[  OK  ] Started System Logging Service.
[   ***] A start job is running for OpenBSD …Shell server (1min 28s / 2min 47s)[    **] A start job is running for OpenBSD …Shell server (1min 28s / 2min 47s)[     *] A start job is running for OpenBSD …Shell server (1min 29s / 2min 47s)[    **] A start job is running for OpenBSD …Shell server (1min 30s / 2min 47s)[   ***] A start job is running for OpenBSD …Shell server (1min 30s / 2min 47s)[  *** ] A start job is running for OpenBSD …Shell server (1min 31s / 2min 47s)[ ***  ] A start job is running for OpenBSD …Shell server (1min 32s / 2min 47s)[***   ] A start job is running for OpenBSD … Shell server (1min 33s / 3min 2s)[  OK  ] Started OpenBSD Secure Shell server.
[  OK  ] Listening on Load/Save RF Kill Switch Status /dev/rfkill Watch.
[  OK  ] Started Getty on tty6.
[  OK  ] Started Getty on tty5.
[  OK  ] Started Getty on tty4.
[  OK  ] Started Getty on tty3.
[  OK  ] Started Getty on tty2.
[  OK  ] Started Serial Getty on ttyS0.
[  OK  ] Started Getty on tty1.
[  OK  ] Reached target Login Prompts.
[  OK  ] Reached target Multi-User System.
[  OK  ] Reached target Graphical Interface.
         Starting Update UTMP about System Runlevel Changes...
         Starting Load/Save RF Kill Switch Status...
[  OK  ] Started Update UTMP about System Runlevel Changes.
[  OK  ] Started Load/Save RF Kill Switch Status.

Debian GNU/Linux 9 syzkaller ttyS0

Warning: Permanently added '10.128.0.57' (ECDSA) to the list of known hosts.
2021/06/12 10:03:51 fuzzer started
2021/06/12 10:03:53 dialing manager at 10.128.0.169:41651
2021/06/12 10:03:53 syscalls: 3546
2021/06/12 10:03:53 code coverage: enabled
2021/06/12 10:03:53 comparison tracing: enabled
2021/06/12 10:03:53 extra coverage: enabled
2021/06/12 10:03:53 setuid sandbox: enabled
2021/06/12 10:03:53 namespace sandbox: enabled
2021/06/12 10:03:53 Android sandbox: /sys/fs/selinux/policy does not exist
2021/06/12 10:03:53 fault injection: enabled
2021/06/12 10:03:53 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2021/06/12 10:03:53 net packet injection: enabled
2021/06/12 10:03:53 net device setup: enabled
2021/06/12 10:03:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2021/06/12 10:03:53 devlink PCI setup: PCI device 0000:00:10.0 is not available
2021/06/12 10:03:53 USB emulation: enabled
2021/06/12 10:03:53 hci packet injection: enabled
2021/06/12 10:03:53 wifi device emulation: enabled
2021/06/12 10:03:53 802.15.4 emulation: enabled
2021/06/12 10:03:53 fetching corpus: 0, signal 0/2000 (executing program)
2021/06/12 10:03:53 fetching corpus: 50, signal 18857/22728 (executing program)
2021/06/12 10:03:53 fetching corpus: 100, signal 27865/33615 (executing program)
2021/06/12 10:03:53 fetching corpus: 150, signal 34297/41887 (executing program)
2021/06/12 10:03:54 fetching corpus: 200, signal 39815/49212 (executing program)
2021/06/12 10:03:54 fetching corpus: 250, signal 44998/56159 (executing program)
2021/06/12 10:03:54 fetching corpus: 300, signal 51993/64846 (executing program)
2021/06/12 10:03:54 fetching corpus: 350, signal 56343/70925 (executing program)
2021/06/12 10:03:54 fetching corpus: 400, signal 59869/76187 (executing program)
2021/06/12 10:03:54 fetching corpus: 450, signal 63689/81694 (executing program)
2021/06/12 10:03:54 fetching corpus: 500, signal 65074/84843 (executing program)
