opt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x12}, 0x10) 13:54:53 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:53 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xffffff12) 13:54:53 executing program 1: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x200, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x12}, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000884}, 0x80) r2 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@xdp, &(0x7f0000000380)=0x80, 0x800) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000003c0)) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000400)={0xe, {0x8, 0xf, 0xff, 0xc, "fe2082f5901192b9695f8072"}}, 0x18) 13:54:53 executing program 3: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x200, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x12}, 0x10) 13:54:53 executing program 0: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x200, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 13:54:53 executing program 2: wait4(0x0, 0x0, 0x0, &(0x7f0000000040)) 13:54:53 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:53 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 13:54:53 executing program 1: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x200, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x12}, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000884}, 0x80) r2 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@xdp, &(0x7f0000000380)=0x80, 0x800) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000003c0)) 13:54:53 executing program 2: wait4(0x0, 0x0, 0x0, 0x0) 13:54:53 executing program 3: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x200, 0x4) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x12}, 0x10) 13:54:53 executing program 0: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x200, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) 13:54:53 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:53 executing program 5: r0 = syz_io_uring_setup(0x664e, &(0x7f0000000000)={0x0, 0x5c91, 0x0, 0x2, 0x280}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_setup(0x55a5, &(0x7f0000000100)={0x0, 0x1678, 0x2, 0x3, 0x226, 0x0, r0}) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) sendmsg$TIPC_CMD_GET_NODES(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4000802) 13:54:53 executing program 2: wait4(0x0, 0x0, 0x0, 0x0) 13:54:53 executing program 1: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x200, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x12}, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000884}, 0x80) accept4(0xffffffffffffffff, &(0x7f0000000300)=@xdp, &(0x7f0000000380)=0x80, 0x800) 13:54:53 executing program 3: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x12}, 0x10) 13:54:53 executing program 0: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x200, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 13:54:53 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:53 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r0, 0x6}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000280), 0x4) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000000)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x3e, 0x7fff, 0x80, 0x3, 0x1, 0xd5, "d5bd2e7becc2ec1be7ec6314b4bc8cfc07b8e4662dd38d088b22a04c1aa652dd3e86b30bf92d5558d7cead10f59caaeae5df60a416e895860f116e904049"}}, 0x156) 13:54:53 executing program 2: wait4(0x0, 0x0, 0x0, 0x0) 13:54:53 executing program 3: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 13:54:53 executing program 1: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x200, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x12}, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000884}, 0x80) 13:54:53 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 13:54:53 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:53 executing program 5: r0 = syz_io_uring_complete(0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x62) 13:54:53 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, &(0x7f0000000080)) 13:54:53 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r0, 0x6}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000280), 0x4) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000000)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x3e, 0x7fff, 0x80, 0x3, 0x1, 0xd5, "d5bd2e7becc2ec1be7ec6314b4bc8cfc07b8e4662dd38d088b22a04c1aa652dd3e86b30bf92d5558d7cead10f59caaeae5df60a416e895860f116e904049"}}, 0x156) 13:54:53 executing program 1: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x200, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x12}, 0x10) 13:54:53 executing program 3: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 13:54:54 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:54 executing program 5: ioctl$UI_END_FF_ERASE(0xffffffffffffffff, 0x400c55cb, &(0x7f0000000000)={0x0, 0x7, 0x73ff}) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:54:54 executing program 0: getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) 13:54:54 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r0, 0x6}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000280), 0x4) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000000)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x3e, 0x7fff, 0x80, 0x3, 0x1, 0xd5, "d5bd2e7becc2ec1be7ec6314b4bc8cfc07b8e4662dd38d088b22a04c1aa652dd3e86b30bf92d5558d7cead10f59caaeae5df60a416e895860f116e904049"}}, 0x156) 13:54:54 executing program 3: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 13:54:54 executing program 1: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x200, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 13:54:54 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:54 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000040)={0xc, {0xfa, "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"}}, 0x100) 13:54:54 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r0, 0x6}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000280), 0x4) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000000)={0xb, {'syz1\x00', 'syz1\x00', 'syz0\x00', 0x3e, 0x7fff, 0x80, 0x3, 0x1, 0xd5, "d5bd2e7becc2ec1be7ec6314b4bc8cfc07b8e4662dd38d088b22a04c1aa652dd3e86b30bf92d5558d7cead10f59caaeae5df60a416e895860f116e904049"}}, 0x156) 13:54:54 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:54 executing program 3: bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180), 0x10) 13:54:54 executing program 1: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x200, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) 13:54:54 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:54 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r0, 0x6}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$nfc_llcp_NFC_LLCP_RW(r1, 0x118, 0x0, &(0x7f0000000280), 0x4) 13:54:54 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4, 0x816}}, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 13:54:54 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:54 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:54 executing program 1: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x200, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) 13:54:54 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r0, 0x6}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 13:54:54 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:54 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@qipcrtr, &(0x7f0000000080)=0x80, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000}, &(0x7f0000000100)=0x10) ioctl$SIOCAX25GETINFOOLD(r0, 0x89e9, &(0x7f0000000140)) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:54:54 executing program 1: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x200, 0x4) 13:54:54 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:54 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4, 0x816}}, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 13:54:54 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180)={0xffffffffffffffff}, 0x111, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(0xffffffffffffffff, &(0x7f0000000200)={0x7, 0x8, 0xfa00, {r0, 0x6}}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 13:54:54 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:54 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) write$UHID_SET_REPORT_REPLY(r2, 0x0, 0xfffffffffffffc71) 13:54:54 executing program 1: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) 13:54:54 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:54 executing program 2: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x111, 0x5}}, 0x20) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 13:54:54 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4, 0x816}}, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 13:54:54 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:54 executing program 1: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 13:54:54 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:54 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000000), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x18, 0x3, 0x8, 0x401, 0x2, 0x6, "08b2ae0c05680bb1b03f6cbb478992239e309b75f1e83c99"}}, 0x130) 13:54:54 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 13:54:55 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f, 0xc}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r4, 0x816}}, 0x10) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 13:54:55 executing program 4: syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:55 executing program 1: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 13:54:55 executing program 2: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:54:55 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = syz_io_uring_complete(0x0) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x1, 0x2, 0x5, 0x6, 0x7b, "e89875718e4c42264e46561acf989351e7272f421f50c26c98e76b4eaf6ccce0d901ca7ab71a15448ac4abb221f48ecb55a31fc9caccc2946b95591f14184b", 0xf}, 0x60) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) ioctl$SIOCPNENABLEPIPE(r1, 0x89ed, 0x0) 13:54:55 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:55 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x13f, 0xc}}, 0x20) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 13:54:55 executing program 4: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 13:54:55 executing program 1: bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) 13:54:55 executing program 2: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:54:55 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r1}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 13:54:55 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:55 executing program 5: ioctl$sock_kcm_SIOCKCMUNATTACH(0xffffffffffffffff, 0x89e1, &(0x7f0000000240)) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) accept$ax25(r0, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @bcast, @bcast, @remote, @null, @bcast, @null, @null]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1, r0}) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000ffdbdf25010000000000003100000000"], 0x28}, 0x1, 0x0, 0x0, 0x8080}, 0x8001) r2 = syz_io_uring_complete(0x0) write$UHID_DESTROY(r2, &(0x7f0000000200), 0x4) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) ioctl$SIOCAX25ADDUID(r3, 0x89e1, &(0x7f0000000280)={0x3, @default, 0xffffffffffffffff}) 13:54:55 executing program 4: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 13:54:55 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x111, 0x5}}, 0x20) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 13:54:55 executing program 2: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:54:55 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x3, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) 13:54:55 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:55 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x111, 0x5}}, 0x20) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 13:54:55 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 13:54:55 executing program 4: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 13:54:55 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE(r0, &(0x7f0000000140)={0x0, {'syz0\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/235, 0xeb, 0x9, 0x7, 0x8, 0x10000}}, 0x120) 13:54:55 executing program 1: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000180), 0x111, 0x5}}, 0x20) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 13:54:55 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x3, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) 13:54:55 executing program 3: syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:54:55 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 13:54:55 executing program 4: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) [ 500.431083][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.453882][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.495137][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 13:54:55 executing program 3: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 13:54:55 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x3, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) 13:54:55 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 13:54:55 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) [ 500.537780][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 13:54:55 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x3, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) 13:54:55 executing program 3: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) [ 500.584936][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.621656][ T3234] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.628059][ T3234] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.660441][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.668021][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.710517][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.718317][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.770520][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.778276][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.798676][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.814468][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.824627][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.839040][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.874885][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.889261][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.904296][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.916000][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.928036][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.938287][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.952844][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.964606][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.974604][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.986621][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 500.996970][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.009043][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.020575][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.028118][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.035833][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.043660][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.051402][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.058876][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.067082][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.074816][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.084563][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.092556][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.100010][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.108753][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.124857][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.134928][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.146973][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.157062][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.169432][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.192550][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.200177][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.214517][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.226008][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.238139][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.248185][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.280515][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.288417][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.302634][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.310082][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.326161][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.336081][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.350678][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.364411][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.374392][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.396148][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.419437][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.439305][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.447150][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.461173][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.468745][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.483175][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.494377][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.505291][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.516180][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.528526][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.539752][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.554030][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.564421][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.575610][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.589496][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.604031][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.614226][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.626259][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.637515][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.649568][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.659533][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.674081][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.684143][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.696164][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.706447][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.718603][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.728494][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.737202][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.744949][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.752692][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.760137][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.767887][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.776077][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.783780][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.791504][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.806745][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.817802][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.826589][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.835152][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.844963][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.856875][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.866800][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.879375][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.894720][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.919215][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.947199][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.964553][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.975509][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 501.987622][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.006561][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.014280][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.028296][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.036432][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.052217][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.059687][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.075452][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.085256][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.097143][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.107070][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.119525][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.135887][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.145962][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.160019][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.167803][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.181655][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.189208][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.203347][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.214333][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.229372][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.240198][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.255660][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.264593][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.277364][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.286167][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.298879][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.307803][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.322210][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.329766][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.343598][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.355943][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.366811][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.377749][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.404682][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.414676][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.426580][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.436817][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.452809][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.472568][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.480223][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.503326][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.518979][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.531703][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.539173][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.557398][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.569726][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.582151][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.589708][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.607301][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.619621][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.632239][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.639708][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.658271][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.670632][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.678187][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.695610][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.708358][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.720760][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.728316][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.745539][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.759727][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.778318][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.797654][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.810244][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.823177][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.835666][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.847982][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.860800][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.868275][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.885283][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.898057][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.910643][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.918201][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.935522][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.948157][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.961125][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.968590][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.986637][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 502.998904][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.011631][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.019012][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.042821][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.050212][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.076715][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.090036][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.113355][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.129722][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.148283][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.167307][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.179676][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.198928][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.217635][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.229975][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.248785][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.268718][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.281257][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.288724][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.305548][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.318360][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.326053][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.338411][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.397648][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.435891][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.466014][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.490434][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.507027][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.536205][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.554096][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.580588][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.587973][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.612949][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.640475][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.647860][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.671594][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.696428][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.710784][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.718349][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.730653][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.738124][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.746219][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.770445][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.778008][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.787451][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.810573][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.818137][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.828517][ T8] hid-generic 0009:0007:0008.009A: unknown main item tag 0x0 [ 503.848863][ T8] hid-generic 0009:0007:0008.009A: hidraw0: HID v100.00 Device [syz0] on syz0 13:54:59 executing program 5: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) socket$inet6_udp(0xa, 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 13:54:59 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x3, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) 13:54:59 executing program 1: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:54:59 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 13:54:59 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x3, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) 13:54:59 executing program 3: syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) 13:54:59 executing program 1: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:54:59 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 13:54:59 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x3, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) 13:54:59 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000200)=0xe8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xf, 0xff, 0x5, 0x8, 0x40, r0, 0x5, '\x00', r1, r2, 0x5, 0x2, 0x3}, 0x40) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:54:59 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x3, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) 13:54:59 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 13:54:59 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair(0x3, 0x3, 0x4, &(0x7f0000000000)) 13:54:59 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:54:59 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 13:54:59 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) 13:54:59 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x3, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) 13:54:59 executing program 1: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:54:59 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) socketpair(0x3, 0x3, 0x4, &(0x7f0000000000)) 13:54:59 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @window={0x3, 0x80, 0x6}, @sack_perm, @sack_perm], 0x4) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000140)=@gcm_256={{0x304}, "e0793f191f49a89e", "1d4beb37b0d75c8dcd3c212700450b69d9f2c574a847a85190fdbf6b3047d265", "c7c86b48", "165cd15e2a905332"}, 0x38) r0 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@alg, &(0x7f00000000c0)=0x80, 0x80000) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={r0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00'}) connect$phonet_pipe(r0, &(0x7f0000000000)={0x23, 0xff, 0xff, 0x3f}, 0x10) 13:54:59 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) 13:54:59 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) socketpair(0x3, 0x3, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) 13:54:59 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 13:54:59 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 13:54:59 executing program 4: socketpair(0x3, 0x3, 0x4, &(0x7f0000000000)) 13:54:59 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:54:59 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) socketpair(0x3, 0x3, 0x4, &(0x7f0000000000)) 13:54:59 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 13:54:59 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) 13:54:59 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 13:54:59 executing program 4: socketpair(0x0, 0x3, 0x4, &(0x7f0000000000)) 13:54:59 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) 13:54:59 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 13:54:59 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 13:54:59 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x10008000, 0x40000004, 0x4, 0x200, r0, 