847][ C0] uart_write+0x30d/0x570 06:45:18 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) [ 1505.613852][ C0] do_output_char+0x5de/0x850 [ 1505.613856][ C0] n_tty_write+0x4c3/0xfd0 [ 1505.613861][ C0] tty_write+0x512/0x8b0 [ 1505.613865][ C0] redirected_tty_write+0xaa/0xb0 [ 1505.613870][ C0] do_iter_write+0x489/0x670 [ 1505.613874][ C0] vfs_writev+0x1aa/0x620 [ 1505.613879][ C0] do_writev+0x139/0x300 [ 1505.613883][ C0] do_syscall_64+0x2d/0x70 [ 1505.613887][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1505.613892][ C0] [ 1505.613895][ C0] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 1505.613911][ C0] _raw_spin_lock_irqsave+0x39/0x50 [ 1505.613916][ C0] serial8250_console_write+0x880/0xa90 [ 1505.613921][ C0] console_unlock+0x841/0xbb0 [ 1505.613926][ C0] vprintk_emit+0x189/0x490 [ 1505.613930][ C0] vprintk_func+0x8d/0x1e0 [ 1505.613935][ C0] printk+0xba/0xed [ 1505.613939][ C0] register_console+0x5d1/0x800 [ 1505.613944][ C0] univ8250_console_init+0x3a/0x46 [ 1505.613949][ C0] console_init+0x3c7/0x596 06:45:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1505.613953][ C0] start_kernel+0x2fc/0x48c [ 1505.613958][ C0] secondary_startup_64_no_verify+0xb0/0xbb [ 1505.613962][ C0] [ 1505.613965][ C0] -> #0 (console_owner){....}-{0:0}: [ 1505.613981][ C0] __lock_acquire+0x2b26/0x54f0 [ 1505.613986][ C0] lock_acquire+0x29d/0x740 [ 1505.613991][ C0] vprintk_emit+0x2bf/0x490 [ 1505.613995][ C0] vprintk_func+0x8d/0x1e0 [ 1505.614000][ C0] printk+0xba/0xed [ 1505.614004][ C0] tty_port_close_start.part.0+0x503/0x550 06:45:18 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) pipe(&(0x7f00000000c0)) sendmsg$AUDIT_SIGNAL_INFO(0xffffffffffffffff, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}, 0x1, 0x0, 0x0, 0x4008001}, 0x0) getsockname(r0, &(0x7f0000000000)=@phonet, &(0x7f0000000080)=0x80) [ 1505.614010][ C0] tty_port_close+0x46/0x170 [ 1505.614014][ C0] tty_release+0x45e/0x1210 [ 1505.614019][ C0] __fput+0x283/0x920 [ 1505.614023][ C0] task_work_run+0xdd/0x190 [ 1505.614027][ C0] exit_to_user_mode_prepare+0x249/0x250 [ 1505.614033][ C0] syscall_exit_to_user_mode+0x19/0x50 [ 1505.614038][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1505.614043][ C0] [ 1505.614046][ C0] other info that might help us debug this: [ 1505.614050][ C0] [ 1505.614053][ C0] Chain exists of: [ 1505.614056][ C0] console_owner --> &port_lock_key --> &port->lock [ 1505.614078][ C0] [ 1505.614081][ C0] Possible unsafe locking scenario: [ 1505.614085][ C0] [ 1505.614089][ C0] CPU0 CPU1 [ 1505.614093][ C0] ---- ---- [ 1505.614097][ C0] lock(&port->lock); [ 1505.614107][ C0] lock(&port_lock_key); [ 1505.614118][ C0] lock(&port->lock); [ 1505.614129][ C0] lock(console_owner); [ 1505.614143][ C0] [ 1505.614146][ C0] *** DEADLOCK *** [ 1505.614149][ C0] [ 1505.614152][ C0] 2 locks held by syz-executor.3/7250: [ 1505.614157][ C0] #0: ffff8880502831c0 (&tty->legacy_mutex){+.+.}-{3:3}, at: tty_lock+0xbd/0x120 [ 1505.614178][ C0] #1: ffffffff8fb61358 (&port->lock){-.-.}-{2:2}, at: tty_port_close_start.part.0+0x28/0x550 [ 1505.614200][ C0] [ 1505.614203][ C0] stack backtrace: [ 1505.614208][ C0] CPU: 0 PID: 7250 Comm: syz-executor.3 Not tainted 5.11.0-rc2-syzkaller #0 [ 1505.614215][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1505.614222][ C0] Call Trace: [ 1505.614225][ C0] dump_stack+0x107/0x163 [ 1505.614230][ C0] check_noncircular+0x25f/0x2e0 [ 1505.614234][ C0] ? stack_trace_consume_entry+0x160/0x160 [ 1505.614239][ C0] ? print_circular_bug+0x480/0x480 [ 1505.614244][ C0] ? lockdep_lock+0xc6/0x200 [ 1505.614248][ C0] ? call_rcu_zapped+0xb0/0xb0 [ 1505.614253][ C0] __lock_acquire+0x2b26/0x54f0 [ 1505.614258][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 1505.614263][ C0] lock_acquire+0x29d/0x740 [ 1505.614266][ C0] ? vprintk_emit+0x282/0x490 [ 1505.614271][ C0] ? lock_release+0x710/0x710 [ 1505.614275][ C0] ? lock_downgrade+0x6d0/0x6d0 [ 1505.614279][ C0] ? do_raw_spin_lock+0x120/0x2b0 [ 1505.614284][ C0] ? rwlock_bug.part.0+0x90/0x90 [ 1505.614288][ C0] ? _raw_spin_unlock_irqrestore+0x2f/0x50 [ 1505.614293][ C0] vprintk_emit+0x2bf/0x490 [ 1505.614297][ C0] ? vprintk_emit+0x282/0x490 [ 1505.614301][ C0] vprintk_func+0x8d/0x1e0 [ 1505.614305][ C0] printk+0xba/0xed [ 1505.614309][ C0] ? record_print_text.cold+0x16/0x16 [ 1505.614314][ C0] ? _raw_spin_lock_irqsave+0x4e/0x50 [ 1505.614319][ C0] tty_port_close_start.part.0+0x503/0x550 [ 1505.614324][ C0] tty_port_close+0x46/0x170 [ 1505.614327][ C0] ? tpk_open+0x60/0x60 [ 1505.614331][ C0] tty_release+0x45e/0x1210 [ 1505.614336][ C0] ? __sanitizer_cov_trace_const_cmp2+0x22/0x80 [ 1505.614341][ C0] __fput+0x283/0x920 [ 1505.614345][ C0] ? tty_release_struct+0xe0/0xe0 [ 1505.614349][ C0] task_work_run+0xdd/0x190 [ 1505.614353][ C0] exit_to_user_mode_prepare+0x249/0x250 [ 1505.614358][ C0] syscall_exit_to_user_mode+0x19/0x50 [ 1505.614363][ C0] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1505.614368][ C0] RIP: 0033:0x417b71 [ 1505.614375][ C0] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 06:45:18 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1505.614388][ C0] RSP: 002b:00007fffb0a92200 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 1505.614398][ C0] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000417b71 [ 1505.614404][ C0] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000004 [ 1505.614411][ C0] RBP: 0000000000000001 R08: 00000000000003f9 R09: 00000000cc77e3fd [ 1505.614418][ C0] R10: 00007fffb0a922e0 R11: 0000000000000293 R12: ffffffffffffffff [ 1505.614424][ C0] R13: 000000000016f946 R14: 00000000000003e8 R15: 000000000119bf8c 06:45:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x54, 0x0, &(0x7f0000000200)=[@transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000180)={@ptr={0x70742a85, 0x0, &(0x7f00000000c0)=""/58, 0x3a, 0x0, 0x25}, @fda={0x66646185, 0x1, 0x1, 0x31}, @fda={0x66646185, 0x2, 0x0, 0x28}}, &(0x7f0000000100)={0x0, 0x28, 0x48}}}, @clear_death={0x400c630f, 0x3}], 0x2a, 0x0, &(0x7f0000000280)="ab4b26630beac9955a010ac1a0019fd74648ad0057b437cb9d2642aa1fbc9904bfcbddebba09d37c6855"}) syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240), 0x2d, 0x0, &(0x7f0000000040)="002efb85ba58107ec30a1cc373f1d070fd033619974affc6dfe42f9cf195ecbf1c042a0aee724c9357da8a75e8"}) 06:45:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:19 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0209e700"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:19 executing program 3: sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3f5, 0x400, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x2404a890}, 0x4040) r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000240)=[@acquire_done={0x40106309, 0x3}], 0xc, 0x0, &(0x7f0000000080)="5ed528c34813b9e20be53ef5"}) socket$nl_generic(0x10, 0x3, 0x10) 06:45:19 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) write$P9_ROPEN(r0, &(0x7f0000000000)={0x18, 0x71, 0x2, {{0x40, 0x3, 0x3}, 0x100}}, 0x18) 06:45:19 executing program 5: r0 = syz_open_dev$binderN(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0209e700"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000240)=[@acquire_done={0x40106309, 0x3}], 0xc, 0x0, &(0x7f0000000080)="5ed528c34813b9e20be53ef5"}) socket$nl_generic(0x10, 0x3, 0x10) 06:45:19 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0209e700"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x3) r1 = accept(0xffffffffffffffff, &(0x7f0000001480)=@x25={0x9, @remote}, &(0x7f0000000280)=0x80) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000300)={0x5}) r2 = socket(0x1, 0x1, 0x80) ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000000)={0x7}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:19 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000000)={'wg0\x00'}) 06:45:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x14, 0x0, &(0x7f0000000240)=[@acquire_done={0x40106309, 0x3}], 0xc, 0x0, &(0x7f0000000080)="5ed528c34813b9e20be53ef5"}) socket$nl_generic(0x10, 0x3, 0x10) 06:45:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r1, &(0x7f0000000380)={0x2020}, 0x206d) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280), 0x2e5, 0x0, &(0x7f00000023c0)="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"}) 