2021/06/12 10:03:54 fetching corpus: 550, signal 69984/91365 (executing program)
2021/06/12 10:03:54 fetching corpus: 600, signal 77053/99955 (executing program)
2021/06/12 10:03:54 fetching corpus: 650, signal 80342/104879 (executing program)
2021/06/12 10:03:54 fetching corpus: 700, signal 84896/111008 (executing program)
2021/06/12 10:03:54 fetching corpus: 750, signal 87881/115589 (executing program)
2021/06/12 10:03:54 fetching corpus: 800, signal 91811/121036 (executing program)
2021/06/12 10:03:54 fetching corpus: 850, signal 94230/125025 (executing program)
2021/06/12 10:03:54 fetching corpus: 900, signal 97629/129916 (executing program)
2021/06/12 10:03:54 fetching corpus: 950, signal 102628/136329 (executing program)
2021/06/12 10:03:54 fetching corpus: 1000, signal 104591/139835 (executing program)
2021/06/12 10:03:54 fetching corpus: 1050, signal 107171/143908 (executing program)
2021/06/12 10:03:55 fetching corpus: 1100, signal 108765/147065 (executing program)
2021/06/12 10:03:55 fetching corpus: 1150, signal 110726/150528 (executing program)
2021/06/12 10:03:55 fetching corpus: 1200, signal 113010/154261 (executing program)
2021/06/12 10:03:55 fetching corpus: 1250, signal 117998/160467 (executing program)
2021/06/12 10:03:55 fetching corpus: 1300, signal 120107/164020 (executing program)
2021/06/12 10:03:55 fetching corpus: 1350, signal 121938/167314 (executing program)
2021/06/12 10:03:55 fetching corpus: 1400, signal 124639/171408 (executing program)
2021/06/12 10:03:55 fetching corpus: 1450, signal 127340/175462 (executing program)
2021/06/12 10:03:55 fetching corpus: 1500, signal 128420/178048 (executing program)
2021/06/12 10:03:55 fetching corpus: 1550, signal 130595/181611 (executing program)
2021/06/12 10:03:55 fetching corpus: 1600, signal 132734/185114 (executing program)
2021/06/12 10:03:55 fetching corpus: 1650, signal 135152/188800 (executing program)
2021/06/12 10:03:55 fetching corpus: 1700, signal 136901/191933 (executing program)
2021/06/12 10:03:55 fetching corpus: 1750, signal 138508/194912 (executing program)
2021/06/12 10:03:55 fetching corpus: 1800, signal 141128/198808 (executing program)
2021/06/12 10:03:55 fetching corpus: 1850, signal 143610/202600 (executing program)
2021/06/12 10:03:56 fetching corpus: 1900, signal 144703/205134 (executing program)
2021/06/12 10:03:56 fetching corpus: 1950, signal 147496/209111 (executing program)
2021/06/12 10:03:56 fetching corpus: 2000, signal 148881/211871 (executing program)
2021/06/12 10:03:56 fetching corpus: 2050, signal 150718/214991 (executing program)
2021/06/12 10:03:56 fetching corpus: 2100, signal 153976/219370 (executing program)
2021/06/12 10:03:56 fetching corpus: 2150, signal 155096/221890 (executing program)
2021/06/12 10:03:56 fetching corpus: 2200, signal 155886/224096 (executing program)
2021/06/12 10:03:56 fetching corpus: 2250, signal 157628/227053 (executing program)
2021/06/12 10:03:56 fetching corpus: 2300, signal 160012/230622 (executing program)
2021/06/12 10:03:56 fetching corpus: 2350, signal 161602/233478 (executing program)
2021/06/12 10:03:56 fetching corpus: 2400, signal 163547/236612 (executing program)
2021/06/12 10:03:56 fetching corpus: 2450, signal 164812/239158 (executing program)