0x7e7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x40) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:54:59 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 13:55:00 executing program 4: socketpair(0x0, 0x3, 0x4, &(0x7f0000000000)) 13:55:00 executing program 3: socket$kcm(0x29, 0x2, 0x0) 13:55:00 executing program 2: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 13:55:00 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r2, 0x10, 0x70bd2b, 0x25dfdbfd, {}, [@FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private1}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0x25}}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}]}, 0x7c}, 0x1, 0x0, 0x0, 0x2400c001}, 0x2040) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:00 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) 13:55:00 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x29, 0x2, 0x0) 13:55:00 executing program 4: socketpair(0x0, 0x3, 0x4, &(0x7f0000000000)) 13:55:00 executing program 3: socket$kcm(0x29, 0x0, 0x0) 13:55:00 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) 13:55:00 executing program 2: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 13:55:00 executing program 5: r0 = syz_io_uring_complete(0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) 13:55:00 executing program 3: socket$kcm(0x29, 0x0, 0x0) 13:55:00 executing program 4: socketpair(0x3, 0x0, 0x4, &(0x7f0000000000)) 13:55:00 executing program 1: socket$kcm(0x29, 0x2, 0x0) 13:55:00 executing program 3: socket$kcm(0x29, 0x0, 0x0) 13:55:00 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) 13:55:00 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xffffffffffffff50) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = syz_io_uring_complete(0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x8001) 13:55:00 executing program 1: socket$kcm(0x29, 0x0, 0x0) 13:55:00 executing program 4: socketpair(0x3, 0x0, 0x0, &(0x7f0000000000)) 13:55:00 executing program 2: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)) 13:55:00 executing program 3: socketpair(0x3, 0x0, 0x4, &(0x7f0000000000)) 13:55:00 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 13:55:00 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000011c0)={0xffffffffffffffff}) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000012c0)={&(0x7f0000001240)={0x68, 0x0, 0x2, 0x70bd28, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0x0, @link='broadcast-link\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4008010}, 0x40000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$inet6_tcp_buf(r1, 0x6, 0xe, &(0x7f0000000040)=""/4096, &(0x7f0000001040)=0x1000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000001080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000010c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, {0xa, 0x4e21, 0x938, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8eb}, 0xffffffffffffffff, 0x8}}, 0x48) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001140), 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r3, &(0x7f0000001180)={0xa, {0xa, 0x4, 0x3b}}, 0xa) 13:55:00 executing program 1: socket$kcm(0x29, 0x0, 0x0) 13:55:00 executing program 2: socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) 13:55:00 executing program 4: socketpair(0x3, 0x0, 0x0, 0x0) 13:55:00 executing program 3: socketpair(0x3, 0x0, 0x4, &(0x7f0000000000)) 13:55:00 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffffffffffea7) 13:55:00 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 13:55:00 executing program 2: socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) 13:55:00 executing program 1: socket$kcm(0x29, 0x0, 0x0) 13:55:00 executing program 4: socketpair(0x3, 0x0, 0x0, 0x0) 13:55:00 executing program 3: socketpair(0x3, 0x0, 0x4, &(0x7f0000000000)) 13:55:00 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={0x0}}, 0x24008001) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:00 executing program 4: socketpair(0x3, 0x0, 0x0, 0x0) 13:55:00 executing program 2: socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)) 13:55:00 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xffffffffffffff50) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = syz_io_uring_complete(0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x8001) 13:55:00 executing program 3: socketpair(0x0, 0x0, 0x4, &(0x7f0000000000)) 13:55:01 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 13:55:01 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x10008000, 0x40000004, 0x4, 0x200, r0, 0x7e7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x40) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:01 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 13:55:01 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) 13:55:01 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xffffffffffffff50) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = syz_io_uring_complete(0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x8001) 13:55:01 executing program 3: socketpair(0x0, 0x0, 0x4, &(0x7f0000000000)) 13:55:01 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x10008000, 0x40000004, 0x4, 0x200, r0, 0x7e7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x40) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:01 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x50, 0x0, 0x8, 0x70bd2d, 0x25dfdc00, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf9}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048010}, 0x20004018) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 13:55:01 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 13:55:01 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) 13:55:01 executing program 3: socketpair(0x0, 0x0, 0x4, &(0x7f0000000000)) 13:55:01 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000000)=""/117, &(0x7f0000000080)=0x75) 13:55:01 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xffffffffffffff50) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = syz_io_uring_complete(0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000080}, 0x8001) 13:55:01 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x10008000, 0x40000004, 0x4, 0x200, r0, 0x7e7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x40) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:01 executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 13:55:01 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) 13:55:01 executing program 3: socketpair(0x3, 0x0, 0x0, &(0x7f0000000000)) 13:55:01 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xffffffffffffff50) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_io_uring_complete(0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:01 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x22, &(0x7f0000000000)=0x6, 0x4) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f0000000040)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, 0x44}) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) 13:55:01 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x10008000, 0x40000004, 0x4, 0x200, r0, 0x7e7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x40) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:01 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f00000000c0)) 13:55:01 executing program 3: socketpair(0x3, 0x0, 0x0, 0x0) 13:55:01 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000000)=""/117, &(0x7f0000000080)=0x75) 13:55:01 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xffffffffffffff50) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_io_uring_complete(0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:01 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x4, r2}, 0x10) 13:55:01 executing program 4: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x10008000, 0x40000004, 0x4, 0x200, r0, 0x7e7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x40) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:01 executing program 3: socketpair(0x3, 0x0, 0x0, 0x0) 13:55:01 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, 0x0) 13:55:01 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000000)=""/117, &(0x7f0000000080)=0x75) 13:55:01 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xffffffffffffff50) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_io_uring_complete(0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:01 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000000)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x50, 0x2, 0xd, 0x1, 0x6, 0x4, "3ebda5f60afec99b872dccab3a5ac6093a5d7146c14053f86fc71ae39542088b4eca85958578e33549e201419aa589ff30df7d8516e95706290709ef5fbb75cc801939b7267090d339867a9ac93d24f1"}}, 0x168) 13:55:01 executing program 3: socketpair(0x3, 0x0, 0x0, 0x0) 13:55:01 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:01 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x10008000, 0x40000004, 0x4, 0x200, r0, 0x7e7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x40) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:01 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000000)=""/117, &(0x7f0000000080)=0x75) 13:55:02 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000240)="08ac39bbcd6f5ad811240153", &(0x7f0000000280)=@udp=r0}, 0x20) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000380)={0xe, {0x7, 0x3, 0x3f, 0xc2, "4ccad535c7c09068d13494843d1d040734665a03690eacf8bb5eb32daf089df525a114cb7a2fa9c2e942e434f2137fdf56139af686648c71a31b68b4c397acf730b454a35904da7822d81e9b2f3944481bdb8397078d7a3c1e61d5d5be561cfede9418ca0b5f2e31953c1aff55c6229120f92bb9ed286152875206137255cb2ab0b61f99f67b2303853838a1584f86b00ca4e59dcefd67324c41521988a8437270755011643c0519701f0da86379e1546726d67d0f66459c45efc7cc7f2ca4c68635"}}, 0xce) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x4010) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000001c0)={0x6, 0x95, {0x56, 0x8001, 0x5c, {0x3f, 0xfe01}, {0x3f, 0x6}, @rumble={0x401, 0x1}}, {0x51, 0x9, 0x3, {0xa6c7, 0x1}, {0x5, 0x1}, @const={0x101, {0x6, 0x3, 0x20, 0x4}}}}) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000300)={0x5, 0x2, {0x54, 0x8, 0x8, {0x4, 0x3ff}, {0x79, 0x1}, @ramp={0x7f, 0x1f, {0x0, 0x5, 0x105, 0x1bd4}}}, {0x57, 0x7, 0xfff, {0x4, 0x4}, {0x40, 0x9}, @const={0x55, {0x20, 0xfff, 0x80}}}}) 13:55:02 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x4, r2}, 0x10) 13:55:02 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:02 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xffffffffffffff50) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_io_uring_complete(0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:02 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)=""/117, &(0x7f0000000080)=0x75) 13:55:02 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x10008000, 0x40000004, 0x4, 0x200, r0, 0x7e7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x40) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:02 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x4, r2}, 0x10) 13:55:02 executing program 4: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:02 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xffffffffffffff50) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:02 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x2, 0x2c2000, 0x23456}, 0x8001) 13:55:02 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x10008000, 0x40000004, 0x4, 0x200, 0xffffffffffffffff, 0x7e7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x40) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:02 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x4, r2}, 0x10) 13:55:02 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xd, 0x10008000, 0x40000004, 0x4, 0x200, r0, 0x7e7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x40) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:02 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)=""/117, &(0x7f0000000080)=0x75) 13:55:02 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xffffffffffffff50) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:02 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xfdb5) 13:55:02 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:02 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)=""/117, &(0x7f0000000080)=0x75) 13:55:02 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x4}, 0x10) 13:55:02 executing program 0: bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:02 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:02 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) 13:55:02 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000000)=""/117, &(0x7f0000000080)=0x75) 13:55:02 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25={{0x3, @bcast}, [@remote, @remote, @rose, @bcast, @default, @default, @default, @bcast]}, &(0x7f0000000080)=0x80, 0x80800) getsockname$ax25(r0, &(0x7f00000000c0)={{0x3, @bcast}, [@netrom, @bcast, @netrom, @netrom, @rose, @remote, @remote, @null]}, &(0x7f0000000140)=0x48) socket$inet_smc(0x2b, 0x1, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:02 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x4}, 0x10) 13:55:02 executing program 0: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:02 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:02 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) 13:55:02 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) 13:55:02 executing program 2: socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)=""/117, &(0x7f0000000080)=0x75) 13:55:02 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x4}, 0x10) 13:55:02 executing program 0: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) 13:55:02 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) 13:55:02 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:02 executing program 5: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x11, 0xffffffff, 0x0, 0x8000, 0x3d18, r0, 0x4, '\x00', r1, r2}, 0x40) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:02 executing program 0: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) 13:55:02 executing program 2: socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)=""/117, &(0x7f0000000080)=0x75) 13:55:03 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x4}, 0x10) 13:55:03 executing program 0: openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) 13:55:03 executing program 4: socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)=""/117, &(0x7f0000000080)=0x75) 13:55:03 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:03 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000050000000206c8005f06d1bbf48bfa6b0a86f1ace01c487993d8fc7f44c0307d9d192068fd90f9f59ec415cd6747d466abafdabcc7e0be2439144f373404dedc93f3763f050274be7516c1aa0a4d0d090bd6cffc4cffc1813f0b9a6f7970a7f5fee38991f7093ae5d387dc8ee650abf94732aadad3c5424283711e729ac1d0519b5cad0027e282964d2437601c34681d99ad68c6bd2bb4b0bde73fed809d91e4b04480008d130bffebd7839ebf1c882aefe891c6ff2df5f604a4b7d5615dbbac71ee628c4d17be"], 0xd4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:03 executing program 2: socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000000)=""/117, &(0x7f0000000080)=0x75) 13:55:03 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x11, 0xffffffff, 0x0, 0x8000, 0x3d18, r0, 0x4, '\x00', r1, r2}, 0x40) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:03 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:03 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x4}, 0x10) 13:55:03 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffea4) 13:55:03 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:03 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000000)=""/117, &(0x7f0000000080)=0x75) 13:55:03 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) 13:55:03 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x11, 0xffffffff, 0x0, 0x8000, 0x3d18, r0, 0x4, '\x00', r1, r2}, 0x40) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:03 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:03 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:03 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, &(0x7f0000000080)) 13:55:03 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x4bd, &(0x7f0000000080)={0x0, 0x0, 0x2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x80132, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x50, r0, 0x8000000) 13:55:03 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) 13:55:03 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x11, 0xffffffff, 0x0, 0x8000, 0x3d18, r0, 0x4, '\x00', r1, r2}, 0x40) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:03 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) 13:55:03 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:03 executing program 2: r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, 0x0, 0x0) 13:55:03 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) 13:55:03 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000000)={0xb, {'syz1\x00', 'syz1\x00', 'syz1\x00', 0x6e, 0x9, 0x7fff, 0x6, 0x0, 0x101, "5833e9aa148a01135496424303dc6edf3b6eb0e8c315c51dc7c8668cd8b029b57c3f8826b5536d952fa3ee1f43b35f51cf443f4600d449a1d83f92ed1fd63929aecd097bd53f91d456016f017bea4edd19a0493daff06ccd101be6124a51a1a042fa65d942233340cc43b785a417"}}, 0x186) 13:55:03 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x11, 0xffffffff, 0x0, 0x8000, 0x3d18, r0, 0x4, '\x00', r1, r2}, 0x40) 13:55:03 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:03 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) 13:55:03 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x4bd, &(0x7f0000000080)={0x0, 0x0, 0x2}) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x80132, r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000002, 0x50, r0, 0x8000000) 13:55:03 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x4}, 0x10) 13:55:03 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000002c0)={r1}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r1, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) getpeername$ax25(r1, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r0, 0x4) 13:55:03 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x11, 0xffffffff, 0x0, 0x8000, 0x3d18, r0, 0x4, '\x00', r1, r2}, 0x40) 13:55:03 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) 13:55:03 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:03 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x4}, 0x10) 13:55:04 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffea4) 13:55:04 executing program 4: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff, 0x4}, 0x10) 13:55:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:04 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x11, 0xffffffff, 0x0, 0x8000, 0x3d18, r0, 0x4, '\x00', r1, r2}, 0x40) 13:55:04 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x4}, 0x10) 13:55:04 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffea4) 13:55:04 executing program 4: bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 13:55:04 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) r4 = accept4$ax25(r0, &(0x7f00000001c0)={{0x3, @null}, [@null, @netrom, @remote, @netrom, @null, @remote, @default, @rose]}, &(0x7f0000000040)=0x48, 0x80000) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000000140)) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000080)=0x5b) 13:55:04 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:04 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x11, 0xffffffff, 0x0, 0x8000, 0x3d18, r0, 0x4, '\x00', r1, r2}, 0x40) 13:55:04 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x4}, 0x10) 13:55:04 executing program 4: bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 13:55:04 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffea4) 13:55:04 executing program 4: bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 13:55:04 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffea4) 13:55:04 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:04 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x8}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x11, 0xffffffff, 0x0, 0x8000, 0x3d18, r0, 0x4, '\x00', r1, r2}, 0x40) 13:55:04 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 13:55:04 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x6) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x20, 0x80, 0x8d, 0x7, @time={0x0, 0xffff}, {0x4, 0x1b}, {0xfd, 0x81}, @raw32={[0x4, 0x5, 0x364041c3]}}, {0x81, 0x6, 0x4, 0x7, @tick=0x8001, {0x1}, {0x6}, @control={0x9b, 0x6, 0x7f}}, {0x0, 0xc5, 0x8, 0xb7, @tick=0x7f, {0x1, 0x81}, {0xad, 0x6}, @ext={0x86, &(0x7f0000000000)="68179ec625f5d124aebdd3abe56f6b3664d5ca018e3eb1b9e92a8f73da8a34e09bded25a28d8a850343f04e07af7c8263bfb2c48b2e65fb00830298ee2ff4f92f466ca25a2c66bc60bb31232ef9e6b4f282014dc51ca2062807419f56c5b4cfa4e0bcebf46071f909895e87b2d65d979f754032cafb4f9ed62db16399444795991eff7c5c7aa"}}, {0x7, 0x3, 0x7, 0x5, @tick=0xffff, {0x5d, 0x1}, {0x7f, 0x1}, @addr={0x20, 0x7}}, {0x80, 0x1, 0x6, 0x2, @time={0x34, 0x6}, {0x40, 0xf7}, {0x1, 0x1}, @connect={{0xe2, 0x2}, {0x7f, 0x1f}}}], 0x8c) 13:55:04 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffea4) 13:55:04 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) r4 = accept4$ax25(r0, &(0x7f00000001c0)={{0x3, @null}, [@null, @netrom, @remote, @netrom, @null, @remote, @default, @rose]}, &(0x7f0000000040)=0x48, 0x80000) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000000140)) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000080)=0x5b) 13:55:04 executing program 1: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:04 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x11, 0xffffffff, 0x0, 0x8000, 0x3d18, r0, 0x4, '\x00', r1, r2}, 0x40) 13:55:04 executing program 4: bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040), 0x10) 13:55:04 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={0x0}}, 0x24008001) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x33) 13:55:04 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x11, 0xffffffff, 0x0, 0x8000, 0x3d18, r0, 0x4, '\x00', r1}, 0x40) 13:55:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 13:55:04 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffea4) 13:55:04 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) r4 = accept4$ax25(r0, &(0x7f00000001c0)={{0x3, @null}, [@null, @netrom, @remote, @netrom, @null, @remote, @default, @rose]}, &(0x7f0000000040)=0x48, 0x80000) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000000140)) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000080)=0x5b) 13:55:04 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) r4 = accept4$ax25(r0, &(0x7f00000001c0)={{0x3, @null}, [@null, @netrom, @remote, @netrom, @null, @remote, @default, @rose]}, &(0x7f0000000040)=0x48, 0x80000) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000000140)) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000080)=0x5b) 13:55:04 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000040)={r2}, 0x8) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0x0) 13:55:04 executing program 0: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x11, 0xffffffff, 0x0, 0x8000, 0x3d18, r0, 0x4}, 0x40) 13:55:04 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 13:55:04 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffea4) 13:55:05 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) r4 = accept4$ax25(r0, &(0x7f00000001c0)={{0x3, @null}, [@null, @netrom, @remote, @netrom, @null, @remote, @default, @rose]}, &(0x7f0000000040)=0x48, 0x80000) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000000140)) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f00000000c0), &(0x7f0000000080)=0x5b) 13:55:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x11, 0xffffffff, 0x0, 0x8000, 0x3d18, 0xffffffffffffffff, 0x4}, 0x40) 13:55:05 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000040), 0x4) 13:55:05 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={0x0}}, 0x24008001) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x33) 13:55:05 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffea4) 13:55:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 13:55:05 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) r4 = accept4$ax25(r0, &(0x7f00000001c0)={{0x3, @null}, [@null, @netrom, @remote, @netrom, @null, @remote, @default, @rose]}, &(0x7f0000000040)=0x48, 0x80000) ioctl$SIOCAX25GETINFOOLD(r4, 0x89e9, &(0x7f0000000140)) 13:55:05 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 13:55:05 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000080)="2e7329cbcdb776b69be2ff6cb9b3f8b20035b78d20e6cef63ea9793f2cb57bc51f85bce23c111e7faba122c42a77e4a008da3217f6f8fdf6617941b7edec503bacd97154fcd53945c943fa7cb598f8cfa95f1c73f9b5533eaf", &(0x7f0000000100)=@buf="e3ade44a333c474ba5ff5cd4ec00015024fc68f7efc66ce0bb25b44694bf1e19958918be63d3e7235e9ddcbc154ee21d238a818632c7633709a1e6015add30526fad1cf7387b5abdfa0b0a65f56f1d9f890aea4a707112b4f4b1b61321bed1aabb059bb089c6285677fe64562d3bd41e11", 0x1}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:05 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={0x0}}, 0x24008001) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x33) 13:55:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:05 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffea4) 13:55:05 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) accept4$ax25(r0, &(0x7f00000001c0)={{0x3, @null}, [@null, @netrom, @remote, @netrom, @null, @remote, @default, @rose]}, &(0x7f0000000040)=0x48, 0x80000) 13:55:05 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 13:55:05 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={0x0}}, 0x24008001) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x33) 13:55:05 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) 13:55:05 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r1, &(0x7f0000000140)={0xe, {0x1, 0x4c, 0x1, 0x1a, "1b8238fafff06ddeadeb0cbf648fa4ff92f8a4546453e7922840"}}, 0x26) 13:55:05 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xfffffea4) 13:55:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:05 executing program 0: bpf$MAP_CREATE(0x0, 0x0, 0x0) 13:55:05 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x33) 13:55:05 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) 13:55:05 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 13:55:05 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xfffffea4) 13:55:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0xffffffff, 0x0, 0x8000, 0x3d18, 0xffffffffffffffff, 0x4}, 0x40) 13:55:05 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x33) 13:55:05 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000000)={0xa, {0x7, 0x4, 0x5}}, 0xa) accept$ax25(r0, &(0x7f0000000080)={{0x3, @netrom}, [@bcast, @remote, @bcast, @bcast, @bcast, @rose, @default]}, &(0x7f0000000100)=0x48) 13:55:05 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) 13:55:05 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:05 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xfffffea4) 13:55:05 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8000, 0x3d18, 0xffffffffffffffff, 0x4}, 0x40) 13:55:05 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT], 0x33) 13:55:05 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xffffff67) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000000), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000040)={@null, @null}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e020000060000003d018e00d2eb5e44998d9a054d42d569c781527477d8176bc397dad4bafee6bf362cf13ee1d3c62354b7a63a70b70dd6e05eab764dfe3d047afe5095cbcd62154466913a5798e8bd91b4d083358c340bbda710cbda95b30101e01dfbf7fa5cc39c5be3383130dac00fb682d79716766a7aede15b4371305574ff79e68e9a21e25c1f0993bfd28e00"/154], 0x9a) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000280)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x22, 0x243, 0x61c, 0x0, 0x3, 0xfffffffa, "21eae8ce941c74b3b1867db7193753c76afc886e22b2e374a545fc8efdb3035e662e"}}, 0x13a) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000580)="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", &(0x7f00000000c0)=@udp=r0}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001580)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0xb7, 0x1, 0xaa, 0x8000, 0x0, 0x0, "7ebf26fea95d6defeebab8fa9a6dc1be4de3a4134c76b65ca3b4b204ce5b0139c1dfd33f6d9c1680e67235d10b8f947e30f91788600d8ba8a0dc8146735647989ff639a202f30971b429b2d29349eb69f8266a2935131f992bde5699271403bbae4497397cdc514647ea0565f444c5a66cd4cf9aee3f33b90f5a209b2a2c24ca3517fbfece95a3b18294ed25c6fadece0931df4977ad27a47069c251ad5196efee16f5587f327a8a377dd379c7f34aea128579cff8b58f"}}, 0x1cf) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r3}) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000140)={0xa, {0x7, 0x0, 0x80}}, 0xa) 13:55:05 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffea4) 13:55:06 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x0, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:06 executing program 4: syz_emit_vhci(0x0, 0x33) 13:55:06 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3d18, 0xffffffffffffffff, 0x4}, 0x40) 13:55:06 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4040) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001040)={0xffffffffffffffff, &(0x7f0000000000)="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", &(0x7f0000001080)=@udp6=r1, 0x1}, 0x20) 13:55:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x0, @local}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:06 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:06 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffea4) 13:55:06 executing program 4: syz_emit_vhci(0x0, 0x33) 13:55:06 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x40) 13:55:06 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT2(0xffffffffffffffff, &(0x7f0000000000)={0xc, {0x95, "9f6a272e1e37e72af1371c4a54fc2d9621e2615cd96ff4ce930bc56ca0b885f96da2553416a685dcb66621d08a0d3307f2d97807c2771f8c2077e322f4de0dbb9b4e677e9152ff80088b59242b1da21aa5c177ec85d4177b3a3fa838a2cc4d146468c19b0f5c0c8787f67e2f938eaf2e09e8e72ea8c16a60cd1449465907454772205a6a09c8b457cc1644437286f99ffbdc0fce15"}}, 0x9b) 13:55:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x0, @local}}}, 0x48) 13:55:06 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:06 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffea4) 13:55:06 executing program 4: syz_emit_vhci(0x0, 0x33) 13:55:06 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffea4) 13:55:06 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x40) 13:55:06 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:06 executing program 1: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x0, @local}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:06 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x33) 13:55:06 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:06 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffea4) 13:55:06 executing program 1: syz_emit_vhci(0x0, 0x33) 13:55:06 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x40) 13:55:06 executing program 5: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x93, 0x3a, 0x8}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) 13:55:06 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x33) 13:55:06 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:06 executing program 1: syz_emit_vhci(0x0, 0x33) 13:55:06 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffea4) 13:55:06 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x3d18}, 0x40) 13:55:06 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x33) 13:55:06 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 13:55:06 executing program 1: syz_emit_vhci(0x0, 0x33) 13:55:06 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:06 executing program 2: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xfffffea4) 