06:45:19 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0209e700"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) syz_open_dev$ptys(0xc, 0x3, 0x0) 06:45:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:19 executing program 4: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 06:45:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:19 executing program 2: ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f0000000080)) ioctl$SG_GET_PACK_ID(0xffffffffffffffff, 0x227c, &(0x7f00000001c0)) socket$inet_udp(0x2, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="00022cbd7000fedbdf2500000000080009000200000008000800000000000800080001000000e5f308000100a3c8322c16d48bed64745cd3cdc6701268da", @ANYRES32=0x0, @ANYBLOB="08000400ffffffff"], 0x3c}, 0x1, 0x0, 0x0, 0x40810}, 0x50) 06:45:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f0000000040)=@qipcrtr, 0x80, &(0x7f00000014c0)=[{&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000180)=""/159, 0x9f}, {&(0x7f00000000c0)=""/68, 0x44}, {&(0x7f0000001380)=""/124, 0x7c}, {&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f0000000300)=""/4, 0x4}, {&(0x7f0000001400)=""/174, 0xae}], 0x7, &(0x7f0000001540)=""/141, 0x8d}, 0x123) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x3) 06:45:19 executing program 5: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0209e700"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000000)=[@enter_looper, @acquire_done, @exit_looper, @request_death={0x400c630e, 0x1}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:19 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) 06:45:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:45:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c63f7ff"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) syz_open_dev$ptys(0xc, 0x3, 0x0) 06:45:19 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000002300)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000022c0)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r3, 0x541b, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = getegid() write$FUSE_ENTRY(r3, &(0x7f0000000780)={0x90, 0x0, 0x0, {0x0, 0x3, 0x0, 0x4, 0x0, 0x7, {0x5, 0x7ff, 0x8001, 0x7, 0x100000001, 0xffff, 0x3538, 0x4a0, 0x8, 0x6000, 0x5, 0xee00, r5, 0x7bb, 0x8cae}}}, 0x90) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000003900)={&(0x7f0000003840), 0xc, &(0x7f00000038c0)={0x0}}, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000740)={0x11c, 0x0, &(0x7f0000000540)=[@release={0x40046306, 0x1}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/21, 0x15, 0x0, 0x3c}, @fda={0x66646185, 0x2, 0x0, 0x3c}}, &(0x7f0000000280)={0x0, 0x18, 0x40}}}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000400)={@flat=@weak_binder={0x77622a85, 0x10a}, @fd={0x66642a85, 0x0, r4}, @fda={0x66646185, 0x9, 0x2, 0x40}}, &(0x7f0000000300)={0x0, 0x18, 0x30}}}, @dead_binder_done, @release, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000480)={@flat=@binder={0x73622a85, 0x10a, 0x1}, @flat=@handle={0x73682a85, 0x1001, 0x3}, @fda={0x66646185, 0x0, 0x1, 0x1a}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}, 0x1000}, @decrefs={0x40046307, 0x3}, @request_death={0x400c630e, 0x1}, @dead_binder_done], 0xad, 0x0, &(0x7f0000000680)="32f9e05669abbbe6c6ff09d021132793126c8d40ce28d718f0235087e5c8fe6c154422f913c8bf92a427d5a738fb842ec2bbe3b5b40887e13fb765b3ee9dc84d07a8d24d0cad620e986c16f66910dbaa9d477363092a8d99f564bf979316d4d1769252a712612820801433f033c4574954547ba85297d6759c2323db79a4044071a4a9ce3865144087aa40d49ec8883cf32381b3ffbff15509c30bb115b98e205946ebb4e074a8b32feb3a94f9"}) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002dbd7005000000313100000008400319b5f66b9a46be02b317534a82c258e10049327329a519bca9cbf673f72185cce9ccfae64c81776cec996887714c067563a708f1870f00709b2e0fc5fa45f7755079ce1e4a36d0016407fbf46ca8f304b2004447cf8f6cc4babcb86e02e5c753f372fbc2765c5044ea34addb5b77afa2c6cb4253c4032e53726dbaf489238db9dba08fbe0a112749ebe500"/170, @ANYRES32=r2, @ANYBLOB="0c0099000600000021000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x8800) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="04810000002000000000"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 1506.936996][ T7386] binder: 7384:7386 ioctl c0306201 0 returned -14 [ 1506.962123][ T7391] binder: 7388:7391 unknown command -564468 [ 1506.979925][ T7391] binder: 7388:7391 ioctl c0306201 20000340 returned -22 06:45:19 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0)='batadv\x00') ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fedbdf250d000000050038001000000008000600", @ANYRES32=r2, @ANYBLOB="05003300dbea634ff3b740480200000005002d00410040003a7798cd3f5db46b981b53fd3b2456ae192b33a643b789191e43a8edf341a6231094360350e3e5e7919a9b8dafc0a8750bb0d7c6a794a31e7c47b2203a9d46c7105e691ee752612d297b0c36c36e0d38160e8ee1eaba9ad40af0fa83805cca85088e75062999ebcbe27244f7563955927f"], 0x3c}, 0x1, 0x0, 0x0, 0x8091}, 0x400c004) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r3 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r3, 0x541b, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000300)={0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x7, &(0x7f0000000100)=[{0x0, 0x80, 0x0, 0x5}, {0xab5a, 0x0, 0xdc, 0x8000}, {0x100, 0x17, 0x0, 0x48b}, {0x20, 0x11, 0x7, 0xfffffff7}, {0x7f, 0x6, 0x1, 0x2}, {0xfffe, 0x40, 0x1, 0x4}, {0x2, 0x2, 0x5, 0x7}]}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000000)={r4, 0xb4c4, 0xfd83}) pidfd_open(r5, 0x0) 06:45:19 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) syz_open_dev$ptys(0xc, 0x3, 0x0) 06:45:19 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0)='batadv\x00') sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xfffffea1, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r1, 0x4, 0x70bd27, 0x25dfdbff}, 0x7}, 0x1, 0x0, 0x0, 0x4004890}, 0x20004080) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c63e3b3"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1507.036938][ T7398] binder: 7395:7398 unknown command 33028 [ 1507.059648][ T7400] binder: 7399:7400 ioctl c0306201 0 returned -14 [ 1507.072511][ T7398] binder: 7395:7398 ioctl c0306201 20000340 returned -22 06:45:19 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 06:45:19 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) syz_open_dev$ptys(0xc, 0x3, 0x0) 06:45:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\fc\t\x00'], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1507.099791][ T7409] binder: 7395:7409 unknown command 33028 [ 1507.103398][ T7407] binder: 7403:7407 unknown command -1276943604 [ 1507.114080][ T7409] binder: 7395:7409 ioctl c0306201 20000340 returned -22 [ 1507.163332][ T7407] binder: 7403:7407 ioctl c0306201 20000340 returned -22 [ 1507.179367][ T7415] binder: 7413:7415 ioctl c0306201 0 returned -14 06:45:20 executing program 4: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) syz_open_dev$ptys(0xc, 0x3, 0x0) 06:45:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:20 executing program 3: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r0, 0x541b, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xa) r1 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0ccb7e2a"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1507.205434][ T7422] binder: 7419:7422 unknown command 615180 [ 1507.240465][ T7422] binder: 7419:7422 ioctl c0306201 20000340 returned -22 06:45:20 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r5 = accept4(r4, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r1, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r1, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9e36}]}, 0x1c}}, 0x4000085) 06:45:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = socket(0x21, 0x80002, 0x1f) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r5, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r5, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r8 = accept4(r7, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r4, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_raw(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@canfd={{0x3, 0x1, 0x0, 0x1}, 0xe, 0x1, 0x0, 