13:55:06 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:06 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x33) 13:55:07 executing program 5: setsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f0000000000)="be3484e33f0488d4b83274c9257fb78ad9ad1ca813f0fa454952fb71ff48126c9f38451f99f66dd0235d1c27bd23cc6e7ae7156d339d2aad785cf43fef7cf083412af31211c6d22e71c6e5526b11c93b1bd729db2180575cf5ed9b75adace7e01b4f4bc7463b833d62cc954ebadc64c27b1e74769f33f1cd97b030430dc9e5917a3218ea46be68ef31cd5fc29fa6ac7c5be31d", 0x93) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:07 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x93, 0x3a, 0x8}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) 13:55:07 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:07 executing program 2: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xfffffea4) 13:55:07 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:07 executing program 4: syz_emit_vhci(&(0x7f0000000000)=ANY=[], 0x33) 13:55:07 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x93, 0x3a, 0x8}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) 13:55:07 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) socketpair(0x25, 0x800, 0x5, &(0x7f0000000000)) 13:55:07 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:07 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:07 executing program 2: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xfffffea4) 13:55:07 executing program 4: syz_emit_vhci(0x0, 0x33) 13:55:07 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x93, 0x3a, 0x8}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000400)={'batadv_slave_0\x00'}) 13:55:07 executing program 5: r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x2010, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r0, 0x0, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x64}, 0x10000) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:07 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:07 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:07 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) socketpair(0x25, 0x800, 0x5, &(0x7f0000000000)) 13:55:07 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) socketpair(0x25, 0x800, 0x5, &(0x7f0000000000)) 13:55:07 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:07 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x93, 0x3a, 0x8}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) 13:55:07 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:07 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:07 executing program 5: r0 = syz_io_uring_complete(0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 13:55:07 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:07 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) socketpair(0x25, 0x800, 0x5, &(0x7f0000000000)) 13:55:07 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x93, 0x3a, 0x8}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) 13:55:07 executing program 5: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0xafa5, 0x4) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:07 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 13:55:07 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) 13:55:07 executing program 4: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0xa, 0x0, 0x0, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:07 executing program 2: socketpair(0x25, 0x800, 0x5, &(0x7f0000000000)) 13:55:07 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, {0x1, 0xbc, 0x2}}, 0xa) 13:55:07 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x93, 0x3a, 0x8}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:07 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) 13:55:07 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) 13:55:08 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) 13:55:08 executing program 2: socketpair(0x0, 0x800, 0x5, &(0x7f0000000000)) 13:55:08 executing program 5: r0 = syz_io_uring_complete(0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r0, &(0x7f0000000040)={0x1, 0x10}, 0x18) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0)={0xffffffffffffffff}, 0x0, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r2, 0x5, 0x0, 0x0, 0x0, @ib={0x1b, 0x8, 0x60, {"6fe5fc7b09a6c065036e5eb9ca26386d"}, 0x200, 0x1, 0x9}, @ib={0x1b, 0xfff, 0x200, {"5098d1cb3ece169e3b61dc829469818e"}, 0x97, 0x101}}}, 0x118) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:08 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) 13:55:08 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x93, 0x3a, 0x8}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) 13:55:08 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 13:55:08 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) 13:55:08 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:08 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x93, 0x3a, 0x8}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 13:55:08 executing program 2: socketpair(0x0, 0x800, 0x5, &(0x7f0000000000)) 13:55:08 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000040)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x50, 0x2, 0x1, 0x9, 0x1f, 0x3, "2553304035679521bd980c65e49c17da993b995d8595a2b70dbb2d8ebf225d61dba7022799bf7d2e0ff1cd0581707ec898ecc100140fedff1dc39667baa4458fa06692fe87da153128bbd103037c9e5c"}}, 0x168) 13:55:08 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 13:55:08 executing program 2: socketpair(0x0, 0x800, 0x5, &(0x7f0000000000)) 13:55:08 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:08 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) 13:55:08 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x93, 0x3a, 0x8}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 513.176276][ T36] hid (null): global environment stack underflow [ 513.186237][ T36] hid (null): invalid report_count 47719 13:55:08 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 13:55:08 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) [ 513.217755][ T36] hid (null): report_id 674305498 is invalid [ 513.251875][ T36] hid-generic 0002:0001:0009.009B: unknown main item tag 0x3 13:55:08 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) [ 513.297755][ T36] hid-generic 0002:0001:0009.009B: unknown main item tag 0x4 [ 513.336220][ T36] hid-generic 0002:0001:0009.009B: global environment stack underflow 13:55:08 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) 13:55:08 executing program 2: socketpair(0x25, 0x0, 0x5, &(0x7f0000000000)) 13:55:08 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) [ 513.391883][ T36] hid-generic 0002:0001:0009.009B: item 0 4 1 11 parsing failed [ 513.428762][ T36] hid-generic: probe of 0002:0001:0009.009B failed with error -22 [ 513.486451][ T8] hid (null): global environment stack underflow [ 513.497114][ T8] hid (null): invalid report_count 47719 [ 513.521225][ T8] hid (null): report_id 674305498 is invalid [ 513.555277][ T8] hid-generic 0002:0001:0009.009C: unknown main item tag 0x3 [ 513.578114][ T8] hid-generic 0002:0001:0009.009C: unknown main item tag 0x4 [ 513.602539][ T8] hid-generic 0002:0001:0009.009C: global environment stack underflow [ 513.623475][ T8] hid-generic 0002:0001:0009.009C: item 0 4 1 11 parsing failed [ 513.642422][ T8] hid-generic: probe of 0002:0001:0009.009C failed with error -22 13:55:08 executing program 5: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/52, 0x34, 0x8, 0x8000005, 0x4, 0x0, 0x2}}, 0x120) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) write$UHID_INPUT2(r2, &(0x7f0000000080)={0xc, {0x53, "3e851a3d10e7a067f0f899e7fe369e75abf783bf482f147222f723029a0639006d83190a7b5a7aa7f36d187ee2984ff9beeba5b2d4f3077ba9e3d156da2e6e4cf82e2ba018a360c24d3c3499ffa38827473dc3"}}, 0x59) 13:55:08 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:08 executing program 4: syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) 13:55:08 executing program 2: socketpair(0x25, 0x0, 0x0, &(0x7f0000000000)) 13:55:08 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:08 executing program 0: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:55:09 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) 13:55:09 executing program 4: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 13:55:09 executing program 2: socketpair(0x25, 0x0, 0x0, 0x0) 13:55:09 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:09 executing program 0: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:55:09 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000040)=""/244, &(0x7f0000000140)=0xf4) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xa, {0x3, 0x7, 0x4}}, 0xa) 13:55:09 executing program 2: socketpair(0x25, 0x0, 0x0, 0x0) 13:55:09 executing program 4: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 13:55:09 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) 13:55:09 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:09 executing program 0: openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:55:09 executing program 5: sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x40}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x408c0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, 0x0, 0x800, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x4, @bearer=@udp='udp:syz1\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0xc0001) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x4c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={'\x00', '\xff\xff', @remote}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40005}, 0x40000) 13:55:09 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) 13:55:09 executing program 2: socketpair(0x25, 0x0, 0x0, 0x0) 13:55:09 executing program 4: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 13:55:09 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:09 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000040)=""/244, &(0x7f0000000140)=0xf4) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xa, {0x3, 0x7, 0x4}}, 0xa) 13:55:09 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xe, {0x5, 0x3, 0x7f, 0x6, "add6af2e5776"}}, 0x12) 13:55:09 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(0x0, r0) 13:55:09 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000040)=""/244, &(0x7f0000000140)=0xf4) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xa, {0x3, 0x7, 0x4}}, 0xa) 13:55:09 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/52, 0x34, 0x8, 0x8000005, 0x4, 0x0, 0x2}}, 0x120) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) write$UHID_INPUT2(r2, &(0x7f0000000080)={0xc, {0x53, "3e851a3d10e7a067f0f899e7fe369e75abf783bf482f147222f723029a0639006d83190a7b5a7aa7f36d187ee2984ff9beeba5b2d4f3077ba9e3d156da2e6e4cf82e2ba018a360c24d3c3499ffa38827473dc3"}}, 0x59) 13:55:09 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:09 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000040)=""/244, &(0x7f0000000140)=0xf4) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xa, {0x3, 0x7, 0x4}}, 0xa) 13:55:09 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000)="729b0b9b14e763cba9e0d440bef6b44137b4658016f5380802d2b0781c948633090b6e5b21c791cece4698d502dc3b4ad0e358d2cf874ec179f20464ef4bd99d71c55756f7779eabde8f7d787242eb778376541bfdc9d1eda01a5b0b5af87dc3f4ca9afe4ea61c9baf10b218528281d58f33e527d3b76a949f53030a890e1d11fdf8a63cce3609146df275cc06e8b454a3d8c3136836abe2f4b892013a1b0f8b0d6147d67fc9f87656ee5b548232eebc88ff8c1eda66", &(0x7f0000000100)=@udp=r2}, 0x20) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:09 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000040)=""/244, &(0x7f0000000140)=0xf4) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xa, {0x3, 0x7, 0x4}}, 0xa) 13:55:09 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/52, 0x34, 0x8, 0x8000005, 0x4, 0x0, 0x2}}, 0x120) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) write$UHID_INPUT2(r2, &(0x7f0000000080)={0xc, {0x53, "3e851a3d10e7a067f0f899e7fe369e75abf783bf482f147222f723029a0639006d83190a7b5a7aa7f36d187ee2984ff9beeba5b2d4f3077ba9e3d156da2e6e4cf82e2ba018a360c24d3c3499ffa38827473dc3"}}, 0x59) 13:55:09 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) 13:55:09 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:09 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000040)=""/244, &(0x7f0000000140)=0xf4) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xa, {0x3, 0x7, 0x4}}, 0xa) 13:55:09 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000080)={0x6, {0x200, 0x40, 0x6, 0xe3ed, 0x0, 0x7fff}}) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x2b) 13:55:09 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000040)=""/244, &(0x7f0000000140)=0xf4) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000000)={0xa, {0x3, 0x7, 0x4}}, 0xa) 13:55:09 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:09 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/52, 0x34, 0x8, 0x8000005, 0x4, 0x0, 0x2}}, 0x120) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) write$UHID_INPUT2(r2, &(0x7f0000000080)={0xc, {0x53, "3e851a3d10e7a067f0f899e7fe369e75abf783bf482f147222f723029a0639006d83190a7b5a7aa7f36d187ee2984ff9beeba5b2d4f3077ba9e3d156da2e6e4cf82e2ba018a360c24d3c3499ffa38827473dc3"}}, 0x59) 13:55:09 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) 13:55:09 executing program 5: getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)=""/161, &(0x7f0000000100)=0xa1) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 13:55:09 executing program 0: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x93, 0x3a, 0x8}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 13:55:10 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:10 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000040)=""/244, &(0x7f0000000140)=0xf4) 13:55:10 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/52, 0x34, 0x8, 0x8000005, 0x4, 0x0, 0x2}}, 0x120) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) 13:55:10 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) 13:55:10 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r1}) 13:55:10 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f0000000040)="cacdfa7e48bb55f932a4054c1430ab8b2140c860", 0x14) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r0) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x20000040) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x1, &(0x7f0000000000)=0xf0, 0x4) 13:55:10 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:10 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/52, 0x34, 0x8, 0x8000005, 0x4, 0x0, 0x2}}, 0x120) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) 13:55:10 executing program 0: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/52, 0x34, 0x8, 0x8000005, 0x4, 0x0, 0x2}}, 0x120) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) 13:55:10 executing program 3: getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000040)=""/161, &(0x7f0000000100)=0xa1) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 13:55:10 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x9, &(0x7f0000000000), &(0x7f0000000040)=0x4) 13:55:10 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)) 13:55:10 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/52, 0x34, 0x8, 0x8000005, 0x4, 0x0, 0x2}}, 0x120) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:10 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:10 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000040)=""/244, &(0x7f0000000140)=0xf4) 13:55:10 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:10 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) 13:55:10 executing program 5: sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x14, 0x18, {0x400, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:10 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/52, 0x34, 0x8, 0x8000005, 0x4, 0x0, 0x2}}, 0x120) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 13:55:10 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:10 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000000)=""/232, &(0x7f0000000100)=0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r2, 0x1}}, 0x18) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:10 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)) 13:55:10 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:10 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r3, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) 13:55:10 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/52, 0x34, 0x8, 0x8000005, 0x4, 0x0, 0x2}}, 0x120) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 13:55:10 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:10 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:10 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCAX25CTLCON(0xffffffffffffffff, 0x89e8, &(0x7f0000000000)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast, 0x3, 0xff, 0x1, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @null]}) 13:55:10 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) 13:55:10 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000000)=""/232, &(0x7f0000000100)=0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r2, 0x1}}, 0x18) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:10 executing program 1: socket$phonet_pipe(0x23, 0x5, 0x2) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:10 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000000)=""/232, &(0x7f0000000100)=0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r2, 0x1}}, 0x18) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:10 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) 13:55:10 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:10 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_CREATE(r0, &(0x7f00000001c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000040)=""/52, 0x34, 0x8, 0x8000005, 0x4, 0x0, 0x2}}, 0x120) 13:55:11 executing program 5: r0 = syz_io_uring_complete(0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 13:55:11 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:11 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000000)=""/232, &(0x7f0000000100)=0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r2, 0x1}}, 0x18) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:11 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) 13:55:11 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) 13:55:11 executing program 5: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x8000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x240408c0) 13:55:11 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:11 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:11 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 13:55:11 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) 13:55:11 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:11 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000000)=""/232, &(0x7f0000000100)=0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r2, 0x1}}, 0x18) 13:55:11 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r2, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) 13:55:11 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x2e) 13:55:11 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:11 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000000)=""/232, &(0x7f0000000100)=0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:11 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:11 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:11 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:11 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) 13:55:11 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x1}}, 0x18) sendmsg$802154_raw(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000080)={&(0x7f0000000580)="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", 0x1000}, 0x1, 0x0, 0x0, 0x40}, 0x67d061ef775e0dcd) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000004c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4004, @fd_index=0x6, 0x9, &(0x7f00000003c0)="96f04829732141c7f7ab749aee00b5b334008ab742503aa0b78d7463f94769767cf4cd90909624d3b14b5d1dd65a0e39656b02e084bd0e9a096e44466c193bdea5cf6b2ee886f7d554ed2611b8c279c5013f14b94fd0afc19b498e1e68923c5d4fa280ccdcb9b6c3f67fc49c6594c62cdb52a9fdf84e888ebb25353dee524e3867021dff4f38872930ca38f0e34922395ae3b4885013633c77c38978bd06a32ff3b53e5ae419b95474b58e60f6692448f57e7441fe08799e73f149ed7e0fffebff2fe9ee0880c900f57162f27a172af8e9faa74c2d6578a6f687c1092a157d43268acc8b", 0xe4, 0x4b48ef6a8b20572f}, 0x1ff) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @timestamp, @mss={0x2, 0x1000}, @mss={0x2, 0x80}, @timestamp, @mss={0x2, 0x2ce}, @mss={0x2, 0xfc59}], 0x7) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 13:55:11 executing program 3: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:11 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 13:55:11 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:11 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 13:55:11 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) 13:55:11 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:11 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 13:55:11 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:11 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) 13:55:11 executing program 3: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 13:55:11 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x1}}, 0x18) sendmsg$802154_raw(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000080)={&(0x7f0000000580)="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", 0x1000}, 0x1, 0x0, 0x0, 0x40}, 0x67d061ef775e0dcd) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000004c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4004, @fd_index=0x6, 0x9, &(0x7f00000003c0)="96f04829732141c7f7ab749aee00b5b334008ab742503aa0b78d7463f94769767cf4cd90909624d3b14b5d1dd65a0e39656b02e084bd0e9a096e44466c193bdea5cf6b2ee886f7d554ed2611b8c279c5013f14b94fd0afc19b498e1e68923c5d4fa280ccdcb9b6c3f67fc49c6594c62cdb52a9fdf84e888ebb25353dee524e3867021dff4f38872930ca38f0e34922395ae3b4885013633c77c38978bd06a32ff3b53e5ae419b95474b58e60f6692448f57e7441fe08799e73f149ed7e0fffebff2fe9ee0880c900f57162f27a172af8e9faa74c2d6578a6f687c1092a157d43268acc8b", 0xe4, 0x4b48ef6a8b20572f}, 0x1ff) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @timestamp, @mss={0x2, 0x1000}, @mss={0x2, 0x80}, @timestamp, @mss={0x2, 0x2ce}, @mss={0x2, 0xfc59}], 0x7) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 13:55:11 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:11 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f00000000c0), 0x8) bind$802154_raw(r1, &(0x7f0000000100)={0x24, @long={0x3, 0xffff, {0xaaaaaaaaaaaa0102}}}, 0x14) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000040)={0xe, {0x5, 0x20, 0x1, 0x40, "f6b76be8b727a8c619d8c7a65c64f89e71492f2ea1ccb5965e881bc9dcb7f05868f6a42a2cb3316d5fd95851ae8e507a3ad5852c944a26a75bcf38c41eea3d83"}}, 0x4c) 13:55:11 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) 13:55:12 executing program 3: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 13:55:12 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:12 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x1}}, 0x18) sendmsg$802154_raw(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000080)={&(0x7f0000000580)="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", 0x1000}, 0x1, 0x0, 0x0, 0x40}, 0x67d061ef775e0dcd) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000004c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4004, @fd_index=0x6, 0x9, &(0x7f00000003c0)="96f04829732141c7f7ab749aee00b5b334008ab742503aa0b78d7463f94769767cf4cd90909624d3b14b5d1dd65a0e39656b02e084bd0e9a096e44466c193bdea5cf6b2ee886f7d554ed2611b8c279c5013f14b94fd0afc19b498e1e68923c5d4fa280ccdcb9b6c3f67fc49c6594c62cdb52a9fdf84e888ebb25353dee524e3867021dff4f38872930ca38f0e34922395ae3b4885013633c77c38978bd06a32ff3b53e5ae419b95474b58e60f6692448f57e7441fe08799e73f149ed7e0fffebff2fe9ee0880c900f57162f27a172af8e9faa74c2d6578a6f687c1092a157d43268acc8b", 0xe4, 0x4b48ef6a8b20572f}, 0x1ff) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @timestamp, @mss={0x2, 0x1000}, @mss={0x2, 0x80}, @timestamp, @mss={0x2, 0x2ce}, @mss={0x2, 0xfc59}], 0x7) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 13:55:12 executing program 4: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) 13:55:12 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) 13:55:12 executing program 3: bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 13:55:12 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x1}}, 0x18) sendmsg$802154_raw(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000080)={&(0x7f0000000580)="cc544d987e82605b437e780a6727fc4eff212081f4a4032afc3435a54b9eb217bf166e7e0801e9801893f53657230d1635131d388be5c7abe66828ae029b6b22a4f8a77322e1069efddc742c04db389a86638da64a71f6bb51abe84c0e412641a5cd72a75b6505d3678b937ed1512efd90e7f64dfd84078004bf10f3be1170b7a07a2a80bdefd2aa70984082759e1b9dd655f130260771157b948634a50fc0235d65a0a910ca579cc7ec393083c84a37c20b5e3ed2e6a9be9e53d738cccb7b650b0b9d0bce40f2af3ceab7fb0a30619dd3f9183950e7b7e0b38577f8b0f0f69d00cee7ae7bd908ce6aabb1468f932ba037c9013d697c0fe2ef3eae24b6b909888a9b1f5459511953ecfbdb8067ad0679a2b9916d0b4cd4469b6c802c880702e5bb16701807a575bae8ec10a0bfad3a86475fa3f18b4c2aa48a5a836f4b68fd2715747490e7480250c63f880789d38bd5ea1d91a6fdf2c4103de885b1c3758bfc28e4d03c681713e12362a46aae9e2c97101d439b4fbabcde07624160e8ce3f2c264f3c87c4a9f0bc624b7cd11646595722c2d05f2dca7abc639d02f4a1f25969f0fa56efd354374022c8d7378febc57225626a575e292ace1211970a966ebfa66116897104e9d8d0d509c9206332328e1ea7dea34f870c4420f7da4678a3608ab85fa48d26ec63ebd2ecd2b0f8fb998a293be6ee8c5533e7b9159dfd54acfae4ca477df7545294c9ced3e578d7111e8706045c80cf970b6ddcd66dc06890cec2187668e21aff81b942c039f3d9a874b2531676bbb239cc68b5e2659344fc815cfc28f8654fdeb4bc78d9b5f93a9b93d0fbfcb7cd306f5949366577c2987705582a37b510295d4e088fb5f3ecd9c0c38a1d4965c5e06b420f155807ef0860b6ecad7f9c4b9c383bd471fc989984f6e5753f4488c86d8c54d7248afa7e6d8269fe50ca35f34133687798d8c907cfd98ddfcd7ea0a061c91088ec0b14e678b62c6a3f9709c5bc64fc9159a690685bc46b4f8e586486f50c6add8fe5fd8832d3ead30848289c9221317cdd607950e4944036dfa98fca959802df7f582178bfb91ef7efcae4f6b9e4f1fbd4f24520c69ee3bdef298550defd10321da50bb24353762992a4102ac0c146485794d178f0ca2da1bc30b0b8cad1e0353fb9b8eae3d04575813ac4f294bb0836146729f526709cb926fd6662e25fc1a3fa27fd6bb344231e6b1a51111f4ac3464512e5de709ff0a811bba5c15dfda4e97510e27bf4dba57ea18d626d6a56262afc26f8c69c42e7fe4c51702898c6ddc52ef46ce402811efae9b4d470106fdd1b16ad918352f858531be27032e60544a6601d8a8d7c5bd5b6c49dba08b874aa33eb9076c285a54e3c888232587f794203f49b0679379bf1929fcbe0292fe6c8cc280cb714cf8b2b0d95d9a855660dde951ae0551b433efd31303699621fccd825a75690b164852b445959214320e3b2040c6bfcdb8f854545d3789a8a39b7cee53ce7c66fe476e195d171475fb1cd06673f32da491b5154e50160bed6a52dbcb222116ab1e57d5a6fb067295147c7a2c14bb2647da121546601a4f5bab476298f76e09fd57dd1cb2a23c79a20a82bb79f1cb2d24e6e3e61091f799ebfc0dfb6e6aaaf03bb24688ef895184814a636bfdc0d61b93dc31e9fe32744b6c0064c82559ee3eea67f955219f6a18105df69b913818d6f2afa5850828bd1f39a90340ed45b530a634d3fe6f2ff29629b74fa84c08bf37f7e233b92fcbc25cece91bb4db4008c348a701c1031d627934db684bdec56228a249638897cd7cbcde989cf84766de4e725f5d01dcbafd1d7fa2c2f55c430bc3d086890ef6adb631fdea71c750cab9dd458a0fad4d39d38ff9096a4945ecb396ff842cf49eaddf90dda81e34ae4c8b982bfde5c87348f902a536fa80d3b0b438a296a04754a39955ee23638c276b491d32a1c84de438f86f4d3b7c5a946358292e228f3fb5ece33f15be1ef730e34ed2ac3199ce01d3acf316991a014f6a06299e78c6ade0f325a0adccfae6dd3433656e0ae5fd7c6e18da7991fc8ef7d7c9c4fa1eba2b4bd3448b3a14fa2affe26676cdfc9eb01613e31925098341e84e43ecffe3ef3be87806196cdf19a2580e684ba1cc10b39de4d2d4d66956e807ca86c70360c8e16fae5ab98a3bd93a0d499e8a6dd1cef8ca55e48feb3efcd76e594f7726480cb86e16969d98f6ed7624154a77fc2aeb6cd78ed0ebc9f57ea2069a8b1170bf4918d739f7e612e765f70bd6a824d3f846edcdfc3864f74e75f7864c41dd4c6fddb8db86b28f34a2048cdb4929bf4eeae9548cea45bd97ec6e93dcfe1b16c62af62c9b2bc2a112e8a86abe52dfbf277580a89cccf1693a328e856b3400e3746146e82e17ef8a6d7974e5336070a137f65e7d98f775cac51a47170b985a8b4f80202c6d86ad6475c104857665d1c71cc73b7cdd785ce685bcc0642ccb1f8b6db1d2bf420daddf1522f4f1bc834e8f9f466cceb549fc8763d04b07632e2a0c27d3a61ee612304ed54b217c41e609713efcc5fa70d9b67b0770d76a721620813a0356d72187651e28ee8fda1d2399e5bc0a366be860bcb044e8af397ee35d425a2fe40b2899dbbdd4d5aa59e20f6dc3c872704c2639b32cb17b3344bc7dff5a7e4770deab3aa916fd8446cd6e549ab42ca971ba73c8942221f7a760cfe70d0a45c7e9e002331c339809b3cf5e86db50a0d5d843567eabbbaa8d21fe4771f9df43446a2f567c6ddf0158672cc1e6dc3ce15a29ca21172a94b157fa48a5f7a92347e83da311324d53ee28a66e8244a59d2d07ce046565f5faaff22b98f8de9effe9ac06e159b0a772a4a4b401576b9dcbbcf77fe492eef0c4682f34445bb2bcdd0865e45dc1eaeaaa545eb7184ba68398070dd1127cfeeca9e0d1da29441bbaf39fe92801cdb554e08ff19bd75cd89cee8dd8c36ceb04908a27ac307828610089c99b362ee3ee8a199f6e8af737e73eff0e7ad381f00b6eb2272bcda22478d661349153dfea70f33d589aa5308e5b086d2c3d403b249fba8445ea6ba516bddbc0fc3951efc10a563d191f6dcb761a5ef9253134c16ed32ed63916bbba59d9a84c1fe9eeaf8d5e54cea310743dc4ff96ddc78a32281b9ed1651d774fed7903c428acbf12f550d3965f36c5d4c581dfb6f80e313cba9d56efd5405cbc736cad6b7bb823246930280718d3586cd9fbd89db6657a4493be5b19e1a5232a2f45685f123d03dfadfc72695e3ddd1477a4dc53e4d356d38d4537a5bfb49b75b2b0a621c318372a4e992a63627ae567409f25d2c7bacb55f57a2aabdaad5065b8927c53faa05088156a98e3a5bd1c9decfb66f09fc03669fb78d075edf9da75fe1561e356d2a489c994305a440d48a81f982dea056dfa8bd4a9a0fbfabe2ff51746aeec3260831461b299bde362d5c488c8a09387cb32953a408dcaab15c848ecbed36cb929194c6d6b3a90f3bbd3609dc9c7ad60ce802614e9407b1639d65530abc44a05254868dd62b4a5cef95434be4213c7e0c21e6996cde505c856de26a4ac9eda0cbff8114efda99a87ef041c1b0a380e0c4190768ad7ebd3b1a60546a44bf5a7d10acfa99b001c2a2b3a1c5ffc1611a5307c56ce00b517172ab62825ba6f5dff9bdd0109e4bf829b93d86b0a080766335edae63b8fa48f151354968e502f3e15cc73b1bcbfb6219d408f5151bd24303810e220352af46b6d4bd4f150e99fa843f905b4842be6637aca3ca0f2b1a4a8f9fa54b3c706c870ea3b15d771fc3b431189fe860c5999fe817bfc5a0741ffd39d6a0b33f00f765313d58fa34decf9c93a6d2301617918daa75a19a0bf80c3edc26b240c9b4c68c9fcb81f898595169028d1f212601095dc8dd3a0ef06e39ba421764265838d7d2d38fbb955095b6c1dd4c41a140e3a9114222ed7b4a9accf0b880f3df4b980121c8fc39e9ace75f4a2841de6303ff3d92caa86c21a330b93e2d37f6b4cf7b529e181479289f9d8ffda3a41ef9f5c2ed44b664df08afda79a1645fddd09cb974baf67ebf094de66a562d1fb71ff4f7bb7bb97f86bb1607a28bcf48b46b8556b0ad0134273b980971573426514b1ce31ad6dc99b28e96905b5f39d175fd931d9639c133f65b263a367c67c12218ef250213bd355208d1801120e1adc45448b767435d92ecc521299be43de3dca93496a9859f8d0e22d804953ea690aa38d0cea599eb891248f9ed4e2a744a51fbdc62f7cc31dfa00b7992db300a596dc8df709b181d73c0396065d8277e691f956c746272b00abc17dedc20c0fa5a006bf4e5eb85bcf37e7209168702bb4b1188a5214cab3004ba70f38883da213429e1c4519444432e45d175aeedfedf7f8c7c42a6a69dfb07aabd7384bfcc7cb0c6059261a13ea13bd2c173faa46642305e5ee58c940e63746e00cbfe8aea36f238bf88a17579b6d4e0db265bc6fd09e0f5ae053558734fb4d5ed3a596b8caa3cecbe2c27348b4987fc34ea3d853b59f7a2859cdf15c0f2ffb9a6fba6b099b1556f86d1ea6ef464f37ebaedd474f27da8e9e020441a8118658801e1f36c9f664b06e0fbe4dc60595cdd243072ff197e36ebf37b8e34dd458f5322741338deca19968d6b49ea0570e33c172a3d460d48a941cd8d7810842fdc3860ae7f6312fd1e1c5f9563d994af0904f1f6ad78b366cc8a1683867296fa5d8d896a165564296e8bda3c6caeeb76b2fc52ca45f28567405650e2cdaf5c217d3c363fae692f1543a6e4b519787a2cb69dfa5329469c18be5106e83b73e3608eb71d5c3fea5de7350faaf7e6ae5c0b9d5e1ae72a48b32c14563cbec534402122f5830ce099f435ff94c42958d47088c9dd758ac9570e30c935e1801a6cebf02890ab0f63dfea9a36c73f3e11990c3eb108078d65fcdeb96975647d8c652873ebaf95c1905f433b32146e36d1f11bb540a0200b534aa1c6b89722c316bab9f90ceb74b58cd139eaf3347f1012c7f5103cea7a5caa909f9fed3285b36e5ca83ac2eb0e983c5e28ba0dfe8a84f4bc6e161ca259894a63a0f6dac851f53fe87921be2bddf58bec1f4410055be4281f5d1f0da68776b841c9af7a69683d3338dfca17be76e5a575fcded40835c07ee5ccd0e1b79c9c18d5e79935d91258178b2985e8ce7bd773e940f7182946ecd4c030d7de00c134e342a5a8f8beb4cc4392de60c50e52a36a0569e756f61a8d520a776e67f46b32f9de7973c17bd66bd0f5cf77328651f94996d3bef7cec74321580d27c3ea03a5b3ca211af995adcbd21ffc80acb2d405185033d1f128fd05f3051bfc53c6d6f1888e692330e01aa38f4440d08b2ddb7a76dff5ddb277c34af8a10440f641d5b13bc82a308d79d05e25d2baf4c9e3e5200d4442f50f7303702262c19bb97cd8e20d2fdbd1a3ed1ece9e76d4d49f1e844df5eacaecfcbac335d29f42d5ffe35c4ff4a56a55300381e9180565ed732f1a9baf970be34508d5b12739a8c2062fe9b32bb3bda620a296aed10215a90841661b002bd306b5946f7631ab3a3289d9c5295027500d822fadcd5e6abb8d65676bd889486b1334d3fa217a2e08915d18d89796f06caa3ea6d9e83daf2cf5aa9e331a9c29f3bd19a531efe34b2185142dd97b3fe6ae9110feb602b605b89cdfe146439010b15629a48c93792f2a99dfc799fe4ecb7d48272de7c33a33273df2d7d3b68b7cc368b7f40a7377ffcc0aad01b8a5d18510be1294f7ddb6e4922cd1a2503990256361f8ccb7e1f831106cfdd1704b1decfdac6a73f190d54bd5", 0x1000}, 0x1, 0x0, 0x0, 0x40}, 0x67d061ef775e0dcd) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000004c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4004, @fd_index=0x6, 0x9, &(0x7f00000003c0)="96f04829732141c7f7ab749aee00b5b334008ab742503aa0b78d7463f94769767cf4cd90909624d3b14b5d1dd65a0e39656b02e084bd0e9a096e44466c193bdea5cf6b2ee886f7d554ed2611b8c279c5013f14b94fd0afc19b498e1e68923c5d4fa280ccdcb9b6c3f67fc49c6594c62cdb52a9fdf84e888ebb25353dee524e3867021dff4f38872930ca38f0e34922395ae3b4885013633c77c38978bd06a32ff3b53e5ae419b95474b58e60f6692448f57e7441fe08799e73f149ed7e0fffebff2fe9ee0880c900f57162f27a172af8e9faa74c2d6578a6f687c1092a157d43268acc8b", 0xe4, 0x4b48ef6a8b20572f}, 0x1ff) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @timestamp, @mss={0x2, 0x1000}, @mss={0x2, 0x80}, @timestamp, @mss={0x2, 0x2ce}, @mss={0x2, 0xfc59}], 0x7) syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r0) 13:55:12 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:12 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xffffffffffffff4c) 13:55:12 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 13:55:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) 13:55:12 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:12 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x1}}, 0x18) sendmsg$802154_raw(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000080)={&(0x7f0000000580)="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", 0x1000}, 0x1, 0x0, 0x0, 0x40}, 0x67d061ef775e0dcd) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000004c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4004, @fd_index=0x6, 0x9, &(0x7f00000003c0)="96f04829732141c7f7ab749aee00b5b334008ab742503aa0b78d7463f94769767cf4cd90909624d3b14b5d1dd65a0e39656b02e084bd0e9a096e44466c193bdea5cf6b2ee886f7d554ed2611b8c279c5013f14b94fd0afc19b498e1e68923c5d4fa280ccdcb9b6c3f67fc49c6594c62cdb52a9fdf84e888ebb25353dee524e3867021dff4f38872930ca38f0e34922395ae3b4885013633c77c38978bd06a32ff3b53e5ae419b95474b58e60f6692448f57e7441fe08799e73f149ed7e0fffebff2fe9ee0880c900f57162f27a172af8e9faa74c2d6578a6f687c1092a157d43268acc8b", 0xe4, 0x4b48ef6a8b20572f}, 0x1ff) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@sack_perm, @timestamp, @mss={0x2, 0x1000}, @mss={0x2, 0x80}, @timestamp, @mss={0x2, 0x2ce}, @mss={0x2, 0xfc59}], 0x7) 13:55:12 executing program 3: bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 13:55:12 executing program 5: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffc000/0x1000)=nil, 0x1000}, &(0x7f0000000040)=0x10) r0 = syz_io_uring_complete(0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x11c, &(0x7f0000000340)=0x800, 0x0, 0x4) io_uring_setup(0x1db5, &(0x7f0000000080)={0x0, 0x9188, 0x10, 0x0, 0x31a}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) write$UHID_CREATE(r1, &(0x7f0000000200)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000100)=""/218, 0xda, 0x1, 0x0, 0xbd, 0x100}}, 0x120) 13:55:12 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 13:55:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) 13:55:12 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:12 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:12 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/58, 0x3a}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x23) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r6}) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0x0) 13:55:12 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x1}}, 0x18) sendmsg$802154_raw(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000080)={&(0x7f0000000580)="cc544d987e82605b437e780a6727fc4eff212081f4a4032afc3435a54b9eb217bf166e7e0801e9801893f53657230d1635131d388be5c7abe66828ae029b6b22a4f8a77322e1069efddc742c04db389a86638da64a71f6bb51abe84c0e412641a5cd72a75b6505d3678b937ed1512efd90e7f64dfd84078004bf10f3be1170b7a07a2a80bdefd2aa70984082759e1b9dd655f130260771157b948634a50fc0235d65a0a910ca579cc7ec393083c84a37c20b5e3ed2e6a9be9e53d738cccb7b650b0b9d0bce40f2af3ceab7fb0a30619dd3f9183950e7b7e0b38577f8b0f0f69d00cee7ae7bd908ce6aabb1468f932ba037c9013d697c0fe2ef3eae24b6b909888a9b1f5459511953ecfbdb8067ad0679a2b9916d0b4cd4469b6c802c880702e5bb16701807a575bae8ec10a0bfad3a86475fa3f18b4c2aa48a5a836f4b68fd2715747490e7480250c63f880789d38bd5ea1d91a6fdf2c4103de885b1c3758bfc28e4d03c681713e12362a46aae9e2c97101d439b4fbabcde07624160e8ce3f2c264f3c87c4a9f0bc624b7cd11646595722c2d05f2dca7abc639d02f4a1f25969f0fa56efd354374022c8d7378febc57225626a575e292ace1211970a966ebfa66116897104e9d8d0d509c9206332328e1ea7dea34f870c4420f7da4678a3608ab85fa48d26ec63ebd2ecd2b0f8fb998a293be6ee8c5533e7b9159dfd54acfae4ca477df7545294c9ced3e578d7111e8706045c80cf970b6ddcd66dc06890cec2187668e21aff81b942c039f3d9a874b2531676bbb239cc68b5e2659344fc815cfc28f8654fdeb4bc78d9b5f93a9b93d0fbfcb7cd306f5949366577c2987705582a37b510295d4e088fb5f3ecd9c0c38a1d4965c5e06b420f155807ef0860b6ecad7f9c4b9c383bd471fc989984f6e5753f4488c86d8c54d7248afa7e6d8269fe50ca35f34133687798d8c907cfd98ddfcd7ea0a061c91088ec0b14e678b62c6a3f9709c5bc64fc9159a690685bc46b4f8e586486f50c6add8fe5fd8832d3ead30848289c9221317cdd607950e4944036dfa98fca959802df7f582178bfb91ef7efcae4f6b9e4f1fbd4f24520c69ee3bdef298550defd10321da50bb24353762992a4102ac0c146485794d178f0ca2da1bc30b0b8cad1e0353fb9b8eae3d04575813ac4f294bb0836146729f526709cb926fd6662e25fc1a3fa27fd6bb344231e6b1a51111f4ac3464512e5de709ff0a811bba5c15dfda4e97510e27bf4dba57ea18d626d6a56262afc26f8c69c42e7fe4c51702898c6ddc52ef46ce402811efae9b4d470106fdd1b16ad918352f858531be27032e60544a6601d8a8d7c5bd5b6c49dba08b874aa33eb9076c285a54e3c888232587f794203f49b0679379bf1929fcbe0292fe6c8cc280cb714cf8b2b0d95d9a855660dde951ae0551b433efd31303699621fccd825a75690b164852b445959214320e3b2040c6bfcdb8f854545d3789a8a39b7cee53ce7c66fe476e195d171475fb1cd06673f32da491b5154e50160bed6a52dbcb222116ab1e57d5a6fb067295147c7a2c14bb2647da121546601a4f5bab476298f76e09fd57dd1cb2a23c79a20a82bb79f1cb2d24e6e3e61091f799ebfc0dfb6e6aaaf03bb24688ef895184814a636bfdc0d61b93dc31e9fe32744b6c0064c82559ee3eea67f955219f6a18105df69b913818d6f2afa5850828bd1f39a90340ed45b530a634d3fe6f2ff29629b74fa84c08bf37f7e233b92fcbc25cece91bb4db4008c348a701c1031d627934db684bdec56228a249638897cd7cbcde989cf84766de4e725f5d01dcbafd1d7fa2c2f55c430bc3d086890ef6adb631fdea71c750cab9dd458a0fad4d39d38ff9096a4945ecb396ff842cf49eaddf90dda81e34ae4c8b982bfde5c87348f902a536fa80d3b0b438a296a04754a39955ee23638c276b491d32a1c84de438f86f4d3b7c5a946358292e228f3fb5ece33f15be1ef730e34ed2ac3199ce01d3acf316991a014f6a06299e78c6ade0f325a0adccfae6dd3433656e0ae5fd7c6e18da7991fc8ef7d7c9c4fa1eba2b4bd3448b3a14fa2affe26676cdfc9eb01613e31925098341e84e43ecffe3ef3be87806196cdf19a2580e684ba1cc10b39de4d2d4d66956e807ca86c70360c8e16fae5ab98a3bd93a0d499e8a6dd1cef8ca55e48feb3efcd76e594f7726480cb86e16969d98f6ed7624154a77fc2aeb6cd78ed0ebc9f57ea2069a8b1170bf4918d739f7e612e765f70bd6a824d3f846edcdfc3864f74e75f7864c41dd4c6fddb8db86b28f34a2048cdb4929bf4eeae9548cea45bd97ec6e93dcfe1b16c62af62c9b2bc2a112e8a86abe52dfbf277580a89cccf1693a328e856b3400e3746146e82e17ef8a6d7974e5336070a137f65e7d98f775cac51a47170b985a8b4f80202c6d86ad6475c104857665d1c71cc73b7cdd785ce685bcc0642ccb1f8b6db1d2bf420daddf1522f4f1bc834e8f9f466cceb549fc8763d04b07632e2a0c27d3a61ee612304ed54b217c41e609713efcc5fa70d9b67b0770d76a721620813a0356d72187651e28ee8fda1d2399e5bc0a366be860bcb044e8af397ee35d425a2fe40b2899dbbdd4d5aa59e20f6dc3c872704c2639b32cb17b3344bc7dff5a7e4770deab3aa916fd8446cd6e549ab42ca971ba73c8942221f7a760cfe70d0a45c7e9e002331c339809b3cf5e86db50a0d5d843567eabbbaa8d21fe4771f9df43446a2f567c6ddf0158672cc1e6dc3ce15a29ca21172a94b157fa48a5f7a92347e83da311324d53ee28a66e8244a59d2d07ce046565f5faaff22b98f8de9effe9ac06e159b0a772a4a4b401576b9dcbbcf77fe492eef0c4682f34445bb2bcdd0865e45dc1eaeaaa545eb7184ba68398070dd1127cfeeca9e0d1da29441bbaf39fe92801cdb554e08ff19bd75cd89cee8dd8c36ceb04908a27ac307828610089c99b362ee3ee8a199f6e8af737e73eff0e7ad381f00b6eb2272bcda22478d661349153dfea70f33d589aa5308e5b086d2c3d403b249fba8445ea6ba516bddbc0fc3951efc10a563d191f6dcb761a5ef9253134c16ed32ed63916bbba59d9a84c1fe9eeaf8d5e54cea310743dc4ff96ddc78a32281b9ed1651d774fed7903c428acbf12f550d3965f36c5d4c581dfb6f80e313cba9d56efd5405cbc736cad6b7bb823246930280718d3586cd9fbd89db6657a4493be5b19e1a5232a2f45685f123d03dfadfc72695e3ddd1477a4dc53e4d356d38d4537a5bfb49b75b2b0a621c318372a4e992a63627ae567409f25d2c7bacb55f57a2aabdaad5065b8927c53faa05088156a98e3a5bd1c9decfb66f09fc03669fb78d075edf9da75fe1561e356d2a489c994305a440d48a81f982dea056dfa8bd4a9a0fbfabe2ff51746aeec3260831461b299bde362d5c488c8a09387cb32953a408dcaab15c848ecbed36cb929194c6d6b3a90f3bbd3609dc9c7ad60ce802614e9407b1639d65530abc44a05254868dd62b4a5cef95434be4213c7e0c21e6996cde505c856de26a4ac9eda0cbff8114efda99a87ef041c1b0a380e0c4190768ad7ebd3b1a60546a44bf5a7d10acfa99b001c2a2b3a1c5ffc1611a5307c56ce00b517172ab62825ba6f5dff9bdd0109e4bf829b93d86b0a080766335edae63b8fa48f151354968e502f3e15cc73b1bcbfb6219d408f5151bd24303810e220352af46b6d4bd4f150e99fa843f905b4842be6637aca3ca0f2b1a4a8f9fa54b3c706c870ea3b15d771fc3b431189fe860c5999fe817bfc5a0741ffd39d6a0b33f00f765313d58fa34decf9c93a6d2301617918daa75a19a0bf80c3edc26b240c9b4c68c9fcb81f898595169028d1f212601095dc8dd3a0ef06e39ba421764265838d7d2d38fbb955095b6c1dd4c41a140e3a9114222ed7b4a9accf0b880f3df4b980121c8fc39e9ace75f4a2841de6303ff3d92caa86c21a330b93e2d37f6b4cf7b529e181479289f9d8ffda3a41ef9f5c2ed44b664df08afda79a1645fddd09cb974baf67ebf094de66a562d1fb71ff4f7bb7bb97f86bb1607a28bcf48b46b8556b0ad0134273b980971573426514b1ce31ad6dc99b28e96905b5f39d175fd931d9639c133f65b263a367c67c12218ef250213bd355208d1801120e1adc45448b767435d92ecc521299be43de3dca93496a9859f8d0e22d804953ea690aa38d0cea599eb891248f9ed4e2a744a51fbdc62f7cc31dfa00b7992db300a596dc8df709b181d73c0396065d8277e691f956c746272b00abc17dedc20c0fa5a006bf4e5eb85bcf37e7209168702bb4b1188a5214cab3004ba70f38883da213429e1c4519444432e45d175aeedfedf7f8c7c42a6a69dfb07aabd7384bfcc7cb0c6059261a13ea13bd2c173faa46642305e5ee58c940e63746e00cbfe8aea36f238bf88a17579b6d4e0db265bc6fd09e0f5ae053558734fb4d5ed3a596b8caa3cecbe2c27348b4987fc34ea3d853b59f7a2859cdf15c0f2ffb9a6fba6b099b1556f86d1ea6ef464f37ebaedd474f27da8e9e020441a8118658801e1f36c9f664b06e0fbe4dc60595cdd243072ff197e36ebf37b8e34dd458f5322741338deca19968d6b49ea0570e33c172a3d460d48a941cd8d7810842fdc3860ae7f6312fd1e1c5f9563d994af0904f1f6ad78b366cc8a1683867296fa5d8d896a165564296e8bda3c6caeeb76b2fc52ca45f28567405650e2cdaf5c217d3c363fae692f1543a6e4b519787a2cb69dfa5329469c18be5106e83b73e3608eb71d5c3fea5de7350faaf7e6ae5c0b9d5e1ae72a48b32c14563cbec534402122f5830ce099f435ff94c42958d47088c9dd758ac9570e30c935e1801a6cebf02890ab0f63dfea9a36c73f3e11990c3eb108078d65fcdeb96975647d8c652873ebaf95c1905f433b32146e36d1f11bb540a0200b534aa1c6b89722c316bab9f90ceb74b58cd139eaf3347f1012c7f5103cea7a5caa909f9fed3285b36e5ca83ac2eb0e983c5e28ba0dfe8a84f4bc6e161ca259894a63a0f6dac851f53fe87921be2bddf58bec1f4410055be4281f5d1f0da68776b841c9af7a69683d3338dfca17be76e5a575fcded40835c07ee5ccd0e1b79c9c18d5e79935d91258178b2985e8ce7bd773e940f7182946ecd4c030d7de00c134e342a5a8f8beb4cc4392de60c50e52a36a0569e756f61a8d520a776e67f46b32f9de7973c17bd66bd0f5cf77328651f94996d3bef7cec74321580d27c3ea03a5b3ca211af995adcbd21ffc80acb2d405185033d1f128fd05f3051bfc53c6d6f1888e692330e01aa38f4440d08b2ddb7a76dff5ddb277c34af8a10440f641d5b13bc82a308d79d05e25d2baf4c9e3e5200d4442f50f7303702262c19bb97cd8e20d2fdbd1a3ed1ece9e76d4d49f1e844df5eacaecfcbac335d29f42d5ffe35c4ff4a56a55300381e9180565ed732f1a9baf970be34508d5b12739a8c2062fe9b32bb3bda620a296aed10215a90841661b002bd306b5946f7631ab3a3289d9c5295027500d822fadcd5e6abb8d65676bd889486b1334d3fa217a2e08915d18d89796f06caa3ea6d9e83daf2cf5aa9e331a9c29f3bd19a531efe34b2185142dd97b3fe6ae9110feb602b605b89cdfe146439010b15629a48c93792f2a99dfc799fe4ecb7d48272de7c33a33273df2d7d3b68b7cc368b7f40a7377ffcc0aad01b8a5d18510be1294f7ddb6e4922cd1a2503990256361f8ccb7e1f831106cfdd1704b1decfdac6a73f190d54bd5", 0x1000}, 0x1, 0x0, 0x0, 0x40}, 0x67d061ef775e0dcd) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, r0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000004c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4004, @fd_index=0x6, 0x9, &(0x7f00000003c0)="96f04829732141c7f7ab749aee00b5b334008ab742503aa0b78d7463f94769767cf4cd90909624d3b14b5d1dd65a0e39656b02e084bd0e9a096e44466c193bdea5cf6b2ee886f7d554ed2611b8c279c5013f14b94fd0afc19b498e1e68923c5d4fa280ccdcb9b6c3f67fc49c6594c62cdb52a9fdf84e888ebb25353dee524e3867021dff4f38872930ca38f0e34922395ae3b4885013633c77c38978bd06a32ff3b53e5ae419b95474b58e60f6692448f57e7441fe08799e73f149ed7e0fffebff2fe9ee0880c900f57162f27a172af8e9faa74c2d6578a6f687c1092a157d43268acc8b", 0xe4, 0x4b48ef6a8b20572f}, 0x1ff) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) 13:55:12 executing program 4: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 13:55:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) 13:55:12 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:12 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:12 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) write$UHID_SET_REPORT_REPLY(r4, 0x0, 0x0) 13:55:12 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x1}}, 0x18) sendmsg$802154_raw(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000080)={&(0x7f0000000580)="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", 0x1000}, 0x1, 0x0, 0x0, 0x40}, 0x67d061ef775e0dcd) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, r0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000004c0)=@IORING_OP_WRITE={0x17, 0x1, 0x4004, @fd_index=0x6, 0x9, &(0x7f00000003c0)="96f04829732141c7f7ab749aee00b5b334008ab742503aa0b78d7463f94769767cf4cd90909624d3b14b5d1dd65a0e39656b02e084bd0e9a096e44466c193bdea5cf6b2ee886f7d554ed2611b8c279c5013f14b94fd0afc19b498e1e68923c5d4fa280ccdcb9b6c3f67fc49c6594c62cdb52a9fdf84e888ebb25353dee524e3867021dff4f38872930ca38f0e34922395ae3b4885013633c77c38978bd06a32ff3b53e5ae419b95474b58e60f6692448f57e7441fe08799e73f149ed7e0fffebff2fe9ee0880c900f57162f27a172af8e9faa74c2d6578a6f687c1092a157d43268acc8b", 0xe4, 0x4b48ef6a8b20572f}, 0x1ff) 13:55:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/58, 0x3a}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x23) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r6}) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0x0) 13:55:12 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) 13:55:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:12 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:12 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x1}}, 0x18) sendmsg$802154_raw(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, @none={0x0, 0x3}}, 0x14, &(0x7f0000000080)={&(0x7f0000000580)="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", 0x1000}, 0x1, 0x0, 0x0, 0x40}, 0x67d061ef775e0dcd) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, r0, 0x0) 13:55:12 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/58, 0x3a}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x23) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r6}) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0x0) 13:55:12 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = syz_io_uring_complete(0x0) r3 = syz_io_uring_complete(0x0) setsockopt$inet_tcp_TLS_RX(r3, 0x6, 0x2, &(0x7f0000000000)=@ccm_128={{0x303}, "f06bcb74c328a013", "028fc9efb8ef82e71784f54f91ef69a6", "0ade93a9", "012833b479f3beab"}, 0x28) write$UHID_SET_REPORT_REPLY(r2, 0x0, 0x0) 13:55:12 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) 13:55:12 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:13 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/58, 0x3a}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x23) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r6}) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0x0) 13:55:13 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) 13:55:13 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) ioctl$SIOCPNENABLEPIPE(r0, 0x89ed, 0x0) 13:55:13 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x1}}, 0x18) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, r0, 0x0) 13:55:13 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:13 executing program 2: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) 13:55:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/58, 0x3a}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x23) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r6}) 13:55:13 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:13 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, r0, 0x0) 13:55:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:13 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:13 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, 0x0, 0x0) 13:55:13 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, r0, 0x0) 13:55:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/58, 0x3a}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x23) 13:55:13 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:13 executing program 0: socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:13 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, r0, 0x0) 13:55:13 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, 0x0, 0x0) 13:55:13 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 13:55:13 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:13 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/58, 0x3a}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:13 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, r0, 0x0) 13:55:13 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, 0x0, 0x0) 13:55:13 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:13 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:13 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, 0xffffffffffffffff, 0x0) 13:55:13 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/58, 0x3a}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) 13:55:13 executing program 2: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f0000000240)={0xf, 0x8}, 0x10) 13:55:13 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/58, 0x3a}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:13 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, 0xffffffffffffffff, 0x0) 13:55:13 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:13 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:13 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/58, 0x3a}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) 13:55:13 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/58, 0x3a}}, 0x10) 13:55:14 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, 0xffffffffffffffff, 0x0) 13:55:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/58, 0x3a}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:14 executing program 5: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/58, 0x3a}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x23) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r6}) 13:55:14 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) 13:55:14 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, r0, 0x0) 13:55:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/58, 0x3a}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:14 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:14 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:14 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) 13:55:14 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, r0, 0x0) 13:55:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/58, 0x3a}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) 13:55:14 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) 13:55:14 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, r0, 0x0) 13:55:14 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/58, 0x3a}}, 0x10) 13:55:14 executing program 5: socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140), 0x111, 0x6}}, 0x20) 13:55:14 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:14 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0xc513a619585e351e, r0, 0x0) 13:55:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) 13:55:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) 13:55:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) 13:55:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 13:55:14 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) 13:55:14 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:14 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xc513a619585e351e, r0, 0x0) 13:55:14 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 13:55:14 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) 13:55:14 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) 13:55:15 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:15 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 13:55:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) 13:55:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) 13:55:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) 13:55:15 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:15 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 13:55:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) 13:55:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 13:55:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:15 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) 13:55:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) 13:55:15 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:15 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 13:55:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 13:55:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) 13:55:15 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 13:55:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) 13:55:15 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xc513a619585e351e, 0xffffffffffffffff, 0x0) 13:55:15 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 13:55:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) 13:55:15 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 13:55:15 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:15 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xc513a619585e351e, 0xffffffffffffffff, 0x0) 13:55:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 13:55:15 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 13:55:15 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:15 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) 13:55:15 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:55:15 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) 13:55:16 executing program 1: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0xc513a619585e351e, 0xffffffffffffffff, 0x0) 13:55:16 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 13:55:16 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r0 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 13:55:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 13:55:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) 13:55:16 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 13:55:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) 13:55:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:16 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) io_uring_setup(0x4bd, &(0x7f0000000080)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) 13:55:16 executing program 5: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 13:55:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) 13:55:16 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:16 executing program 4: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:16 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 13:55:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) 13:55:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:55:16 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:16 executing program 4: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) 13:55:16 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 13:55:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 13:55:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:16 executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:16 executing program 4: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:16 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 13:55:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 13:55:16 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:55:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:16 executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:16 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x0) 13:55:16 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) 13:55:16 executing program 0: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:16 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:16 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 13:55:16 executing program 3: socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:17 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 13:55:17 executing program 0: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000180)) 13:55:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) 13:55:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 13:55:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:17 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000180)) 13:55:17 executing program 0: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 2: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 13:55:17 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000180)) 13:55:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:55:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 2: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) 13:55:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 13:55:17 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 2: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) 13:55:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) 13:55:17 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 1: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:17 executing program 5: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:17 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 1: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 5: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 1: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 5: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 3: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:18 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 3: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:18 executing program 3: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:18 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:18 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {0x0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 5: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:19 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:19 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:19 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:19 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:19 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {0x0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0x0, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {0x0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0x0, 0x0, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0x0, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:20 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0x0, 0x0, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {0x0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {0x0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {0x0, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0x0, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0x0, 0x0, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {0x0, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {0x0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {0x0, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:21 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0x0, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0x0, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0x0, 0x0, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0x0, 0x0, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {0x0, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {0x0, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0x0, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {0x0, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp={0x0, 0x0, {0x0, 0x0, 0x0, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {0x0, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:22 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {0x0, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {0x0, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) 13:55:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {0x0, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {0x0, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {0x0, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:23 executing program 4: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 4: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 4: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) 13:55:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) 13:55:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:24 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 0: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 13:55:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) 13:55:25 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 0: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:55:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 2: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 13:55:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 0: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:55:25 executing program 2: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:55:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) 13:55:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:25 executing program 2: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:55:25 executing program 0: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:55:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {0x0, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 2: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:55:25 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {0x0, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:25 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {0x0, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:26 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:26 executing program 0: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {}, {}, @period={0x0, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0}}}) 13:55:26 