0x0, "1840d601fcb927e8fa7693675c6fd6117188da43027d51ad60b206ceb44ed842cb335d0ff7ea5af671131afdd686cec80c348f5c06b67edb443746af73f98a85"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:20 executing program 4: syz_open_dev$ptys(0xc, 0x3, 0x0) [ 1507.272167][ T7429] binder: 7427:7429 ioctl c0306201 20000340 returned -14 [ 1507.308759][ T7432] binder: 7431:7432 unknown command 712952588 06:45:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1507.341284][ T7432] binder: 7431:7432 ioctl c0306201 20000340 returned -22 [ 1507.376180][ T7442] binder: 7437:7442 ioctl c0306201 20000340 returned -14 06:45:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x0) sendmsg$AUDIT_DEL_RULE(r1, 0xfffffffffffffffd, 0x404c000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x8, 0x0, &(0x7f0000000000)=[@release={0x40046306, 0x2}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1507.387617][ T7443] binder: 7431:7443 unknown command 712952588 [ 1507.396243][ T7443] binder: 7431:7443 ioctl c0306201 20000340 returned -22 06:45:20 executing program 3: getpid() r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0xd775) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000807fb714d0d1d5f2bcd8975dc1eefead64be2fe5eaca96514d9a00"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = socket(0x21, 0x80002, 0x1f) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r5, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r5, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r8 = accept4(r7, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r4, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_raw(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@canfd={{0x3, 0x1, 0x0, 0x1}, 0xe, 0x1, 0x0, 0x0, "1840d601fcb927e8fa7693675c6fd6117188da43027d51ad60b206ceb44ed842cb335d0ff7ea5af671131afdd686cec80c348f5c06b67edb443746af73f98a85"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:20 executing program 2: ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, &(0x7f0000000000)=0x2) ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0) socket$inet_udp(0x2, 0x3, 0x0) 06:45:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) pipe(&(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) read$FUSE(r1, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) getuid() 06:45:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttyprintk\x00', 0x111080, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000030b88547e849c253f720314c0efbc54f4c34d858a624635b7a21017e77a829ef42ef274897557b6ebd4343dc58ce9f7bfbf6f48ec16a8ba8f21ff12e479d9d1c4e2a547b4cc56ef4237f0f5655b1825f806d628d116a8a7d6a177f028d5eee24de8439115fc9ca76edc4d17940f39ed99e788421"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1507.524126][ T7460] binder: 7457:7460 unknown command 2139095040 [ 1507.537558][ T7460] binder: 7457:7460 ioctl c0306201 20000340 returned -22 [ 1507.545858][ T7458] binder: 7454:7458 ioctl c0306201 20000340 returned -14 06:45:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = socket(0x21, 0x80002, 0x1f) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r5, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r5, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r8 = accept4(r7, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r4, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_raw(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@canfd={{0x3, 0x1, 0x0, 0x1}, 0xe, 0x1, 0x0, 0x0, "1840d601fcb927e8fa7693675c6fd6117188da43027d51ad60b206ceb44ed842cb335d0ff7ea5af671131afdd686cec80c348f5c06b67edb443746af73f98a85"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:20 executing program 3: syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1507.630848][ T7471] binder: 7468:7471 unknown command 0 [ 1507.644509][ T7471] binder: 7468:7471 ioctl c0306201 20000340 returned -22 [ 1507.652378][ T7479] binder: 7474:7479 unknown command 0 06:45:20 executing program 4: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r1 = socket(0x21, 0x80002, 