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {0x0, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:26 executing program 1: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 13:55:26 executing program 2: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {}, @ramp}, {0x0, 0x0, 0x0, {0x0, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x0, 0x0, {0x0, 0x0, 0x0, {}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) 13:55:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:26 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) 13:55:26 executing program 4: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 13:55:26 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000180)) 13:55:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) 13:55:26 executing program 1: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:55:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:26 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:55:26 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) 13:55:26 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000180)) 13:55:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:55:26 executing program 1: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:55:26 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:26 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) 13:55:26 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:55:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:26 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000180)) 13:55:26 executing program 1: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:55:26 executing program 3: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) 13:55:26 executing program 0: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) 13:55:26 executing program 2: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000180)) 13:55:26 executing program 4: openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) 13:55:26 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 13:55:26 executing program 3: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) 13:55:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) 13:55:27 executing program 2: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000180)) 13:55:27 executing program 0: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) 13:55:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:55:27 executing program 3: ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) 13:55:27 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:27 executing program 2: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000180)) 13:55:27 executing program 0: getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) 13:55:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:55:27 executing program 2: socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000180)) 13:55:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 13:55:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) 13:55:27 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) 13:55:27 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) 13:55:27 executing program 2: socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000180)) 13:55:27 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, 0x0) 13:55:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) 13:55:27 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) 13:55:27 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) 13:55:27 executing program 2: socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000180)) 13:55:27 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:27 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) 13:55:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:27 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) 13:55:27 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 13:55:27 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 13:55:27 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:27 executing program 4: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) 13:55:27 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) 13:55:27 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:27 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 13:55:28 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 13:55:28 executing program 3: openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(0xffffffffffffffff, 0x406855c9, 0x0) 13:55:28 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:28 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:28 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:28 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 13:55:28 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 13:55:28 executing program 3: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_END_FF_UPLOAD(r0, 0x406855c9, &(0x7f00000001c0)={0x5, 0xfffffffc, {0x54, 0x70, 0x7f, {0x5, 0x20}, {0xf1c0, 0x1719}, @ramp={0x2, 0x8, {0x5, 0xdfc, 0x9, 0x80}}}, {0x55, 0xfffd, 0xffff, {0x9, 0xe57}, {0x9, 0x4}, @period={0x5b, 0x8, 0x6, 0x633, 0x7, {0x7, 0x8000, 0x222, 0x3f}, 0x4, &(0x7f0000000100)=[0x8, 0x2, 0x8001, 0x7]}}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r3, 0xc06855c8, &(0x7f0000000240)={0x6, 0x92b, {0x52, 0x20, 0x3, {0x12, 0x5}, {0xffbf, 0x4}, @const={0x1, {0x1, 0x8, 0xff, 0x3}}}, {0x54, 0x4, 0x1, {0x7f, 0x87}, {}, @rumble={0x6, 0x4}}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r4, 0x541b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r4, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000540)={r5}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r4, 0x10, &(0x7f0000000040)={&(0x7f0000000000)=""/58, 0x3a}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x23) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r6}) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0x0) 13:55:28 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:28 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:28 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) getsockopt$inet_tcp_buf(r0, 0x6, 0x0, &(0x7f0000000000)=""/232, &(0x7f0000000100)=0xe8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f00000002c0)={0xb, 0x10, 0xfa00, {&(0x7f00000001c0), r2, 0x1}}, 0x18) 13:55:28 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:28 executing program 3: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000380), 0x80000) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r0, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r1, 0x2, 0x70bd27, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x8000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) sendmsg$FOU_CMD_ADD(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x30, 0x0, 0x20, 0x70bd2a, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @rand_addr=0x64010101}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x4, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x240408c0) 13:55:28 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:28 executing program 0: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 13:55:28 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000001c0)={r1}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(0xffffffffffffffff, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) 13:55:28 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:28 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:28 executing program 3: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:28 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:28 executing program 2: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) 13:55:28 executing program 0: socket$inet_smc(0x2b, 0x1, 0x0) 13:55:28 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:28 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:28 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) r5 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:28 executing program 3: socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000180), &(0x7f00000001c0)=0x4) getsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000200), &(0x7f0000000240)=0x4) openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) bind$ax25(0xffffffffffffffff, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x4}, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000080)={&(0x7f0000000340)=""/85, 0x55}}, 0x10) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)={0x30, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x14, 0x19, {0x0, 0x93, 0x3a, 0x8}}}, ["", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) 13:55:28 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) 13:55:28 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, {0x1, 0xbc, 0x2}}, 0xa) 13:55:28 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:28 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, {0x1, 0xbc, 0x2}}, 0xa) 13:55:28 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) bpf$LINK_DETACH(0x22, &(0x7f0000000100), 0x4) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:28 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:28 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, {0x1, 0xbc, 0x2}}, 0xa) 13:55:28 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, {0x1, 0xbc, 0x2}}, 0xa) 13:55:29 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:29 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:29 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:29 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, {0x1, 0xbc, 0x2}}, 0xa) 13:55:29 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, {0x1, 0xbc, 0x2}}, 0xa) 13:55:29 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, {0x1, 0xbc, 0x2}}, 0xa) 13:55:29 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:29 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@private0, @in6=@remote}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:29 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:29 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, {0x1, 0xbc, 0x2}}, 0xa) 13:55:29 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000040)={0xa, {0x1, 0xbc, 0x2}}, 0xa) 13:55:29 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) 13:55:29 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:29 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:29 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:29 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) 13:55:29 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) 13:55:29 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) 13:55:29 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:29 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:29 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:29 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) 13:55:29 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) 13:55:29 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r0 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:29 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:29 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:29 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:29 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:29 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) io_uring_setup(0x4bd, &(0x7f0000000080)) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:29 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:29 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:29 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:55:29 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:55:29 executing program 5: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:30 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:30 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:30 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:55:30 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 13:55:30 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 13:55:30 executing program 5: socket$inet_smc(0x2b, 0x1, 0x0) 13:55:30 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:30 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(0xffffffffffffffff, &(0x7f0000000340)={{0x3, @null}, [@default, @netrom, @rose, @netrom, @netrom, @default, @netrom, @rose]}, &(0x7f00000003c0)=0x48) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:30 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:30 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 13:55:30 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:55:30 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:30 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:30 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:30 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:30 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:30 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:55:30 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:30 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:30 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:30 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:30 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 13:55:30 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:55:30 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:30 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:30 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:30 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:30 executing program 2: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 13:55:30 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 13:55:30 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:30 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:30 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:30 executing program 3: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:30 executing program 2: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 13:55:30 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:31 executing program 0: write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:31 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r0 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:31 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:31 executing program 3: prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:31 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 13:55:31 executing program 0: write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:31 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:31 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) io_uring_setup(0x4bd, &(0x7f0000000080)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:31 executing program 3: prctl$PR_SET_SECUREBITS(0x1c, 0x0) 13:55:31 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:31 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:31 executing program 0: write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:31 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 13:55:31 executing program 1: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:31 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:31 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) r0 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x8000000) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:31 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:31 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:31 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 13:55:31 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:31 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) io_uring_setup(0x4bd, &(0x7f0000000080)) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:31 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:31 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:31 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:31 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:31 executing program 5: syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 13:55:31 executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:31 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:31 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 13:55:31 executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) 13:55:31 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:31 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) 13:55:31 executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:31 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:32 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) 13:55:32 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) 13:55:32 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:32 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) 13:55:32 executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, &(0x7f0000000180)=0x10) 13:55:32 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:55:32 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) 13:55:32 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:32 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) 13:55:32 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000180)) 13:55:32 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) 13:55:32 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:32 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 13:55:32 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) 13:55:32 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000180)) 13:55:32 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) 13:55:32 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) 13:55:32 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:32 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:32 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) 13:55:32 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000180)) 13:55:32 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) 13:55:32 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:32 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:32 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:32 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) 13:55:32 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:32 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:32 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:55:32 executing program 0: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:32 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:32 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) 13:55:32 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:55:32 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0) 13:55:32 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:55:33 executing program 2: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:33 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x0) 13:55:33 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 13:55:33 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 13:55:33 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 13:55:33 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0) 13:55:33 executing program 2: prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:33 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:33 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:55:33 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:33 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) 13:55:33 executing program 2: prctl$PR_SET_SECUREBITS(0x1c, 0x0) 13:55:33 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:33 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, 0x0, 0x0) 13:55:33 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:33 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 13:55:33 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 13:55:33 executing program 3: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:33 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:33 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:33 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x0, 0x81, 0x49}}, 0xa) 13:55:33 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:33 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) 13:55:33 executing program 3: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:33 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:33 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x0, 0x0, 0x49}}, 0xa) 13:55:33 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:33 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:33 executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:33 executing program 3: prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:33 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:33 executing program 0: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080), 0xa) 13:55:33 executing program 3: prctl$PR_SET_SECUREBITS(0x1c, 0x0) 13:55:33 executing program 1: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080)={0xa, {0x7, 0x81, 0x49}}, 0xa) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) 13:55:33 executing program 4: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:34 executing program 0: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r1 = io_uring_setup(0x4bd, &(0x7f0000000080)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, r1, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x80, 0x1, 0x28, @mcast1, @local, 0x20, 0x8, 0xfff, 0xffc00000}}) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000540)={r2}) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:34 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xffffff67) write$UHID_DESTROY(0xffffffffffffffff, &(0x7f0000000000), 0x4) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f0000000040)={@null, @null}) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) write$UHID_SET_REPORT_REPLY(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e020000060000003d018e00d2eb5e44998d9a054d42d569c781527477d8176bc397dad4bafee6bf362cf13ee1d3c62354b7a63a70b70dd6e05eab764dfe3d047afe5095cbcd62154466913a5798e8bd91b4d083358c340bbda710cbda95b30101e01dfbf7fa5cc39c5be3383130dac00fb682d79716766a7aede15b4371305574ff79e68e9a21e25c1f0993bfd28e00"/154], 0x9a) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000280)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0x22, 0x243, 0x61c, 0x0, 0x3, 0xfffffffa, "21eae8ce941c74b3b1867db7193753c76afc886e22b2e374a545fc8efdb3035e662e"}}, 0x13a) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000580)="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", &(0x7f00000000c0)=@udp=r0}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001580)={0xb, {'syz0\x00', 'syz1\x00', 'syz1\x00', 0xb7, 0x1, 0xaa, 0x8000, 0x0, 0x0, "7ebf26fea95d6defeebab8fa9a6dc1be4de3a4134c76b65ca3b4b204ce5b0139c1dfd33f6d9c1680e67235d10b8f947e30f91788600d8ba8a0dc8146735647989ff639a202f30971b429b2d29349eb69f8266a2935131f992bde5699271403bbae4497397cdc514647ea0565f444c5a66cd4cf9aee3f33b90f5a209b2a2c24ca3517fbfece95a3b18294ed25c6fadece0931df4977ad27a47069c251ad5196efee16f5587f327a8a377dd379c7f34aea128579cff8b58f"}}, 0x1cf) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r3}) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000140)={0xa, {0x7, 0x0, 0x80}}, 0xa) 13:55:34 executing program 5: prctl$PR_SET_SECUREBITS(0x1c, 0x0) 13:55:34 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000100)=0x10, 0x80800) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) syz_io_uring_complete(0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), r0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) 13:55:34 executing program 4: prctl$PR_SET_SECUREBITS(0x1c, 0x1c) 13:55:34 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0x0) 13:55:34 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000080)="2e7329cbcdb776b69be2ff6cb9b3f8b20035b78d20e6cef63ea9793f2cb57bc51f85bce23c111e7faba122c42a77e4a008da3217f6f8fdf6617941b7edec503bacd97154fcd53945c943fa7cb598f8cfa95f1c73f9b5533eaf", &(0x7f0000000100)=@buf="e3ade44a333c474ba5ff5cd4ec00015024fc68f7efc66ce0bb25b44694bf1e19958918be63d3e7235e9ddcbc154ee21d238a818632c7633709a1e6015add30526fad1cf7387b5abdfa0b0a65f56f1d9f890aea4a707112b4f4b1b61321bed1aabb059bb089c6285677fe64562d3bd41e11", 0x1}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:34 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000080)="2e7329cbcdb776b69be2ff6cb9b3f8b20035b78d20e6cef63ea9793f2cb57bc51f85bce23c111e7faba122c42a77e4a008da3217f6f8fdf6617941b7edec503bacd97154fcd53945c943fa7cb598f8cfa95f1c73f9b5533eaf", &(0x7f0000000100)=@buf="e3ade44a333c474ba5ff5cd4ec00015024fc68f7efc66ce0bb25b44694bf1e19958918be63d3e7235e9ddcbc154ee21d238a818632c7633709a1e6015add30526fad1cf7387b5abdfa0b0a65f56f1d9f890aea4a707112b4f4b1b61321bed1aabb059bb089c6285677fe64562d3bd41e11", 0x1}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:34 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, 0x0, 0x0) 13:55:34 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={0x0}}, 0x24008001) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYRESOCT=r0], 0x33) 13:55:34 executing program 4: prctl$PR_SET_SECUREBITS(0x1c, 0x0) 13:55:34 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000002c0)={r1}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r1, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) getpeername$ax25(r1, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r0, 0x4) 13:55:34 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000002c0)={r1}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r1, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) getpeername$ax25(r1, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r0, 0x4) 13:55:34 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000080)="2e7329cbcdb776b69be2ff6cb9b3f8b20035b78d20e6cef63ea9793f2cb57bc51f85bce23c111e7faba122c42a77e4a008da3217f6f8fdf6617941b7edec503bacd97154fcd53945c943fa7cb598f8cfa95f1c73f9b5533eaf", &(0x7f0000000100)=@buf="e3ade44a333c474ba5ff5cd4ec00015024fc68f7efc66ce0bb25b44694bf1e19958918be63d3e7235e9ddcbc154ee21d238a818632c7633709a1e6015add30526fad1cf7387b5abdfa0b0a65f56f1d9f890aea4a707112b4f4b1b61321bed1aabb059bb089c6285677fe64562d3bd41e11", 0x1}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:34 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000002c0)={r1}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r1, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) getpeername$ax25(r1, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r0, 0x4) 13:55:34 executing program 4: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffea4) 13:55:34 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000050000000206c8005f06d1bbf48bfa6b0a86f1ace01c487993d8fc7f44c0307d9d192068fd90f9f59ec415cd6747d466abafdabcc7e0be2439144f373404dedc93f3763f050274be7516c1aa0a4d0d090bd6cffc4cffc1813f0b9a6f7970a7f5fee38991f7093ae5d387dc8ee650abf94732aadad3c5424283711e729ac1d0519b5cad0027e282964d2437601c34681d99ad68c6bd2bb4b0bde73fed809d91e4b04480008d130bffebd7839ebf1c882aefe891c6ff2df5f604a4b7d5615dbbac71ee628c4d17be"], 0xd4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:34 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000080)="2e7329cbcdb776b69be2ff6cb9b3f8b20035b78d20e6cef63ea9793f2cb57bc51f85bce23c111e7faba122c42a77e4a008da3217f6f8fdf6617941b7edec503bacd97154fcd53945c943fa7cb598f8cfa95f1c73f9b5533eaf", &(0x7f0000000100)=@buf="e3ade44a333c474ba5ff5cd4ec00015024fc68f7efc66ce0bb25b44694bf1e19958918be63d3e7235e9ddcbc154ee21d238a818632c7633709a1e6015add30526fad1cf7387b5abdfa0b0a65f56f1d9f890aea4a707112b4f4b1b61321bed1aabb059bb089c6285677fe64562d3bd41e11", 0x1}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) write$UHID_SET_REPORT_REPLY(r3, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:34 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) 13:55:34 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000050000000206c8005f06d1bbf48bfa6b0a86f1ace01c487993d8fc7f44c0307d9d192068fd90f9f59ec415cd6747d466abafdabcc7e0be2439144f373404dedc93f3763f050274be7516c1aa0a4d0d090bd6cffc4cffc1813f0b9a6f7970a7f5fee38991f7093ae5d387dc8ee650abf94732aadad3c5424283711e729ac1d0519b5cad0027e282964d2437601c34681d99ad68c6bd2bb4b0bde73fed809d91e4b04480008d130bffebd7839ebf1c882aefe891c6ff2df5f604a4b7d5615dbbac71ee628c4d17be"], 0xd4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:34 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000080)="2e7329cbcdb776b69be2ff6cb9b3f8b20035b78d20e6cef63ea9793f2cb57bc51f85bce23c111e7faba122c42a77e4a008da3217f6f8fdf6617941b7edec503bacd97154fcd53945c943fa7cb598f8cfa95f1c73f9b5533eaf", &(0x7f0000000100)=@buf="e3ade44a333c474ba5ff5cd4ec00015024fc68f7efc66ce0bb25b44694bf1e19958918be63d3e7235e9ddcbc154ee21d238a818632c7633709a1e6015add30526fad1cf7387b5abdfa0b0a65f56f1d9f890aea4a707112b4f4b1b61321bed1aabb059bb089c6285677fe64562d3bd41e11", 0x1}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:34 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) 13:55:34 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000050000000206c8005f06d1bbf48bfa6b0a86f1ace01c487993d8fc7f44c0307d9d192068fd90f9f59ec415cd6747d466abafdabcc7e0be2439144f373404dedc93f3763f050274be7516c1aa0a4d0d090bd6cffc4cffc1813f0b9a6f7970a7f5fee38991f7093ae5d387dc8ee650abf94732aadad3c5424283711e729ac1d0519b5cad0027e282964d2437601c34681d99ad68c6bd2bb4b0bde73fed809d91e4b04480008d130bffebd7839ebf1c882aefe891c6ff2df5f604a4b7d5615dbbac71ee628c4d17be"], 0xd4) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:34 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000002c0)={r1}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r1, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) getpeername$ax25(r1, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r0, 0x4) 13:55:34 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000080)="2e7329cbcdb776b69be2ff6cb9b3f8b20035b78d20e6cef63ea9793f2cb57bc51f85bce23c111e7faba122c42a77e4a008da3217f6f8fdf6617941b7edec503bacd97154fcd53945c943fa7cb598f8cfa95f1c73f9b5533eaf", &(0x7f0000000100)=@buf="e3ade44a333c474ba5ff5cd4ec00015024fc68f7efc66ce0bb25b44694bf1e19958918be63d3e7235e9ddcbc154ee21d238a818632c7633709a1e6015add30526fad1cf7387b5abdfa0b0a65f56f1d9f890aea4a707112b4f4b1b61321bed1aabb059bb089c6285677fe64562d3bd41e11", 0x1}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:34 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000002c0)={r1}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r1, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) getpeername$ax25(r1, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r0, 0x4) 13:55:35 executing program 5: openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:35 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socket$phonet_pipe(0x23, 0x5, 0x2) 13:55:35 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000050000000206c8005f06d1bbf48bfa6b0a86f1ace01c487993d8fc7f44c0307d9d192068fd90f9f59ec415cd6747d466abafdabcc7e0be2439144f373404dedc93f3763f050274be7516c1aa0a4d0d090bd6cffc4cffc1813f0b9a6f7970a7f5fee38991f7093ae5d387dc8ee650abf94732aadad3c5424283711e729ac1d0519b5cad0027e282964d2437601c34681d99ad68c6bd2bb4b0bde73fed809d91e4b04480008d130bffebd7839ebf1c882aefe891c6ff2df5f604a4b7d5615dbbac71ee628c4d17be"], 0xd4) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:35 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000080)="2e7329cbcdb776b69be2ff6cb9b3f8b20035b78d20e6cef63ea9793f2cb57bc51f85bce23c111e7faba122c42a77e4a008da3217f6f8fdf6617941b7edec503bacd97154fcd53945c943fa7cb598f8cfa95f1c73f9b5533eaf", &(0x7f0000000100)=@buf="e3ade44a333c474ba5ff5cd4ec00015024fc68f7efc66ce0bb25b44694bf1e19958918be63d3e7235e9ddcbc154ee21d238a818632c7633709a1e6015add30526fad1cf7387b5abdfa0b0a65f56f1d9f890aea4a707112b4f4b1b61321bed1aabb059bb089c6285677fe64562d3bd41e11", 0x1}, 0x20) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:35 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x10, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 13:55:35 