0x1f) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r4, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r3, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r5, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r6}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r7, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r5, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r8 = accept4(r7, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r8, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r4, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r4, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r2, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r4, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_raw(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@canfd={{0x3, 0x1, 0x0, 0x1}, 0xe, 0x1, 0x0, 0x0, "1840d601fcb927e8fa7693675c6fd6117188da43027d51ad60b206ceb44ed842cb335d0ff7ea5af671131afdd686cec80c348f5c06b67edb443746af73f98a85"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x10) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:20 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) write$P9_RWSTAT(0xffffffffffffffff, &(0x7f0000000000)={0x7, 0x7f, 0x1}, 0x7) 06:45:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c63000021915c5bd61ba6854075ddf9fc89e027e31d5ed37650d33b6f1a69130cba"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00') sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x1402, 0x400, 0x70bd28, 0x25dfdbff, "", [@RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r2}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz0\x00'}, @RDMA_NLDEV_ATTR_DEV_DIM={0x5}]}, 0x44}}, 0x20088001) [ 1507.675682][ T7479] binder: 7474:7479 ioctl c0306201 20000340 returned -22 [ 1507.686477][ T7485] binder: 7468:7485 unknown command 0 06:45:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:20 executing program 4: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) r0 = socket(0x21, 0x80002, 0x1f) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r3, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r2, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r6, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r4, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r7 = accept4(r6, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r7, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r3, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r3, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x1) sendmsg$can_raw(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@canfd={{0x3, 0x1, 0x0, 0x1}, 0xe, 0x1, 0x0, 0x0, "1840d601fcb927e8fa7693675c6fd6117188da43027d51ad60b206ceb44ed842cb335d0ff7ea5af671131afdd686cec80c348f5c06b67edb443746af73f98a85"}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x10) [ 1507.752224][ T7485] binder: 7468:7485 ioctl c0306201 20000340 returned -22 06:45:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0c631caa7a697fa7bc0816b07ba9ebe136692d34159df24c84fd0a62624194f2"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1507.817691][ T7496] binder: 7493:7496 unknown command 0 [ 1507.839722][ T7496] binder: 7493:7496 ioctl c0306201 20000340 returned -22 06:45:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='\fs\x00\x00'], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:20 executing program 4: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) socket(0x21, 0x80002, 0x1f) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r1, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r3, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r4}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r5, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r3, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r6 = accept4(r5, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r6, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r2, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r2, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f00000007c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x34, r2, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x1) 06:45:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0xff00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1507.879985][ T7510] binder: 7505:7510 unknown command -1440980212 06:45:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:20 executing program 2: socket$inet_udp(0x2, 0x3, 0x0) getitimer(0x1, &(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) 06:45:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x80, 0x0) ioctl$IMGETDEVINFO(r1, 0x80044944, &(0x7f0000000000)) sendmsg$AUDIT_ADD_RULE(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x420, 0x3f3, 0x400, 0x70bd28, 0x25dfdbff, {0x4, 0x2, 0x30, [0x9, 0x5, 0x60, 0x528e295a, 0xfffffffe, 0x3c1d, 0x7, 0x80000001, 0x3, 0x4, 0x2, 0x6, 0x91e, 0xffffffff, 0x0, 0x5e0, 0x7f, 0x5, 0x4, 0xfffffffd, 0x5, 0x7, 0x2, 0x620, 0x1000, 0x200, 0x6, 0x6, 0x0, 0x1, 0x1, 0xffffffff, 0x7, 0x3, 0x1, 0x1f, 0x9, 0x0, 0xd975, 0x2, 0x2, 0x3, 0x1, 0x7, 0x4, 0x6, 0x8, 0x0, 0xa5, 0x5, 0x5, 0x8, 0xfa0, 0x40, 0x0, 0x20d3, 0x6, 0x9, 0x8000, 0x7f, 0x6, 0xffffffff, 0x1, 0x4], [0x8001, 0x101, 0xaed, 0x8, 0x5, 0x1, 0xd756, 0x0, 0xa, 0x1, 0x9, 0x8c, 0x428b, 0x9, 0x2, 0x400, 0x4, 0x80, 0x7, 0x7, 0x0, 0x5, 0x8, 0x3ff, 0x0, 0x2, 0x1, 0x9, 0x1a, 0x1f, 0xfffffc01, 0x1, 0x173, 0x7, 0x9, 0x3, 0x3, 0x80, 0x7fffffff, 0x3, 0x5, 0x3ff, 0x101, 0x25a, 0x1, 0x2, 0x9, 0x5, 0x5685, 0x707, 0x80, 0x90, 0xffffffff, 0x6, 0x4, 0x2de, 0x7fff, 0x10000, 0x0, 0x8, 0x80, 0x6, 0x4, 0xff], [0xfff, 0x2, 0x1, 0x3f1, 0x80, 0x0, 0x3f, 0x90b, 0x7fffffff, 0x1, 0x1, 0x0, 0x4, 0x3, 0x40, 0x32ec413, 0x0, 0x9, 0x4e5, 0x800, 0x7f, 0x7, 0xffffffff, 0x5518, 0x1, 0x0, 0x7d, 0x200, 0xffffffff, 0x584c, 0x8, 0x3, 0x7fff, 0x7, 0x6, 0x10001, 0x3, 0x40000000, 0x6, 0x8, 0x0, 0x1, 0x8, 0x1, 0x7fffffff, 0x3, 0x4, 0x401, 0x6, 0x2, 0x40, 0x5, 0x207, 0xfff, 0x3ff, 0x9, 0x1, 0x7fffffff, 0xf, 0xffff0001, 0x9, 0xfffffffc, 0x3, 0xd3e], [0x2, 0x0, 0x3f, 0x7, 0x2, 0x6, 0x22, 0xfc000000, 0x2, 0x6, 0x7fffffff, 0x5, 0x0, 0x2800, 0xffffffe1, 0x2, 0xed, 0x9ce7, 0x76b266b4, 0x836, 0x5, 0x5, 0x0, 0x1f, 0x0, 0x118, 0x6, 0x80000001, 0x200, 0x8, 0xfff, 0xfff, 0x81, 0x20, 0x34f876a6, 0x3, 0x2c1, 0x3, 0x7fffffff, 0x4f51, 0x11f, 0x9, 0x9, 0x7fff, 0x5, 0x7, 0x7, 0x7fffffff, 0xc82d, 0x5, 0x2, 0x400, 0x9, 0xa5c3, 0x0, 0x2613, 0x4, 0x3, 0x2, 0xfffffff9, 0xfffffff7, 0x9, 0x3, 0x8]}, ["", "", "", "", "", "", ""]}, 0x420}, 0x1, 0x0, 0x0, 0x1}, 0x4000) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wg2\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000380)={'erspan0\x00', r2, 0x1, 0x80, 0x3ff, 0x6, {{0xa, 0x4, 0x0, 0x9, 0x28, 0x68, 0x0, 0x2, 0x2f, 0x0, @loopback, @dev={0xac, 0x14, 0x14, 0x22}, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x1b, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2]}]}}}}}) [ 1507.920418][ T7510] binder: 7505:7510 ioctl c0306201 20000340 returned -22 06:45:20 executing program 4: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) socket(0x21, 0x80002, 0x1f) pipe(&(0x7f0000000300)) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r5 = accept4(r4, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r1, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r4, &(0x7f00000014c0)={&(0x7f0000001400)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001480)={&(0x7f0000001440)={0x1c, r1, 0x4, 0x70bd27, 0x25dfdbff, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4040810) 06:45:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 1507.974796][ T7519] binder: 7516:7519 unknown command 29452 [ 1507.995462][ T7519] binder: 7516:7519 ioctl c0306201 20000340 returned -22 [ 1508.013767][ T7523] binder: 7517:7523 unknown command 0 06:45:20 executing program 4: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) socket(0x21, 0x80002, 0x1f) pipe(&(0x7f0000000300)) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) r5 = accept4(r4, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000001380)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001340)={&(0x7f0000001300)={0x24, r1, 0x20b, 0x70bd29, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x48}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4) 06:45:20 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x44, 0x0, &(0x7f00000001c0)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000000c0)={@fda={0x66646185, 0x0, 0x0, 