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000050000000206c8005f06d1bbf48bfa6b0a86f1ace01c487993d8fc7f44c0307d9d192068fd90f9f59ec415cd6747d466abafdabcc7e0be2439144f373404dedc93f3763f050274be7516c1aa0a4d0d090bd6cffc4cffc1813f0b9a6f7970a7f5fee38991f7093ae5d387dc8ee650abf94732aadad3c5424283711e729ac1d0519b5cad0027e282964d2437601c34681d99ad68c6bd2bb4b0bde73fed809d91e4b04480008d130bffebd7839ebf1c882aefe891c6ff2df5f604a4b7d5615dbbac71ee628c4d17be"], 0xd4) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:35 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25={{0x3, @bcast}, [@remote, @remote, @rose, @bcast, @default, @default, @default, @bcast]}, &(0x7f0000000080)=0x80, 0x80800) getsockname$ax25(r0, &(0x7f00000000c0)={{0x3, @bcast}, [@netrom, @bcast, @netrom, @netrom, @rose, @remote, @remote, @null]}, &(0x7f0000000140)=0x48) socket$inet_smc(0x2b, 0x1, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:35 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:35 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) 13:55:35 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000002c0)={r1}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r1, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) getpeername$ax25(r1, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r0, 0x4) 13:55:35 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000002c0)={r1}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r1, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) getpeername$ax25(r1, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r0, 0x4) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r0, 0x4) 13:55:35 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25={{0x3, @bcast}, [@remote, @remote, @rose, @bcast, @default, @default, @default, @bcast]}, &(0x7f0000000080)=0x80, 0x80800) getsockname$ax25(r0, &(0x7f00000000c0)={{0x3, @bcast}, [@netrom, @bcast, @netrom, @netrom, @rose, @remote, @remote, @null]}, &(0x7f0000000140)=0x48) socket$inet_smc(0x2b, 0x1, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:35 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="0e000000050000000206c8005f06d1bbf48bfa6b0a86f1ace01c487993d8fc7f44c0307d9d192068fd90f9f59ec415cd6747d466abafdabcc7e0be2439144f373404dedc93f3763f050274be7516c1aa0a4d0d090bd6cffc4cffc1813f0b9a6f7970a7f5fee38991f7093ae5d387dc8ee650abf94732aadad3c5424283711e729ac1d0519b5cad0027e282964d2437601c34681d99ad68c6bd2bb4b0bde73fed809d91e4b04480008d130bffebd7839ebf1c882aefe891c6ff2df5f604a4b7d5615dbbac71ee628c4d17be"], 0xd4) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:35 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:35 executing program 4: socket$phonet_pipe(0x23, 0x5, 0x2) 13:55:35 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:35 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r2, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:35 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25={{0x3, @bcast}, [@remote, @remote, @rose, @bcast, @default, @default, @default, @bcast]}, &(0x7f0000000080)=0x80, 0x80800) getsockname$ax25(r0, &(0x7f00000000c0)={{0x3, @bcast}, [@netrom, @bcast, @netrom, @netrom, @rose, @remote, @remote, @null]}, &(0x7f0000000140)=0x48) socket$inet_smc(0x2b, 0x1, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:35 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:35 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:35 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:35 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000002c0)={r1}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r1, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) getpeername$ax25(r1, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r0, 0x4) 13:55:35 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000002c0)={r1}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r1, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) getpeername$ax25(r1, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r0, 0x4) 13:55:35 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25={{0x3, @bcast}, [@remote, @remote, @rose, @bcast, @default, @default, @default, @bcast]}, &(0x7f0000000080)=0x80, 0x80800) getsockname$ax25(r0, &(0x7f00000000c0)={{0x3, @bcast}, [@netrom, @bcast, @netrom, @netrom, @rose, @remote, @remote, @null]}, &(0x7f0000000140)=0x48) socket$inet_smc(0x2b, 0x1, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:35 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:35 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:35 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:35 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25={{0x3, @bcast}, [@remote, @remote, @rose, @bcast, @default, @default, @default, @bcast]}, &(0x7f0000000080)=0x80, 0x80800) getsockname$ax25(r0, &(0x7f00000000c0)={{0x3, @bcast}, [@netrom, @bcast, @netrom, @netrom, @rose, @remote, @remote, @null]}, &(0x7f0000000140)=0x48) socket$inet_smc(0x2b, 0x1, 0x0) 13:55:35 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:36 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) 13:55:36 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r1, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:36 executing program 5: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@ax25={{0x3, @bcast}, [@remote, @remote, @rose, @bcast, @default, @default, @default, @bcast]}, &(0x7f0000000080)=0x80, 0x80800) getsockname$ax25(r0, &(0x7f00000000c0)={{0x3, @bcast}, [@netrom, @bcast, @netrom, @netrom, @rose, @remote, @remote, @null]}, &(0x7f0000000140)=0x48) 13:55:36 executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) 13:55:36 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r0, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:36 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r0, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:36 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:36 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:36 executing program 5: getsockname$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @bcast}, [@netrom, @bcast, @netrom, @netrom, @rose, @remote, @remote, @null]}, &(0x7f0000000140)=0x48) 13:55:36 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f00000002c0)={r1}) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r1, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r3, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) getpeername$ax25(r1, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=r0, 0x4) 13:55:36 executing program 5: getsockname$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000140)) 13:55:36 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:36 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:36 executing program 5: getsockname$ax25(0xffffffffffffffff, 0x0, 0x0) 13:55:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:36 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:36 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r0, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:36 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r0, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) 13:55:36 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:36 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:36 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r0, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:36 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000140)={r0}, 0x8) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r2, &(0x7f0000000240)="08ac39bbcd6f5ad811240153", &(0x7f0000000280)=@udp=r0}, 0x20) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) write$UHID_SET_REPORT_REPLY(r3, &(0x7f0000000380)={0xe, {0x7, 0x3, 0x3f, 0xc2, "4ccad535c7c09068d13494843d1d040734665a03690eacf8bb5eb32daf089df525a114cb7a2fa9c2e942e434f2137fdf56139af686648c71a31b68b4c397acf730b454a35904da7822d81e9b2f3944481bdb8397078d7a3c1e61d5d5be561cfede9418ca0b5f2e31953c1aff55c6229120f92bb9ed286152875206137255cb2ab0b61f99f67b2303853838a1584f86b00ca4e59dcefd67324c41521988a8437270755011643c0519701f0da86379e1546726d67d0f66459c45efc7cc7f2ca4c68635"}}, 0xce) sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x200, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040840}, 0x4010) ioctl$UI_BEGIN_FF_UPLOAD(r0, 0xc06855c8, &(0x7f00000001c0)={0x6, 0x95, {0x56, 0x8001, 0x5c, {0x3f, 0xfe01}, {0x3f, 0x6}, @rumble={0x401, 0x1}}, {0x51, 0x9, 0x3, {0xa6c7, 0x1}, {0x5, 0x1}, @const={0x101, {0x6, 0x3, 0x20, 0x4}}}}) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000300)={0x5, 0x2, {0x54, 0x8, 0x8, {0x4, 0x3ff}, {0x79, 0x1}, @ramp={0x7f, 0x1f, {0x0, 0x5, 0x105, 0x1bd4}}}, {0x57, 0x7, 0xfff, {0x4, 0x4}, {0x40, 0x9}, @const={0x55, {0x20, 0xfff, 0x80}}}}) 13:55:36 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:36 executing program 2: ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 13:55:37 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xffffffffffffff50) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) syz_io_uring_complete(0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000001c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, {0xa, 0x4e23, 0x8, @local, 0x8}, 0xffffffffffffffff, 0x2}}, 0x48) 13:55:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:37 executing program 2: ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 13:55:37 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r0, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:37 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r0, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r1, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 13:55:37 executing program 5: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r0, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_DELETE(r2, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [@L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) 13:55:37 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:37 executing program 2: ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 13:55:37 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$L2TP_CMD_TUNNEL_DELETE(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x50, 0x0, 0x8, 0x70bd2d, 0x25dfdc00, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e21}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @local}}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0xf9}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}]}, 0x50}, 0x1, 0x0, 0x0, 0x4048010}, 0x20004018) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 13:55:37 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:37 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:37 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 13:55:37 executing program 5: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 13:55:37 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:37 executing program 3: openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x2}}, 0x18) 13:55:37 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r0, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={0x0}}, 0x24008001) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:37 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r0, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 13:55:37 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 13:55:37 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 13:55:37 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 13:55:37 executing program 4: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 13:55:37 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={0x0}}, 0x24008001) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:38 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 13:55:38 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 13:55:38 executing program 4: ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) 13:55:38 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 13:55:38 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r0, 0x4) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:38 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 13:55:38 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r0, 0x4) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 13:55:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={0x0}}, 0x24008001) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:38 executing program 4: ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) 13:55:38 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000040)) 13:55:38 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x2}}, 0x18) 13:55:38 executing program 4: ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) 13:55:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={0x0}}, 0x24008001) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:38 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) 13:55:38 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 13:55:38 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:38 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:38 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 13:55:38 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r0, 0x4) 13:55:38 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r0, 0x4) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:38 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 13:55:38 executing program 5: sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:38 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 13:55:38 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 13:55:38 executing program 5: sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:39 executing program 4: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, 0x0) 13:55:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={0x0}}, 0x24008001) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:39 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:39 executing program 5: sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:39 executing program 4: socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) 13:55:39 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r0, 0x4) 13:55:39 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:39 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={0x0}}, 0x24008001) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:39 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:39 executing program 4: socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) 13:55:39 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:39 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={0x0}}, 0x24008001) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:39 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:39 executing program 4: socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, 0x0) 13:55:39 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r0, 0x4) 13:55:39 executing program 5: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:39 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:39 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x40080) 13:55:39 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:39 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000006c0)={&(0x7f0000000580), 0xc, &(0x7f0000000680)={0x0}}, 0x24008001) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) 13:55:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x40080) 13:55:40 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:40 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:40 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r0, 0x4) 13:55:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x40080) 13:55:40 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) 13:55:40 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:40 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:40 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:40 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) 13:55:40 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:40 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:40 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:40 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r0, 0x4) 13:55:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:40 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) 13:55:40 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:40 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:40 executing program 2: ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) 13:55:40 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') getpeername$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:40 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:40 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:40 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:40 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) 13:55:41 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') bpf$LINK_DETACH(0x22, &(0x7f0000000300), 0x4) 13:55:41 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:41 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:41 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) 13:55:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:41 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:41 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:41 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:41 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) 13:55:41 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:41 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:41 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$LINK_DETACH(0x22, &(0x7f0000000300), 0x4) 13:55:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) 13:55:41 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:41 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:41 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:41 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$LINK_DETACH(0x22, &(0x7f0000000300), 0x4) 13:55:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) 13:55:41 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:41 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) bpf$LINK_DETACH(0x22, &(0x7f0000000300), 0x4) 13:55:41 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) getpeername$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:41 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:41 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) 13:55:41 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:41 executing program 0: getpeername$ax25(0xffffffffffffffff, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:41 executing program 1: bpf$LINK_DETACH(0x22, &(0x7f0000000300), 0x4) 13:55:41 executing program 3: migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:41 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:42 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, 0x0) 13:55:42 executing program 1: bpf$LINK_DETACH(0x22, 0x0, 0x0) 13:55:42 executing program 0: getpeername$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000280)) 13:55:42 executing program 3: migrate_pages(0x0, 0x0, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:42 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:42 executing program 3: migrate_pages(0x0, 0x0, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:42 executing program 2: migrate_pages(0x0, 0x0, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:42 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:42 executing program 0: getpeername$ax25(0xffffffffffffffff, 0x0, 0x0) 13:55:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:42 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:42 executing program 3: migrate_pages(0x0, 0x0, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:42 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:42 executing program 2: migrate_pages(0x0, 0x0, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:42 executing program 3: migrate_pages(0x0, 0x6, 0x0, &(0x7f00000000c0)=0x7) 13:55:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x0, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:42 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:42 executing program 1: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:42 executing program 2: migrate_pages(0x0, 0x0, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:42 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) write$UHID_CREATE(0xffffffffffffffff, &(0x7f0000000080)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000040)=""/51, 0xfffffffffffffcb8, 0x3, 0x3, 0x200, 0x0, 0x7ff}}, 0x120) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) syz_btf_id_by_name$bpf_lsm(&(0x7f0000000100)='bpf_lsm_secmark_refcount_inc\x00') r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f00000002c0)={r0}) getpeername$ax25(r0, &(0x7f0000000200)={{0x3, @default}, [@rose, @default, @default, @bcast, @remote, @remote, @remote, @null]}, &(0x7f0000000280)=0x48) 13:55:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:42 executing program 3: migrate_pages(0x0, 0x6, 0x0, 0x0) 13:55:42 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:42 executing program 2: migrate_pages(0x0, 0x0, 0x0, &(0x7f00000000c0)=0x7) 13:55:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x110, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:42 executing program 4: migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:42 executing program 3: migrate_pages(0x0, 0x6, 0x0, 0x0) 13:55:42 executing program 2: migrate_pages(0x0, 0x0, 0x0, 0x0) 13:55:42 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:43 executing program 1: migrate_pages(0x0, 0x6, 0x0, &(0x7f00000000c0)=0x7) 13:55:43 executing program 4: migrate_pages(0x0, 0x0, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:43 executing program 3: migrate_pages(0x0, 0x6, 0x0, 0x0) 13:55:43 executing program 2: migrate_pages(0x0, 0x0, 0x0, 0x0) 13:55:43 executing program 0: migrate_pages(0x0, 0x6, 0x0, 0x0) 13:55:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:43 executing program 2: migrate_pages(0x0, 0x0, 0x0, 0x0) 13:55:43 executing program 3: migrate_pages(0x0, 0x6, 0x0, &(0x7f00000000c0)) 13:55:43 executing program 0: migrate_pages(0x0, 0x6, 0x0, 0x0) 13:55:43 executing program 4: migrate_pages(0x0, 0x0, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:43 executing program 2: migrate_pages(0x0, 0x0, 0x0, &(0x7f00000000c0)) 13:55:43 executing program 1: migrate_pages(0x0, 0x6, 0x0, &(0x7f00000000c0)=0x7) 13:55:43 executing program 3: migrate_pages(0x0, 0x6, 0x0, &(0x7f00000000c0)) 13:55:43 executing program 4: migrate_pages(0x0, 0x0, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:43 executing program 0: migrate_pages(0x0, 0x6, 0x0, 0x0) 13:55:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x30, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:43 executing program 1: migrate_pages(0x0, 0x6, 0x0, &(0x7f00000000c0)=0x7) 13:55:43 executing program 0: migrate_pages(0x0, 0x0, 0x0, 0x0) 13:55:43 executing program 3: migrate_pages(0x0, 0x6, 0x0, &(0x7f00000000c0)) 13:55:43 executing program 4: migrate_pages(0x0, 0x6, 0x0, &(0x7f00000000c0)=0x7) 13:55:43 executing program 2: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x118, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_KEY={0xd4, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x41}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "3f645a122c2b4a1cfe79f86a5d49bf45ec472f6bfaa48c40f9adeb646318de07"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_ID={0x94, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x30, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0b}]}]}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x118}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x40080) 13:55:43 executing program 1: migrate_pages(0x0, 0x0, 0x0, &(0x7f00000000c0)=0x7) 13:55:43 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:43 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000200)=0xe8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xf, 0xff, 0x5, 0x8, 0x40, r0, 0x5, '\x00', r1, r2, 0x5, 0x2, 0x3}, 0x40) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:43 executing program 2: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000200)=0xe8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xf, 0xff, 0x5, 0x8, 0x40, r0, 0x5, '\x00', r1, r2, 0x5, 0x2, 0x3}, 0x40) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:43 executing program 4: migrate_pages(0x0, 0x6, 0x0, 0x0) 13:55:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x14}, 0x14}}, 0x40080) 13:55:43 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:43 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000200)=0xe8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xf, 0xff, 0x5, 0x8, 0x40, r0, 0x5, '\x00', r1, r2, 0x5, 0x2, 0x3}, 0x40) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:43 executing program 4: migrate_pages(0x0, 0x6, 0x0, 0x0) 13:55:43 executing program 1: migrate_pages(0x0, 0x0, 0x0, &(0x7f00000000c0)=0x7) 13:55:43 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:55:43 executing program 1: migrate_pages(0x0, 0x0, 0x0, &(0x7f00000000c0)=0x7) 13:55:43 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) migrate_pages(0x0, 0x6, &(0x7f0000000000)=0x1ff, &(0x7f00000000c0)=0x7) 13:55:43 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)={0x14}, 0x14}}, 0x0) 13:55:44 executing program 4: migrate_pages(0x0, 0x6, 0x0, 0x0) 13:55:44 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000200)=0xe8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xf, 0xff, 0x5, 0x8, 0x40, r0, 0x5, '\x00', r1, r2, 0x5, 0x2, 0x3}, 0x40) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:44 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:55:44 executing program 1: migrate_pages(0x0, 0x6, 0x0, 0x0) 13:55:44 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) 13:55:44 executing program 4: migrate_pages(0x0, 0x6, 0x0, &(0x7f00000000c0)) 13:55:44 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) write$UHID_SET_REPORT_REPLY(r2, 0x0, 0xfffffffffffffc71) 13:55:44 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000200)=0xe8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xf, 0xff, 0x5, 0x8, 0x40, r0, 0x5, '\x00', r1, r2, 0x5, 0x2, 0x3}, 0x40) 13:55:44 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) write$UHID_SET_REPORT_REPLY(r2, 0x0, 0xfffffffffffffc71) 13:55:44 executing program 1: migrate_pages(0x0, 0x6, 0x0, 0x0) 13:55:44 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) socket$l2tp(0x2, 0x2, 0x73) 13:55:44 executing program 4: migrate_pages(0x0, 0x6, 0x0, &(0x7f00000000c0)) 13:55:44 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) write$UHID_SET_REPORT_REPLY(r2, 0x0, 0xfffffffffffffc71) 13:55:44 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000200)=0xe8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xf, 0xff, 0x5, 0x8, 0x40, r0, 0x5, '\x00', r1, r2, 0x5, 0x2, 0x3}, 0x40) 13:55:44 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) write$UHID_SET_REPORT_REPLY(r2, 0x0, 0xfffffffffffffc71) 13:55:44 executing program 1: migrate_pages(0x0, 0x6, 0x0, 0x0) 13:55:44 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) socket$l2tp(0x2, 0x2, 0x73) 13:55:44 executing program 4: migrate_pages(0x0, 0x6, 0x0, &(0x7f00000000c0)) 13:55:44 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000200)=0xe8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xf, 0xff, 0x5, 0x8, 0x40, r0, 0x5, '\x00', r1, r2, 0x5, 0x2, 0x3}, 0x40) 13:55:44 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) write$UHID_SET_REPORT_REPLY(r2, 0x0, 0xfffffffffffffc71) 13:55:44 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) write$UHID_SET_REPORT_REPLY(r2, 0x0, 0xfffffffffffffc71) 13:55:44 executing program 1: migrate_pages(0x0, 0x6, 0x0, &(0x7f00000000c0)) 13:55:44 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) socket$l2tp(0x2, 0x2, 0x73) 13:55:44 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) 13:55:44 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000200)=0xe8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xf, 0xff, 0x5, 0x8, 0x40, r0, 0x5, '\x00', r1, r2, 0x5, 0x2, 0x3}, 0x40) 13:55:44 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) 13:55:44 executing program 1: migrate_pages(0x0, 0x6, 0x0, &(0x7f00000000c0)) 13:55:44 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r2, 0x0, 0xfffffffffffffc71) 13:55:44 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:44 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) 13:55:45 executing program 1: migrate_pages(0x0, 0x6, 0x0, &(0x7f00000000c0)) 13:55:45 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000200)=0xe8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xf, 0xff, 0x5, 0x8, 0x40, r0, 0x5, '\x00', r1, r2, 0x5, 0x2, 0x3}, 0x40) 13:55:45 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xfffffffffffffc71) 13:55:45 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) 13:55:45 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:45 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000000080)) socket$l2tp(0x2, 0x2, 0x73) 13:55:45 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000100)={{{@in=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f0000000200)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xf, 0xff, 0x5, 0x8, 0x40, r0, 0x5, '\x00', r1, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x40) 13:55:45 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xfffffffffffffc71) 13:55:45 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) 13:55:45 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:45 executing program 3: r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xf, 0xff, 0x5, 0x8, 0x40, r0, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x40) 13:55:45 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) 13:55:45 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) r3 = accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r3, r1}) socket$l2tp(0x2, 0x2, 0x73) 13:55:45 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xfffffffffffffc71) 13:55:45 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) 13:55:45 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0xf, 0xff, 0x5, 0x8, 0x40, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x40) 13:55:45 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) 13:55:45 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) accept$ax25(r1, &(0x7f0000000100)={{0x3, @bcast}, [@bcast, @remote, @null, @bcast, @default, @remote, @rose, @default]}, &(0x7f00000001c0)=0x48) socket$l2tp(0x2, 0x2, 0x73) 13:55:45 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r1, 0x0, 0xfffffffffffffc71) 13:55:45 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) 13:55:45 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:45 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 13:55:45 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) socket$l2tp(0x2, 0x2, 0x73) 13:55:45 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) 13:55:45 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 13:55:45 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:45 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r1, 0x0, 0xfffffffffffffc71) 13:55:45 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 13:55:45 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:46 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) 13:55:46 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) 13:55:46 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:46 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r1, 0x0, 0xfffffffffffffc71) 13:55:46 executing program 3: bpf$MAP_CREATE(0x0, 0x0, 0x0) 13:55:46 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:46 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) 13:55:46 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:46 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 13:55:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x0, 0xff, 0x5, 0x8, 0x40, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x40) 13:55:46 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) 13:55:46 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r1, 0x0, 0xfffffffffffffc71) 13:55:46 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:46 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:46 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x0, 0x0, 0x5, 0x8, 0x40, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x40) 13:55:46 executing program 0: socket$l2tp(0x2, 0x2, 0x73) 13:55:46 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x40000000) 13:55:46 executing program 5: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffffffffffc71) 13:55:46 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x8, 0x40, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x40) 13:55:46 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffffffffffc71) 13:55:46 executing program 0: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffffffffffc71) 13:55:46 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 13:55:46 executing program 2: recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 13:55:46 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x40, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x40) 13:55:46 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffffffffffc71) 13:55:46 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:46 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:46 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:46 executing program 2: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:46 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x40) 13:55:46 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffffffffffc71) 13:55:47 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:47 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 13:55:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3}, 0x40) 13:55:47 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:47 executing program 1: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:47 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffffffffffc71) 13:55:47 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 13:55:47 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 13:55:47 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x40) 13:55:47 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffffffffffc71) 13:55:47 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:47 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 13:55:47 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x40) 13:55:47 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffffffffffc71) 13:55:47 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) 13:55:47 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:47 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:47 executing program 4: socket$l2tp(0x2, 0x2, 0x73) 13:55:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240), 0x40) 13:55:47 executing program 5: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write$UHID_SET_REPORT_REPLY(r0, 0x0, 0xfffffffffffffc71) 13:55:47 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:47 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:47 executing program 4: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:47 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:47 executing program 1: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240), 0x40) 13:55:47 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xfffffffffffffc71) 13:55:47 executing program 2: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:47 executing program 4: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:47 executing program 1: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:47 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:47 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000240), 0x40) 13:55:47 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xfffffffffffffc71) 13:55:47 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:47 executing program 4: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 3: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 1: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 5: openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xfffffffffffffc71) 13:55:48 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 1: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 2: syz_io_uring_setup(0x0, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 3: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 0: syz_io_uring_setup(0x0, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 3: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 1: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 2: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 0: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 4: syz_io_uring_setup(0x0, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 2: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 0: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 1: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 4: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 5: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 2: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 1: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:48 executing program 0: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 3: syz_io_uring_setup(0x0, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 4: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 2: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 1: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:48 executing program 4: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 3: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 2: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 4: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:48 executing program 1: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:49 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:49 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:49 executing program 3: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:49 executing program 1: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:49 executing program 4: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:49 executing program 2: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:49 executing program 5: syz_io_uring_setup(0x0, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:49 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:49 executing program 3: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:49 executing program 4: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:49 executing program 2: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:49 executing program 1: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:49 executing program 5: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:49 executing program 3: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:49 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:49 executing program 2: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:49 executing program 4: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:49 executing program 1: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:49 executing program 3: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:49 executing program 4: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:49 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:49 executing program 5: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:49 executing program 1: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:49 executing program 2: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:49 executing program 3: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:49 executing program 4: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:49 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:49 executing program 5: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:49 executing program 1: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:49 executing program 2: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:49 executing program 3: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:49 executing program 4: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:49 executing program 5: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:49 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:49 executing program 1: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:50 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:50 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:50 executing program 4: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:50 executing program 5: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:50 executing program 2: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:50 executing program 3: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:50 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:50 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:50 executing program 2: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:50 executing program 3: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:50 executing program 4: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:50 executing program 5: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:50 executing program 1: syz_io_uring_setup(0x0, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:50 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:50 executing program 5: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:50 executing program 2: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:50 executing program 4: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:50 executing program 3: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:50 executing program 1: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:50 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:50 executing program 5: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:50 executing program 2: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:50 executing program 4: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:50 executing program 3: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:50 executing program 1: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:50 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:50 executing program 5: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:50 executing program 2: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:50 executing program 4: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:51 executing program 3: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:51 executing program 1: syz_io_uring_setup(0x6215, 0x0, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:51 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:51 executing program 2: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:51 executing program 5: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:51 executing program 4: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:51 executing program 3: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:51 executing program 1: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 13:55:51 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000016c0)) 13:55:51 executing program 2: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x2, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:51 executing program 5: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:51 executing program 4: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0xc3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:51 executing program 1: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 13:55:51 executing program 3: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:51 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:51 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:51 executing program 5: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:51 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) 13:55:51 executing program 1: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 13:55:51 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:51 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r1, 0x0, 0xfffffffffffffc71) 13:55:51 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_SET_REPORT_REPLY(r1, 0x0, 0xfffffffffffffc71) 13:55:51 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) 13:55:51 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) 13:55:51 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) 13:55:51 executing program 3: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0) 13:55:51 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:51 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0xfffffffffffffc71) 13:55:51 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) 13:55:51 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$l2tp(0x2, 0x2, 0x73) 13:55:51 executing program 3: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) socket$l2tp(0x2, 0x2, 0x73) 13:55:51 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xcf4e, 0x0, 0x2, 0xc3, 0x0, r0}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) recvmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000040)=@in={0x2, 0x0, @remote}, 0x80, &(0x7f0000000440)=[{&(0x7f00000000c0)=""/103, 0x67}, {&(0x7f00000001c0)=""/191, 0xbf}, {&(0x7f0000000280)=""/240, 0xf0}, {&(0x7f0000000140)=""/36, 0x24}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000000380)=""/177, 0xb1}], 0x6, &(0x7f0000001580)=""/142, 0x8e}, 0x40000000) write$UHID_SET_REPORT_REPLY(r2, 0x0, 0xfffffffffffffc71) 13:55:52 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:55:52 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:55:52 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:55:52 executing program 3: wait4(0x0, 0x0, 0x0, 0x0) 13:55:52 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={r0, r4}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:55:52 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r2, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000540)={r3}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f00000001c0)={r0, r4}) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) 13:55:52 executing program 0: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x200, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x12}, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000884}, 0x80) r2 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@xdp, &(0x7f0000000380)=0x80, 0x800) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f00000003c0)) 13:55:52 executing program 5: r0 = gettid() ptrace$setregs(0xd, r0, 0xff, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:52 executing program 2: r0 = gettid() ptrace$setregs(0xd, r0, 0xff, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:52 executing program 3: wait4(0x0, 0x0, 0x0, 0x0) 13:55:52 executing program 4: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000300)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f0000000340), 0x4) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r1, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000540)={r2}) write$UHID_CREATE(r1, &(0x7f0000000100)={0x0, {'syz0\x00', 'syz1\x00', 'syz0\x00', &(0x7f0000000000)=""/253, 0xfd, 0x103, 0x1, 0x1, 0xfffffff8, 0x7ff}}, 0x120) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000380)={0xf, 0x8, 0xfa00, {0xffffffffffffffff, 0x6}}, 0x10) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000240), 0x4) ioctl$SIOCAX25CTLCON(r3, 0x89e8, &(0x7f0000000280)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @null, 0x6, 0x5, 0x8, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}) 13:55:52 executing program 2: r0 = gettid() ptrace$setregs(0xd, r0, 0xff, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:52 executing program 3: wait4(0x0, 0x0, 0x0, 0x0) 13:55:52 executing program 1: setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000000)=0x200, 0x4) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f00000000c0)='./file0\x00', 0x0, 0x8}, 0x10) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, r1, 0x12}, 0x10) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x44, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @initdev={0xac, 0x1e, 0x1, 0x0}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={'\x00', '\xff\xff', @multicast2}}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000884}, 0x80) r3 = accept4(0xffffffffffffffff, &(0x7f0000000300)=@xdp, &(0x7f0000000380)=0x80, 0x800) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000003c0)) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000400)={0xe, {0x8, 0xf, 0xff, 0xc, "fe2082f5901192b9695f8072"}}, 0x18) write$sndseq(0xffffffffffffffff, &(0x7f0000001440)=[{0x2b, 0x1f, 0xb4, 0x1, @time={0x8000, 0x5}, {0x5, 0x7}, {0x2, 0x3}, @time=@tick=0x401}, {0xff, 0x9, 0xa4, 0x3f, @time={0x8000, 0x7}, {0xff, 0x8}, {0xec, 0x8}, @raw8={"3c92dbd2372ed4f8193fc73a"}}, {0x1f, 0x5, 0x40, 0x0, @time={0x1, 0xc000000}, {0x9f, 0x81}, {0x4, 0x81}, @addr={0x15, 0x1}}, {0x80, 0x0, 0x7, 0xd1, @tick=0x3, {0x0, 0x1f}, {0x1d}, @time=@tick=0x4}, {0x0, 0x0, 0x0, 0x81, @tick=0x47, {0x20, 0x3f}, {0x5, 0x6}, @time=@time={0x9, 0x4}}, {0x96, 0x0, 0xc3, 0x39, @tick=0xaf57, {0x9, 0x8}, {0x7, 0x40}, @control={0x4, 0x10001, 0x9}}, {0x7f, 0x1, 0xab, 0x3, @time={0x7, 0x6}, {0x55, 0xff}, {0x7f, 0x95}, @ext={0x1000, &(0x7f0000000440)="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"}}, {0x2, 0x2, 0x9e, 0x20, @tick=0x4, {0x81, 0x7f}, {0x5, 0x1f}, @time=@time={0x0, 0x3}}, {0x3f, 0x3, 0x1, 0x9, @time={0xfff, 0x30d1}, {0x1, 0x80}, {0x9, 0x51}, @quote={{0x6, 0x3}, 0x2}}, {0x81, 0xff, 0x3f, 0xfe, @tick=0x7, {0xa2, 0x9}, {0x1, 0x1f}, @connect={{0x1a, 0x4}, {0x20, 0x80}}}], 0x118) bpf$OBJ_GET_PROG(0x7, &(0x7f00000015c0)={&(0x7f0000001580)='./file0\x00'}, 0x10) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000001600)={r2}, 0x8) getsockopt$inet6_tcp_int(r4, 0x6, 0x5, &(0x7f0000001640), &(0x7f0000001680)=0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000016c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001700), 0x802, 0x0) write$UHID_CREATE2(r5, &(0x7f0000001740)={0xb, {'syz1\x00', 'syz0\x00', 'syz0\x00', 0xa, 0x9c0, 0x0, 0xffff8001, 0x874f, 0x7, "1b9827229f19a7a8eaa6"}}, 0x122) openat$uhid(0xffffffffffffff9c, &(0x7f0000001880), 0x802, 0x0) 13:55:52 executing program 5: r0 = gettid() ptrace$setregs(0xd, r0, 0xff, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:52 executing program 0 (fault-call:0 fault-nth:0): syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:52 executing program 4 (fault-call:0 fault-nth:0): syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) [ 557.247546][ T9686] hid (null): bogus close delimiter [ 557.256529][ T9686] hid-generic 09C0:0000:FFFF8001.009D: bogus close delimiter [ 557.263775][T29653] FAULT_INJECTION: forcing a failure. [ 557.263775][T29653] name fail_usercopy, interval 1, probability 0, space 0, times 0 13:55:52 executing program 3 (fault-call:0 fault-nth:0): wait4(0x0, 0x0, 0x0, 0x0) 13:55:52 executing program 5: r0 = gettid() ptrace$setregs(0xd, r0, 0xff, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) 13:55:52 executing program 2: r0 = gettid() ptrace$setregs(0xd, r0, 0xff, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, 0x0, 0x0) [ 557.297878][ T9686] hid-generic 09C0:0000:FFFF8001.009D: item 0 0 2 10 parsing failed [ 557.336047][T29653] CPU: 0 PID: 29653 Comm: syz-executor.0 Not tainted 5.12.0-syzkaller #0 [ 557.344673][T29653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.354734][T29653] Call Trace: [ 557.355770][ T9686] hid-generic: probe of 09C0:0000:FFFF8001.009D failed with error -22 [ 557.358038][T29653] dump_stack+0x141/0x1d7 [ 557.358069][T29653] should_fail.cold+0x5/0xa [ 557.358098][T29653] _copy_from_user+0x2c/0x180 [ 557.379669][T29653] io_uring_setup+0x91/0x2a80 [ 557.384357][T29653] ? __context_tracking_exit+0xb8/0xe0 [ 557.389830][T29653] ? io_connect+0x680/0x680 [ 557.394343][T29653] ? lock_downgrade+0x6e0/0x6e0 [ 557.399398][T29653] ? syscall_enter_from_user_mode+0x27/0x70 [ 557.405298][T29653] do_syscall_64+0x3a/0xb0 [ 557.409721][T29653] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 557.415622][T29653] RIP: 0033:0x4665f9 [ 557.419518][T29653] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 557.439130][T29653] RSP: 002b:00007f4020318108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 557.447547][T29653] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 557.455524][T29653] RDX: 0000000020ffb000 RSI: 0000000020001640 RDI: 0000000000006215 [ 557.463499][T29653] RBP: 0000000020001640 R08: 0000000000000000 R09: 0000000000000000 [ 557.471474][T29653] R10: 0000000020000500 R11: 0000000000000202 R12: 0000000000000000 [ 557.479445][T29653] R13: 0000000020ffb000 R14: 0000000020000500 R15: 0000000020ffc000 [ 557.493454][T29657] FAULT_INJECTION: forcing a failure. 13:55:52 executing program 5: r0 = gettid() ptrace$setregs(0xd, r0, 0xff, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") 13:55:52 executing program 1 (fault-call:0 fault-nth:0): syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) [ 557.493454][T29657] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.543368][T29668] FAULT_INJECTION: forcing a failure. [ 557.543368][T29668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.563563][T29657] CPU: 0 PID: 29657 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 557.572070][T29657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.582125][T29657] Call Trace: [ 557.585402][T29657] dump_stack+0x141/0x1d7 [ 557.589765][T29657] should_fail.cold+0x5/0xa [ 557.592051][T29670] FAULT_INJECTION: forcing a failure. [ 557.592051][T29670] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 557.594281][T29657] _copy_from_user+0x2c/0x180 [ 557.594308][T29657] io_uring_setup+0x91/0x2a80 [ 557.594334][T29657] ? __context_tracking_exit+0xb8/0xe0 [ 557.594362][T29657] ? io_connect+0x680/0x680 [ 557.594381][T29657] ? lock_downgrade+0x6e0/0x6e0 [ 557.631561][T29657] ? syscall_enter_from_user_mode+0x27/0x70 [ 557.637491][T29657] do_syscall_64+0x3a/0xb0 [ 557.641906][T29657] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 557.647815][T29657] RIP: 0033:0x4665f9 [ 557.651729][T29657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 557.671335][T29657] RSP: 002b:00007f61fb516108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 557.679862][T29657] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 557.687831][T29657] RDX: 0000000020ffb000 RSI: 0000000020001640 RDI: 0000000000006215 [ 557.695824][T29657] RBP: 0000000020001640 R08: 00000000200016c0 R09: 00000000200016c0 [ 557.703794][T29657] R10: 0000000020000500 R11: 0000000000000202 R12: 00000000200016c0 [ 557.711766][T29657] R13: 0000000020ffb000 R14: 0000000020000500 R15: 0000000020ffc000 [ 557.719756][T29670] CPU: 1 PID: 29670 Comm: syz-executor.3 Not tainted 5.12.0-syzkaller #0 [ 557.728171][T29670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.738216][T29670] Call Trace: [ 557.741481][T29670] dump_stack+0x141/0x1d7 [ 557.745809][T29670] should_fail.cold+0x5/0xa [ 557.750332][T29670] _copy_to_user+0x2c/0x150 [ 557.754829][T29670] simple_read_from_buffer+0xcc/0x160 [ 557.760202][T29670] proc_fail_nth_read+0x187/0x220 [ 557.765239][T29670] ? proc_exe_link+0x1d0/0x1d0 [ 557.770007][T29670] ? security_file_permission+0x248/0x560 [ 557.775728][T29670] ? proc_exe_link+0x1d0/0x1d0 [ 557.780482][T29670] vfs_read+0x1b5/0x570 [ 557.784671][T29670] ksys_read+0x12d/0x250 [ 557.788907][T29670] ? vfs_write+0xa30/0xa30 [ 557.793338][T29670] ? syscall_enter_from_user_mode+0x27/0x70 [ 557.799231][T29670] do_syscall_64+0x3a/0xb0 [ 557.803656][T29670] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 557.809566][T29670] RIP: 0033:0x41937c [ 557.813468][T29670] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 557.833082][T29670] RSP: 002b:00007f79f03b6170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 557.841483][T29670] RAX: ffffffffffffffda RBX: ffffffffffffffff RCX: 000000000041937c [ 557.849459][T29670] RDX: 000000000000000f RSI: 00007f79f03b61e0 RDI: 0000000000000003 [ 557.857416][T29670] RBP: 00007f79f03b61d0 R08: 0000000000000000 R09: 0000000000000000 [ 557.865551][T29670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.873510][T29670] R13: 00007ffd3ab8630f R14: 00007f79f03b6300 R15: 0000000000022000 13:55:53 executing program 5: ptrace$setregs(0xd, 0x0, 0xff, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") 13:55:53 executing program 2: r0 = gettid() ptrace$setregs(0xd, r0, 0xff, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") [ 557.891697][T29668] CPU: 0 PID: 29668 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 557.900223][T29668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 557.910276][T29668] Call Trace: [ 557.913556][T29668] dump_stack+0x141/0x1d7 [ 557.917896][T29668] should_fail.cold+0x5/0xa [ 557.922413][T29668] _copy_from_user+0x2c/0x180 [ 557.927130][T29668] io_uring_setup+0x91/0x2a80 [ 557.931821][T29668] ? __context_tracking_exit+0xb8/0xe0 [ 557.937290][T29668] ? io_connect+0x680/0x680 [ 557.941795][T29668] ? lock_downgrade+0x6e0/0x6e0 [ 557.946672][T29668] ? syscall_enter_from_user_mode+0x27/0x70 [ 557.952587][T29668] do_syscall_64+0x3a/0xb0 [ 557.957032][T29668] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 557.962935][T29668] RIP: 0033:0x4665f9 [ 557.966830][T29668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 557.986442][T29668] RSP: 002b:00007efe66df9108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 557.994881][T29668] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 558.002855][T29668] RDX: 0000000020ffb000 RSI: 0000000020001640 RDI: 0000000000006215 [ 558.010826][T29668] RBP: 0000000020001640 R08: 00000000200016c0 R09: 00000000200016c0 [ 558.018796][T29668] R10: 0000000020000500 R11: 0000000000000202 R12: 00000000200016c0 [ 558.026774][T29668] R13: 0000000020ffb000 R14: 0000000020000500 R15: 0000000020ffc000 13:55:53 executing program 5: ptrace$setregs(0xd, 0x0, 0xff, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") 13:55:53 executing program 2: gettid() 13:55:53 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:53 executing program 1 (fault-call:0 fault-nth:1): syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:53 executing program 4 (fault-call:0 fault-nth:1): syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:53 executing program 3: wait4(0x0, 0x0, 0x0, 0x0) 13:55:53 executing program 5: ptrace$setregs(0xd, 0x0, 0xff, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") 13:55:53 executing program 2: ptrace$setregs(0xd, 0x0, 0xff, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") 13:55:53 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) [ 558.258575][T29687] FAULT_INJECTION: forcing a failure. [ 558.258575][T29687] name failslab, interval 1, probability 0, space 0, times 1 [ 558.282000][T29688] FAULT_INJECTION: forcing a failure. [ 558.282000][T29688] name failslab, interval 1, probability 0, space 0, times 1 [ 558.324504][T29687] CPU: 1 PID: 29687 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 558.333038][T29687] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.343087][T29687] Call Trace: [ 558.346353][T29687] dump_stack+0x141/0x1d7 [ 558.350678][T29687] should_fail.cold+0x5/0xa [ 558.355181][T29687] ? io_uring_setup+0x27d/0x2a80 [ 558.360110][T29687] should_failslab+0x5/0x10 [ 558.364616][T29687] kmem_cache_alloc_trace+0x55/0x290 [ 558.369908][T29687] io_uring_setup+0x27d/0x2a80 [ 558.374667][T29687] ? __context_tracking_exit+0xb8/0xe0 [ 558.380122][T29687] ? io_connect+0x680/0x680 [ 558.384625][T29687] ? syscall_enter_from_user_mode+0x27/0x70 [ 558.390516][T29687] do_syscall_64+0x3a/0xb0 [ 558.394924][T29687] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 558.400813][T29687] RIP: 0033:0x4665f9 [ 558.404696][T29687] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 13:55:53 executing program 3: wait4(0x0, 0x0, 0x7, 0x0) [ 558.424292][T29687] RSP: 002b:00007f61fb516108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 558.432698][T29687] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 558.440659][T29687] RDX: 0000000020ffb000 RSI: 0000000020001640 RDI: 0000000000006215 [ 558.448618][T29687] RBP: 0000000020001640 R08: 00000000200016c0 R09: 00000000200016c0 [ 558.456577][T29687] R10: 0000000020000500 R11: 0000000000000202 R12: 00000000200016c0 [ 558.464558][T29687] R13: 0000000020ffb000 R14: 0000000020000500 R15: 0000000020ffc000 13:55:53 executing program 5: r0 = gettid() ptrace$setregs(0xffffffffffffffff, r0, 0xff, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") [ 558.496498][T29688] CPU: 1 PID: 29688 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 558.505020][T29688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 558.515070][T29688] Call Trace: [ 558.518346][T29688] dump_stack+0x141/0x1d7 [ 558.522685][T29688] should_fail.cold+0x5/0xa [ 558.527203][T29688] ? io_uring_setup+0x27d/0x2a80 [ 558.532145][T29688] should_failslab+0x5/0x10 [ 558.536656][T29688] kmem_cache_alloc_trace+0x55/0x290 [ 558.542212][T29688] io_uring_setup+0x27d/0x2a80 [ 558.546986][T29688] ? __context_tracking_exit+0xb8/0xe0 [ 558.552454][T29688] ? io_connect+0x680/0x680 [ 558.556973][T29688] ? syscall_enter_from_user_mode+0x27/0x70 [ 558.562880][T29688] do_syscall_64+0x3a/0xb0 [ 558.567302][T29688] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 558.573250][T29688] RIP: 0033:0x4665f9 [ 558.577142][T29688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 558.596775][T29688] RSP: 002b:00007efe66df9108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 558.605185][T29688] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 558.613145][T29688] RDX: 0000000020ffb000 RSI: 0000000020001640 RDI: 0000000000006215 [ 558.621107][T29688] RBP: 0000000020001640 R08: 00000000200016c0 R09: 00000000200016c0 [ 558.629089][T29688] R10: 0000000020000500 R11: 0000000000000202 R12: 00000000200016c0 [ 558.637047][T29688] R13: 0000000020ffb000 R14: 0000000020000500 R15: 0000000020ffc000 13:55:53 executing program 5: gettid() ptrace$setregs(0xffffffffffffffff, 0x0, 0xff, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") 13:55:53 executing program 2: ptrace$setregs(0xd, 0x0, 0xff, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") 13:55:53 executing program 3: wait4(0x0, 0x0, 0x700, 0x0) 13:55:53 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:54 executing program 1 (fault-call:0 fault-nth:2): syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:54 executing program 4 (fault-call:0 fault-nth:2): syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:54 executing program 2: ptrace$setregs(0xd, 0x0, 0xff, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") 13:55:54 executing program 3: wait4(0x0, 0x0, 0x7000000, 0x0) 13:55:54 executing program 5: gettid() ptrace$setregs(0xffffffffffffffff, 0x0, 0xff, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") 13:55:54 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) [ 558.911154][T29713] FAULT_INJECTION: forcing a failure. [ 558.911154][T29713] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 558.936420][T29715] FAULT_INJECTION: forcing a failure. [ 558.936420][T29715] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 558.983115][T29713] CPU: 1 PID: 29713 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 558.991561][T29713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.001611][T29713] Call Trace: [ 559.004883][T29713] dump_stack+0x141/0x1d7 [ 559.009206][T29713] should_fail.cold+0x5/0xa [ 559.013727][T29713] __alloc_pages_nodemask+0x189/0x730 [ 559.019097][T29713] ? __alloc_pages_slowpath.constprop.0+0x2270/0x2270 [ 559.025853][T29713] ? find_held_lock+0x2d/0x110 [ 559.030613][T29713] ? fs_reclaim_release+0x9c/0xe0 [ 