0x24}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/134, 0x86, 0x1, 0xe}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000180)={0x0, 0x20, 0x48}}}], 0x1, 0x0, &(0x7f00000002c0)="f5"}) r1 = accept(0xffffffffffffffff, &(0x7f0000000240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private2}}, &(0x7f0000000300)=0x80) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x3f7, 0x914, 0x70bd2b, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x26008090) 06:45:20 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="4b422d3624a58311746da5dff4fd3d570776cf4c78e4110535579136fb12b3c0d698433087c76f253e89aa76ee4d1ec253baa3206cbcaffda6c80a859158020eb97b108e51d694a75ebbca709ec8699f66431fdcb1159897b3b9d953cf949a8febecfb99ff60265d2daa2dbde0587a17413a60dc7f28f57a465955a79f340947fbc5"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) [ 1508.037261][ T7523] binder: 7517:7523 ioctl c0306201 20000340 returned -22 06:45:20 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:20 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:20 executing program 2: r0 = socket$inet_udp(0x2, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) 06:45:21 executing program 4: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) socket(0x21, 0x80002, 0x1f) pipe(&(0x7f0000000300)) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc20xffffffffffffffff}) sendmsg$WG_CMD_GET_DEVICE(r4, &(0x7f00000011c0)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001180)={&(0x7f0000001140)={0x1c, r2, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x24000084) accept4(r4, &(0x7f0000001200)=@phonet, &(0x7f0000001280)=0x80, 0x80000) 06:45:21 executing program 1: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000640)='/dev/input/mice\x00', 0x0) ioctl$FIONREAD(r1, 0x541b, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x8, 0x4, 0x2}, 0x3}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0c6300002ee9f2e9f877194a553cad4d09c948388f3a19b04e4805b421ad5db78b9cbabad9edbb3320b926836a5feab6d82e8cb4e92f5dcc959223cad738ab006d264e498c1b8a6ce1fe79e96690b442009c01dadbe92da2346119d80e7a821ffb95b990629b9c74b22aad58a280bf2b84540a602a304f0659dba25dca"], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:21 executing program 0: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x58, 0x0, &(0x7f0000000240)=[@free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 06:45:21 executing program 3: r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=[@enter_looper], 0x1, 0x0, &(0x7f00000002c0)="f5"}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x400, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x40}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4) [ 1508.170326][ T7546] binder: 7538:7546 unknown command 908935755 [ 1508.178674][ T7547] binder: 7542:7547 unknown command 0 [ 1508.185384][ T7546] binder: 7538:7546 ioctl c0306201 20000340 returned -22 [ 1508.210438][ T7547] binder: 7542:7547 ioctl c0306201 20000340 returned -22 06:45:21 executing program 5: r0 = syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1, 0x0, &(0x7f00000002c0)="f5"}) 06:45:21 executing program 4: syz_open_dev$binderN(&(0x7f0000000140)='/dev/binder#\x00', 0x0, 0x0) socket(0x21, 0x80002, 0x1f) pipe(&(0x7f0000000300)) r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000180), 0x800) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200)='batadv\x00') sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x891}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xe2a}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1000000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x8001}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040004}, 0x40) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380)='wireguard\x00') getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$WG_CMD_GET_DEVICE(r0, &(0x7f0000000e80)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000e40)={&(0x7f0000000580)={0x88c, r2, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0x838, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g='\x97\\\x9d\x81\xc9\x83\xc8 \x9e\xe7\x81%K\x89\x9f\x8e\xd9%\xae\x9f\t#\xc2