559.035638][T29713] alloc_pages_current+0x18c/0x2a0 [ 559.040744][T29713] kmalloc_order+0x34/0xf0 [ 559.045159][T29713] kmalloc_order_trace+0x14/0x130 [ 559.050174][T29713] io_uring_setup+0x37e/0x2a80 [ 559.054948][T29713] ? __context_tracking_exit+0xb8/0xe0 [ 559.060418][T29713] ? io_connect+0x680/0x680 [ 559.065114][T29713] ? syscall_enter_from_user_mode+0x27/0x70 [ 559.071004][T29713] do_syscall_64+0x3a/0xb0 [ 559.075433][T29713] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 559.081328][T29713] RIP: 0033:0x4665f9 [ 559.085231][T29713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 559.104827][T29713] RSP: 002b:00007efe66df9108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 559.113231][T29713] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 559.121192][T29713] RDX: 0000000020ffb000 RSI: 0000000020001640 RDI: 0000000000006215 13:55:54 executing program 3: wait4(0x0, 0x0, 0x8000000000, 0x0) 13:55:54 executing program 2: ptrace$setregs(0xffffffffffffffff, 0x0, 0xff, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") [ 559.129151][T29713] RBP: 0000000020001640 R08: 00000000200016c0 R09: 00000000200016c0 [ 559.137110][T29713] R10: 0000000020000500 R11: 0000000000000202 R12: 00000000200016c0 [ 559.145070][T29713] R13: 0000000020ffb000 R14: 0000000020000500 R15: 0000000020ffc000 13:55:54 executing program 5: gettid() ptrace$setregs(0xffffffffffffffff, 0x0, 0xff, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") 13:55:54 executing program 3: wait4(0x0, 0x0, 0x700000000000000, 0x0) [ 559.190240][T29715] CPU: 1 PID: 29715 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 559.198878][T29715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.208933][T29715] Call Trace: [ 559.212212][T29715] dump_stack+0x141/0x1d7 [ 559.216552][T29715] should_fail.cold+0x5/0xa [ 559.221072][T29715] __alloc_pages_nodemask+0x189/0x730 [ 559.226452][T29715] ? __alloc_pages_slowpath.constprop.0+0x2270/0x2270 [ 559.233222][T29715] ? find_held_lock+0x2d/0x110 [ 559.237998][T29715] ? fs_reclaim_release+0x9c/0xe0 [ 559.243036][T29715] alloc_pages_current+0x18c/0x2a0 [ 559.248159][T29715] kmalloc_order+0x34/0xf0 [ 559.252586][T29715] kmalloc_order_trace+0x14/0x130 [ 559.257621][T29715] io_uring_setup+0x37e/0x2a80 [ 559.262476][T29715] ? __context_tracking_exit+0xb8/0xe0 [ 559.267960][T29715] ? io_connect+0x680/0x680 [ 559.272461][T29715] ? syscall_enter_from_user_mode+0x27/0x70 [ 559.278373][T29715] do_syscall_64+0x3a/0xb0 [ 559.282781][T29715] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 559.288673][T29715] RIP: 0033:0x4665f9 [ 559.292556][T29715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 559.312153][T29715] RSP: 002b:00007f61fb516108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 559.320557][T29715] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 559.328592][T29715] RDX: 0000000020ffb000 RSI: 0000000020001640 RDI: 0000000000006215 13:55:54 executing program 5: r0 = gettid() ptrace$setregs(0xffffffffffffffff, r0, 0x0, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") [ 559.336640][T29715] RBP: 0000000020001640 R08: 00000000200016c0 R09: 00000000200016c0 [ 559.344597][T29715] R10: 0000000020000500 R11: 0000000000000202 R12: 00000000200016c0 [ 559.352555][T29715] R13: 0000000020ffb000 R14: 0000000020000500 R15: 0000000020ffc000 13:55:54 executing program 1 (fault-call:0 fault-nth:3): syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:54 executing program 4 (fault-call:0 fault-nth:3): syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:54 executing program 3: wait4(0x0, 0x0, 0xffffffff00000000, 0x0) 13:55:54 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x4}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:54 executing program 2: ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)="df59b97679e4f941afd440d82ef80c77488e72091c2cdadab1d8edb1af9f8c39e2c083677052c32dd61ba89b6e54ce3f4db2a34a80afa8500958b8d643e7e446d970c9a209665316bad51736f4abce68fdded6b19bc0cbb1d1949a9acf2561c1a972f1f76d29cdb9647ce36013a6c308f26ed71bc54ea05a") 13:55:54 executing program 5: r0 = gettid() ptrace$setregs(0xffffffffffffffff, r0, 0x0, 0x0) [ 559.493130][T29734] FAULT_INJECTION: forcing a failure. [ 559.493130][T29734] name failslab, interval 1, probability 0, space 0, times 0 [ 559.534912][T29738] FAULT_INJECTION: forcing a failure. [ 559.534912][T29738] name failslab, interval 1, probability 0, space 0, times 0 [ 559.547960][T29734] CPU: 0 PID: 29734 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 559.556557][T29734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.566783][T29734] Call Trace: [ 559.570066][T29734] dump_stack+0x141/0x1d7 [ 559.574407][T29734] should_fail.cold+0x5/0xa [ 559.578920][T29734] ? percpu_ref_init+0xcc/0x3a0 [ 559.583770][T29734] should_failslab+0x5/0x10 [ 559.588286][T29734] kmem_cache_alloc_trace+0x55/0x290 [ 559.593583][T29734] ? io_uring_fasync+0x60/0x60 [ 559.598357][T29734] percpu_ref_init+0xcc/0x3a0 [ 559.603033][T29734] ? rcu_read_lock_sched_held+0x3a/0x70 [ 559.608591][T29734] io_uring_setup+0x42d/0x2a80 [ 559.613360][T29734] ? __context_tracking_exit+0xb8/0xe0 [ 559.618826][T29734] ? io_connect+0x680/0x680 [ 559.623343][T29734] ? syscall_enter_from_user_mode+0x27/0x70 [ 559.629250][T29734] do_syscall_64+0x3a/0xb0 [ 559.633670][T29734] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 559.639571][T29734] RIP: 0033:0x4665f9 [ 559.643464][T29734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 559.663075][T29734] RSP: 002b:00007efe66df9108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 559.671489][T29734] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 13:55:54 executing program 5: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x3}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:54 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x6}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) [ 559.679462][T29734] RDX: 0000000020ffb000 RSI: 0000000020001640 RDI: 0000000000006215 [ 559.687430][T29734] RBP: 0000000020001640 R08: 00000000200016c0 R09: 00000000200016c0 [ 559.695403][T29734] R10: 0000000020000500 R11: 0000000000000202 R12: 00000000200016c0 [ 559.703376][T29734] R13: 0000000020ffb000 R14: 0000000020000500 R15: 0000000020ffc000 [ 559.820399][T29738] CPU: 0 PID: 29738 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 559.829215][T29738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.839268][T29738] Call Trace: [ 559.842727][T29738] dump_stack+0x141/0x1d7 [ 559.847063][T29738] should_fail.cold+0x5/0xa [ 559.851583][T29738] ? percpu_ref_init+0xcc/0x3a0 [ 559.856436][T29738] should_failslab+0x5/0x10 [ 559.860982][T29738] kmem_cache_alloc_trace+0x55/0x290 [ 559.866276][T29738] ? io_uring_fasync+0x60/0x60 [ 559.867383][T29754] FAULT_INJECTION: forcing a failure. [ 559.867383][T29754] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 559.871041][T29738] percpu_ref_init+0xcc/0x3a0 [ 559.871067][T29738] io_uring_setup+0x42d/0x2a80 [ 559.871091][T29738] ? __context_tracking_exit+0xb8/0xe0 [ 559.871119][T29738] ? io_connect+0x680/0x680 [ 559.871146][T29738] ? syscall_enter_from_user_mode+0x27/0x70 [ 559.909476][T29738] do_syscall_64+0x3a/0xb0 [ 559.913917][T29738] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 559.919823][T29738] RIP: 0033:0x4665f9 [ 559.923714][T29738] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 559.943419][T29738] RSP: 002b:00007f61fb516108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 559.951838][T29738] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 559.959816][T29738] RDX: 0000000020ffb000 RSI: 0000000020001640 RDI: 0000000000006215 13:55:55 executing program 1 (fault-call:0 fault-nth:4): syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:55 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:55 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0xc}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:55 executing program 2: ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, 0x0) [ 559.967785][T29738] RBP: 0000000020001640 R08: 00000000200016c0 R09: 00000000200016c0 [ 559.975761][T29738] R10: 0000000020000500 R11: 0000000000000202 R12: 00000000200016c0 [ 559.983740][T29738] R13: 0000000020ffb000 R14: 0000000020000500 R15: 0000000020ffc000 [ 559.998128][T29754] CPU: 1 PID: 29754 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 560.007272][T29754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.017332][T29754] Call Trace: [ 560.020609][T29754] dump_stack+0x141/0x1d7 [ 560.024948][T29754] should_fail.cold+0x5/0xa [ 560.029466][T29754] __alloc_pages_nodemask+0x189/0x730 [ 560.034866][T29754] ? __debug_object_init+0x409/0xd10 [ 560.040156][T29754] ? __alloc_pages_slowpath.constprop.0+0x2270/0x2270 [ 560.046932][T29754] ? debug_object_destroy+0x210/0x210 [ 560.052315][T29754] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 560.058564][T29754] ? apparmor_capable+0x1d8/0x460 [ 560.063618][T29754] alloc_pages_current+0x18c/0x2a0 [ 560.068741][T29754] __get_free_pages+0x8/0x40 [ 560.073338][T29754] io_uring_setup+0xcc3/0x2a80 [ 560.078109][T29754] ? __context_tracking_exit+0xb8/0xe0 [ 560.083582][T29754] ? io_connect+0x680/0x680 [ 560.088103][T29754] ? syscall_enter_from_user_mode+0x27/0x70 [ 560.094010][T29754] do_syscall_64+0x3a/0xb0 [ 560.098431][T29754] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 560.104353][T29754] RIP: 0033:0x4665f9 [ 560.108237][T29754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 560.127833][T29754] RSP: 002b:00007efe66df9108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 560.136255][T29754] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 560.144390][T29754] RDX: 0000000020ffb000 RSI: 0000000020001640 RDI: 0000000000006215 [ 560.152351][T29754] RBP: 0000000020001640 R08: 00000000200016c0 R09: 00000000200016c0 [ 560.160313][T29754] R10: 0000000020000500 R11: 0000000000000202 R12: 00000000200016c0 13:55:55 executing program 5: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x8}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) [ 560.168293][T29754] R13: 0000000020ffb000 R14: 0000000020000500 R15: 0000000020ffc000 13:55:55 executing program 4 (fault-call:0 fault-nth:4): syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:55 executing program 3: wait4(0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x7, 0xfffffffffffffffa) 13:55:55 executing program 2: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:55 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x10}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:55 executing program 5: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:55 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x12}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:55 executing program 5: syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) [ 560.402794][T29773] FAULT_INJECTION: forcing a failure. [ 560.402794][T29773] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 560.447459][T29773] CPU: 1 PID: 29773 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 560.456178][T29773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.466408][T29773] Call Trace: [ 560.469686][T29773] dump_stack+0x141/0x1d7 [ 560.474027][T29773] should_fail.cold+0x5/0xa [ 560.478544][T29773] __alloc_pages_nodemask+0x189/0x730 [ 560.484099][T29773] ? __debug_object_init+0x409/0xd10 [ 560.489390][T29773] ? __alloc_pages_slowpath.constprop.0+0x2270/0x2270 [ 560.496160][T29773] ? debug_object_destroy+0x210/0x210 [ 560.501523][T29773] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 560.507782][T29773] ? apparmor_capable+0x1d8/0x460 [ 560.512803][T29773] alloc_pages_current+0x18c/0x2a0 [ 560.517915][T29773] __get_free_pages+0x8/0x40 [ 560.522519][T29773] io_uring_setup+0xcc3/0x2a80 [ 560.527293][T29773] ? __context_tracking_exit+0xb8/0xe0 [ 560.532752][T29773] ? io_connect+0x680/0x680 [ 560.537253][T29773] ? syscall_enter_from_user_mode+0x27/0x70 [ 560.543248][T29773] do_syscall_64+0x3a/0xb0 [ 560.547656][T29773] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 560.553632][T29773] RIP: 0033:0x4665f9 [ 560.557532][T29773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 560.577303][T29773] RSP: 002b:00007f61fb516108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 560.585730][T29773] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 560.593688][T29773] RDX: 0000000020ffb000 RSI: 0000000020001640 RDI: 0000000000006215 [ 560.601646][T29773] RBP: 0000000020001640 R08: 00000000200016c0 R09: 00000000200016c0 [ 560.609603][T29773] R10: 0000000020000500 R11: 0000000000000202 R12: 00000000200016c0 [ 560.617559][T29773] R13: 0000000020ffb000 R14: 0000000020000500 R15: 0000000020ffc000 13:55:55 executing program 1 (fault-call:0 fault-nth:5): syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:55 executing program 3: wait4(0x0, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6e, @loopback, 0x7fffffff}, {0xa, 0x4e23, 0x1000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7857}}}, 0x48) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40) r5 = gettid() ptrace$setregs(0xffffffffffffffff, r5, 0x0, 0x0) waitid(0x0, r5, &(0x7f0000000000), 0x8, &(0x7f0000000080)) 13:55:55 executing program 2: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:55 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x18}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:55 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x7, 0xfffffffffffffffa) 13:55:55 executing program 4 (fault-call:0 fault-nth:5): syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:56 executing program 3: r0 = gettid() ptrace$setregs(0xf, r0, 0x100, &(0x7f0000000000)="a87fa69bf085f919eceb259eee7c26f7aef63d53e2ce3d292aa7324783baa29abf9ac7") ptrace$setregs(0xffffffffffffffff, r0, 0x0, 0x0) wait4(r0, 0x0, 0x8, 0x0) waitid(0x96a527bb81f36252, r0, &(0x7f0000000140), 0x2, &(0x7f0000000080)) 13:55:56 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x7, 0xfffffffffffffffa) 13:55:56 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x1c}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) [ 560.823647][T29791] FAULT_INJECTION: forcing a failure. [ 560.823647][T29791] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 560.855038][T29792] FAULT_INJECTION: forcing a failure. [ 560.855038][T29792] name fail_page_alloc, interval 1, probability 0, space 0, times 0 13:55:56 executing program 2: wait4(0x0, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6e, @loopback, 0x7fffffff}, {0xa, 0x4e23, 0x1000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7857}}}, 0x48) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40) r5 = gettid() ptrace$setregs(0xffffffffffffffff, r5, 0x0, 0x0) waitid(0x0, r5, &(0x7f0000000000), 0x8, &(0x7f0000000080)) [ 560.920509][T29791] CPU: 1 PID: 29791 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 560.929077][T29791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.939131][T29791] Call Trace: [ 560.942406][T29791] dump_stack+0x141/0x1d7 [ 560.946743][T29791] should_fail.cold+0x5/0xa [ 560.951250][T29791] __alloc_pages_nodemask+0x189/0x730 [ 560.956628][T29791] ? __debug_object_init+0x409/0xd10 [ 560.961921][T29791] ? __alloc_pages_slowpath.constprop.0+0x2270/0x2270 [ 560.968690][T29791] ? debug_object_destroy+0x210/0x210 [ 560.974064][T29791] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 560.980303][T29791] ? apparmor_capable+0x1d8/0x460 [ 560.985333][T29791] alloc_pages_current+0x18c/0x2a0 [ 560.990439][T29791] __get_free_pages+0x8/0x40 [ 560.995021][T29791] io_uring_setup+0xe7a/0x2a80 [ 560.999776][T29791] ? __context_tracking_exit+0xb8/0xe0 [ 561.005226][T29791] ? io_connect+0x680/0x680 [ 561.009730][T29791] ? syscall_enter_from_user_mode+0x27/0x70 [ 561.015620][T29791] do_syscall_64+0x3a/0xb0 [ 561.020030][T29791] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 561.025924][T29791] RIP: 0033:0x4665f9 [ 561.029808][T29791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 561.049581][T29791] RSP: 002b:00007efe66df9108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 561.058080][T29791] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 561.066128][T29791] RDX: 0000000020ffb000 RSI: 0000000020001640 RDI: 0000000000006215 [ 561.074085][T29791] RBP: 0000000020001640 R08: 00000000200016c0 R09: 00000000200016c0 [ 561.082043][T29791] R10: 0000000020000500 R11: 0000000000000202 R12: 00000000200016c0 [ 561.090001][T29791] R13: 0000000020ffb000 R14: 0000000020000500 R15: 0000000020ffc000 [ 561.105585][T29792] CPU: 0 PID: 29792 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 561.114096][T29792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.124150][T29792] Call Trace: [ 561.127426][T29792] dump_stack+0x141/0x1d7 [ 561.131764][T29792] should_fail.cold+0x5/0xa [ 561.136285][T29792] __alloc_pages_nodemask+0x189/0x730 [ 561.141662][T29792] ? __debug_object_init+0x409/0xd10 [ 561.146953][T29792] ? __alloc_pages_slowpath.constprop.0+0x2270/0x2270 [ 561.153723][T29792] ? debug_object_destroy+0x210/0x210 [ 561.159102][T29792] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 561.165352][T29792] ? apparmor_capable+0x1d8/0x460 [ 561.170389][T29792] alloc_pages_current+0x18c/0x2a0 [ 561.175510][T29792] __get_free_pages+0x8/0x40 [ 561.180111][T29792] io_uring_setup+0xe7a/0x2a80 [ 561.184884][T29792] ? __context_tracking_exit+0xb8/0xe0 [ 561.190356][T29792] ? io_connect+0x680/0x680 [ 561.194873][T29792] ? syscall_enter_from_user_mode+0x27/0x70 [ 561.200778][T29792] do_syscall_64+0x3a/0xb0 [ 561.205210][T29792] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 561.211111][T29792] RIP: 0033:0x4665f9 [ 561.215004][T29792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 561.234615][T29792] RSP: 002b:00007f61fb516108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 561.243035][T29792] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 561.251007][T29792] RDX: 0000000020ffb000 RSI: 0000000020001640 RDI: 0000000000006215 [ 561.259065][T29792] RBP: 0000000020001640 R08: 00000000200016c0 R09: 00000000200016c0 13:55:56 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x1d}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) [ 561.267036][T29792] R10: 0000000020000500 R11: 0000000000000202 R12: 00000000200016c0 [ 561.275004][T29792] R13: 0000000020ffb000 R14: 0000000020000500 R15: 0000000020ffc000 13:55:56 executing program 3: wait4(0x0, 0x0, 0x8, 0x0) ioctl$SIOCAX25DELFWD(0xffffffffffffffff, 0x89eb, &(0x7f0000000040)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{}, 0x1, 0x6, 0x4}, 0x18) 13:55:56 executing program 1 (fault-call:0 fault-nth:6): syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:56 executing program 5: wait4(0x0, 0x0, 0x0, 0x0) keyctl$negate(0xd, 0x0, 0x7, 0xfffffffffffffffa) 13:55:56 executing program 2: wait4(0x0, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6e, @loopback, 0x7fffffff}, {0xa, 0x4e23, 0x1000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7857}}}, 0x48) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40) r5 = gettid() ptrace$setregs(0xffffffffffffffff, r5, 0x0, 0x0) waitid(0x0, r5, &(0x7f0000000000), 0x8, &(0x7f0000000080)) 13:55:56 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x1e}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:56 executing program 4 (fault-call:0 fault-nth:6): syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:56 executing program 3: wait4(0x0, 0x0, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 13:55:56 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x24}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:56 executing program 5: keyctl$negate(0xd, 0x0, 0x7, 0xfffffffffffffffa) [ 561.537055][T29821] FAULT_INJECTION: forcing a failure. [ 561.537055][T29821] name failslab, interval 1, probability 0, space 0, times 0 13:55:56 executing program 2: wait4(0x0, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6e, @loopback, 0x7fffffff}, {0xa, 0x4e23, 0x1000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7857}}}, 0x48) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40) r5 = gettid() ptrace$setregs(0xffffffffffffffff, r5, 0x0, 0x0) waitid(0x0, r5, &(0x7f0000000000), 0x8, &(0x7f0000000080)) [ 561.586417][T29823] FAULT_INJECTION: forcing a failure. [ 561.586417][T29823] name failslab, interval 1, probability 0, space 0, times 0 [ 561.620882][T29821] CPU: 1 PID: 29821 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 561.629493][T29821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.639560][T29821] Call Trace: [ 561.642845][T29821] dump_stack+0x141/0x1d7 [ 561.647193][T29821] should_fail.cold+0x5/0xa [ 561.651710][T29821] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 561.658045][T29821] should_failslab+0x5/0x10 [ 561.662556][T29821] kmem_cache_alloc_trace+0x55/0x290 [ 561.667849][T29821] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 561.674018][T29821] io_uring_setup+0x1dd6/0x2a80 [ 561.678902][T29821] ? __context_tracking_exit+0xb8/0xe0 [ 561.684396][T29821] ? io_connect+0x680/0x680 [ 561.688913][T29821] ? syscall_enter_from_user_mode+0x27/0x70 [ 561.694817][T29821] do_syscall_64+0x3a/0xb0 [ 561.699230][T29821] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 561.705120][T29821] RIP: 0033:0x4665f9 [ 561.709002][T29821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 561.728621][T29821] RSP: 002b:00007efe66df9108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 13:55:56 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x2a}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) 13:55:56 executing program 5: keyctl$negate(0xd, 0x0, 0x0, 0xfffffffffffffffa) [ 561.737028][T29821] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 561.744999][T29821] RDX: 0000000020ffb000 RSI: 0000000020001640 RDI: 0000000000006215 [ 561.752981][T29821] RBP: 0000000020001640 R08: 00000000200016c0 R09: 00000000200016c0 [ 561.760942][T29821] R10: 0000000020000500 R11: 0000000000000202 R12: 00000000200016c0 [ 561.768902][T29821] R13: 0000000020ffb000 R14: 0000000020000500 R15: 0000000020ffc000 [ 561.777196][T29823] CPU: 0 PID: 29823 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 561.785628][T29823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.795682][T29823] Call Trace: [ 561.798988][T29823] dump_stack+0x141/0x1d7 [ 561.803326][T29823] should_fail.cold+0x5/0xa [ 561.807847][T29823] ? io_rsrc_node_switch_start.part.0+0x43/0x250 [ 561.814182][T29823] should_failslab+0x5/0x10 [ 561.818691][T29823] kmem_cache_alloc_trace+0x55/0x290 [ 561.823978][T29823] io_rsrc_node_switch_start.part.0+0x43/0x250 [ 561.830146][T29823] io_uring_setup+0x1dd6/0x2a80 [ 561.835003][T29823] ? __context_tracking_exit+0xb8/0xe0 [ 561.840471][T29823] ? io_connect+0x680/0x680 [ 561.844991][T29823] ? syscall_enter_from_user_mode+0x27/0x70 [ 561.850897][T29823] do_syscall_64+0x3a/0xb0 [ 561.855319][T29823] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 561.861227][T29823] RIP: 0033:0x4665f9 [ 561.865122][T29823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 561.884730][T29823] RSP: 002b:00007f61fb516108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 561.893144][T29823] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 561.901116][T29823] RDX: 0000000020ffb000 RSI: 0000000020001640 RDI: 0000000000006215 [ 561.909090][T29823] RBP: 0000000020001640 R08: 00000000200016c0 R09: 00000000200016c0 [ 561.917062][T29823] R10: 0000000020000500 R11: 0000000000000202 R12: 00000000200016c0 [ 561.925042][T29823] R13: 0000000020ffb000 R14: 0000000020000500 R15: 0000000020ffc000 13:55:57 executing program 2: wait4(0x0, 0x0, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000540)={r1}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND_IP(r3, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000540)={r4}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f0000000280)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x6e, @loopback, 0x7fffffff}, {0xa, 0x4e23, 0x1000, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7857}}}, 0x48) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x0, 0x70bd2b, 0x25dfdbfb}, 0x14}}, 0x40) r5 = gettid() waitid(0x0, r5, &(0x7f0000000000), 0x8, &(0x7f0000000080)) [ 562.054119][T29823] ------------[ cut here ]------------ [ 562.059984][T29823] WARNING: CPU: 0 PID: 29823 at fs/io_uring.c:7081 io_rsrc_node_switch+0x2a5/0x390 [ 562.070696][ T3234] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.077117][ T3234] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.110918][T29823] Modules linked in: [ 562.122924][T29823] CPU: 0 PID: 29823 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 562.135707][T29823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.147025][T29823] RIP: 0010:io_rsrc_node_switch+0x2a5/0x390 13:55:57 executing program 1 (fault-call:0 fault-nth:7): syz_io_uring_setup(0x6215, &(0x7f0000001640), &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), &(0x7f00000016c0)) 13:55:57 executing program 3: socket$inet_mptcp(0x2, 0x1, 0x106) gettid() 13:55:57 executing program 5: r0 = gettid() ptrace$setregs(0xf, r0, 0x100, &(0x7f0000000000)="a87fa69bf085f919eceb259eee7c26f7aef63d53e2ce3d292aa7324783baa29abf9ac7") ptrace$setregs(0xffffffffffffffff, r0, 0x0, 0x0) wait4(r0, 0x0, 0x8, 0x0) waitid(0x96a527bb81f36252, r0, &(0x7f0000000140), 0x2, &(0x7f0000000080)) 13:55:57 executing program 0: syz_io_uring_setup(0x6215, &(0x7f0000001640)={0x0, 0x30}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000500), 0x0) [ 562.155900][T29823] Code: ff 4d 85 e4 74 a4 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f e9 fc 00 99 ff e8 f7 00 99 ff 0f 0b e9 ee fd ff ff e8 eb 00 99 ff <0f> 0b e9 9d fd ff ff 4c 89 f7 e8 7c e0 dc ff eb 8b 4c 89 ef e8 72 [ 562.176875][T29823] RSP: 0018:ffffc900036ffd90 EFLAGS: 00010246 [ 562.183100][T29823] RAX: 0000000000040000 RBX: ffff8880137b6000 RCX: ffffc90011f77000 [ 562.191229][T29823] RDX: 0000000000040000 RSI: ffffffff81db5d25 RDI: ffff8880137b6000 [ 562.199260][T29823] RBP: 0000000000000000 R08: 0000000000000dc0 R09: ffffffff8c0b37d3 [ 562.227271][T29823] R10: fffffbfff18166fa R11: 0000000000000000 R12: 0000000000000000 [ 562.243845][T29823] R13: 0000000000000000 R14: ffff8880137b6808 R15: 0000000000000000 [ 562.279517][T29823] FS: 00007f61fb516700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 562.284692][T29849] FAULT_INJECTION: forcing a failure. [ 562.284692][T29849] name failslab, interval 1, probability 0, space 0, times 0 [ 562.333025][T29823] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 562.334634][T29849] CPU: 1 PID: 29849 Comm: syz-executor.1 Not tainted 5.12.0-syzkaller #0 [ 562.348203][T29849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.358256][T29849] Call Trace: [ 562.361532][T29849] dump_stack+0x141/0x1d7 [ 562.365057][T29823] CR2: 0000000000000000 CR3: 000000004ea91000 CR4: 0000000000350ef0 [ 562.365904][T29849] should_fail.cold+0x5/0xa [ 562.378342][T29849] ? percpu_ref_init+0xcc/0x3a0 [ 562.383194][T29849] should_failslab+0x5/0x10 [ 562.387178][T29823] Call Trace: [ 562.387724][T29849] kmem_cache_alloc_trace+0x55/0x290 [ 562.395502][T29823] ? __kasan_kmalloc+0xad/0xc0 [ 562.396271][T29849] ? io_uring_mmap+0x430/0x430 [ 562.405748][T29849] percpu_ref_init+0xcc/0x3a0 [ 562.410452][T29849] io_rsrc_node_switch_start.part.0+0x6a/0x250 [ 562.415641][T29823] io_uring_setup+0xf75/0x2a80 [ 562.416632][T29849] io_uring_setup+0x1dd6/0x2a80 [ 562.426195][T29849] ? __context_tracking_exit+0xb8/0xe0 [ 562.431655][T29849] ? io_connect+0x680/0x680 [ 562.436162][T29849] ? syscall_enter_from_user_mode+0x27/0x70 [ 562.442051][T29849] do_syscall_64+0x3a/0xb0 [ 562.446461][T29849] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 562.452347][T29849] RIP: 0033:0x4665f9 [ 562.456232][T29849] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 562.475855][T29849] RSP: 002b:00007efe66df9108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 562.484258][T29849] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 562.492239][T29849] RDX: 0000000020ffb000 RSI: 0000000020001640 RDI: 0000000000006215 [ 562.500199][T29849] RBP: 0000000020001640 R08: 00000000200016c0 R09: 00000000200016c0 [ 562.508159][T29849] R10: 0000000020000500 R11: 0000000000000202 R12: 00000000200016c0 [ 562.516118][T29849] R13: 0000000020ffb000 R14: 0000000020000500 R15: 0000000020ffc000 [ 562.540225][T29823] ? __context_tracking_exit+0xb8/0xe0 [ 562.555039][T29823] ? io_connect+0x680/0x680 [ 562.565048][T29823] ? syscall_enter_from_user_mode+0x27/0x70 [ 562.574699][T29823] do_syscall_64+0x3a/0xb0 [ 562.579303][T29823] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 562.588517][T29823] RIP: 0033:0x4665f9 [ 562.595991][T29823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 562.624008][T29823] RSP: 002b:00007f61fb516108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 562.636284][T29823] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 562.654070][T29823] RDX: 0000000020ffb000 RSI: 0000000020001640 RDI: 0000000000006215 [ 562.668691][T29823] RBP: 0000000020001640 R08: 00000000200016c0 R09: 00000000200016c0 [ 562.679001][T29823] R10: 0000000020000500 R11: 0000000000000202 R12: 00000000200016c0 [ 562.693623][T29823] R13: 0000000020ffb000 R14: 0000000020000500 R15: 0000000020ffc000 [ 562.706392][T29823] Kernel panic - not syncing: panic_on_warn set ... [ 562.713062][T29823] CPU: 0 PID: 29823 Comm: syz-executor.4 Not tainted 5.12.0-syzkaller #0 [ 562.721476][T29823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.731529][T29823] Call Trace: [ 562.734812][T29823] dump_stack+0x141/0x1d7 [ 562.739156][T29823] panic+0x306/0x73d [ 562.743057][T29823] ? __warn_printk+0xf3/0xf3 [ 562.747659][T29823] ? __warn.cold+0x1a/0x44 [ 562.752086][T29823] ? io_rsrc_node_switch+0x2a5/0x390 [ 562.757385][T29823] __warn.cold+0x35/0x44 [ 562.761637][T29823] ? io_rsrc_node_switch+0x2a5/0x390 [ 562.766930][T29823] report_bug+0x1bd/0x210 [ 562.771274][T29823] handle_bug+0x3c/0x60 [ 562.775436][T29823] exc_invalid_op+0x14/0x40 [ 562.779943][T29823] asm_exc_invalid_op+0x12/0x20 [ 562.784808][T29823] RIP: 0010:io_rsrc_node_switch+0x2a5/0x390 [ 562.790709][T29823] Code: ff 4d 85 e4 74 a4 48 83 c4 20 5b 5d 41 5c 41 5d 41 5e 41 5f e9 fc 00 99 ff e8 f7 00 99 ff 0f 0b e9 ee fd ff ff e8 eb 00 99 ff <0f> 0b e9 9d fd ff ff 4c 89 f7 e8 7c e0 dc ff eb 8b 4c 89 ef e8 72 [ 562.810323][T29823] RSP: 0018:ffffc900036ffd90 EFLAGS: 00010246 [ 562.816390][T29823] RAX: 0000000000040000 RBX: ffff8880137b6000 RCX: ffffc90011f77000 [ 562.824362][T29823] RDX: 0000000000040000 RSI: ffffffff81db5d25 RDI: ffff8880137b6000 [ 562.832421][T29823] RBP: 0000000000000000 R08: 0000000000000dc0 R09: ffffffff8c0b37d3 [ 562.840391][T29823] R10: fffffbfff18166fa R11: 0000000000000000 R12: 0000000000000000 [ 562.848535][T29823] R13: 0000000000000000 R14: ffff8880137b6808 R15: 0000000000000000 [ 562.856542][T29823] ? io_rsrc_node_switch+0x2a5/0x390 [ 562.861842][T29823] ? __kasan_kmalloc+0xad/0xc0 [ 562.866619][T29823] io_uring_setup+0xf75/0x2a80 [ 562.871390][T29823] ? __context_tracking_exit+0xb8/0xe0 [ 562.876858][T29823] ? io_connect+0x680/0x680 [ 562.881375][T29823] ? syscall_enter_from_user_mode+0x27/0x70 [ 562.887455][T29823] do_syscall_64+0x3a/0xb0 [ 562.891962][T29823] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 562.897953][T29823] RIP: 0033:0x4665f9 [ 562.901847][T29823] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 562.921715][T29823] RSP: 002b:00007f61fb516108 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 562.930128][T29823] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 00000000004665f9 [ 562.938103][T29823] RDX: 0000000020ffb000 RSI: 0000000020001640 RDI: 0000000000006215 [ 562.946074][T29823] RBP: 0000000020001640 R08: 00000000200016c0 R09: 00000000200016c0 [ 562.954611][T29823] R10: 0000000020000500 R11: 0000000000000202 R12: 00000000200016c0 [ 562.962763][T29823] R13: 0000000020ffb000 R14: 0000000020000500 R15: 0000000020ffc000 [ 562.974562][T29823] Kernel Offset: disabled [ 562.979503][T29823] Rebooting in 86400 seconds..