2021/06/12 10:03:56 fetching corpus: 2500, signal 166670/242170 (executing program)
2021/06/12 10:03:56 fetching corpus: 2550, signal 168085/244847 (executing program)
2021/06/12 10:03:57 fetching corpus: 2600, signal 169260/247286 (executing program)
2021/06/12 10:03:57 fetching corpus: 2650, signal 171360/250451 (executing program)
2021/06/12 10:03:57 fetching corpus: 2700, signal 172773/253040 (executing program)
2021/06/12 10:03:57 fetching corpus: 2750, signal 173887/255413 (executing program)
2021/06/12 10:03:57 fetching corpus: 2800, signal 175649/258301 (executing program)
2021/06/12 10:03:57 fetching corpus: 2850, signal 177294/261100 (executing program)
2021/06/12 10:03:57 fetching corpus: 2900, signal 179064/263988 (executing program)
2021/06/12 10:03:57 fetching corpus: 2950, signal 180067/266256 (executing program)
2021/06/12 10:03:57 fetching corpus: 3000, signal 181734/269059 (executing program)
2021/06/12 10:03:57 fetching corpus: 3050, signal 182883/271445 (executing program)
2021/06/12 10:03:57 fetching corpus: 3100, signal 183911/273707 (executing program)
2021/06/12 10:03:57 fetching corpus: 3150, signal 185530/276425 (executing program)
2021/06/12 10:03:57 fetching corpus: 3200, signal 186598/278673 (executing program)
2021/06/12 10:03:57 fetching corpus: 3250, signal 187752/280964 (executing program)
2021/06/12 10:03:57 fetching corpus: 3300, signal 188503/282995 (executing program)
2021/06/12 10:03:57 fetching corpus: 3350, signal 190236/285762 (executing program)
2021/06/12 10:03:57 fetching corpus: 3400, signal 191482/288145 (executing program)
2021/06/12 10:03:57 fetching corpus: 3450, signal 192879/290644 (executing program)
2021/06/12 10:03:57 fetching corpus: 3500, signal 194342/293160 (executing program)
2021/06/12 10:03:58 fetching corpus: 3550, signal 195429/295366 (executing program)
2021/06/12 10:03:58 fetching corpus: 3600, signal 196662/297745 (executing program)
2021/06/12 10:03:58 fetching corpus: 3650, signal 197494/299764 (executing program)
2021/06/12 10:03:58 fetching corpus: 3700, signal 198407/301867 (executing program)
2021/06/12 10:03:58 fetching corpus: 3750, signal 199259/303886 (executing program)
2021/06/12 10:03:58 fetching corpus: 3800, signal 200878/306501 (executing program)
2021/06/12 10:03:58 fetching corpus: 3850, signal 202065/308772 (executing program)
2021/06/12 10:03:58 fetching corpus: 3900, signal 203551/311278 (executing program)
2021/06/12 10:03:58 fetching corpus: 3950, signal 204671/313509 (executing program)
2021/06/12 10:03:58 fetching corpus: 4000, signal 205394/315415 (executing program)
2021/06/12 10:03:58 fetching corpus: 4050, signal 206666/317723 (executing program)
2021/06/12 10:03:58 fetching corpus: 4100, signal 208278/320241 (executing program)
2021/06/12 10:03:58 fetching corpus: 4150, signal 209287/322322 (executing program)
2021/06/12 10:03:58 fetching corpus: 4200, signal 210681/324684 (executing program)
2021/06/12 10:03:59 fetching corpus: 4250, signal 211399/326520 (executing program)
2021/06/12 10:03:59 fetching corpus: 4300, signal 212548/328638 (executing program)
2021/06/12 10:03:59 fetching corpus: 4350, signal 213498/330677 (executing program)
2021/06/12 10:03:59 fetching corpus: 4400, signal 214562/332789 (executing program)
2021/06/12 10:03:59 fetching corpus: 4450, signal 215744/334982 (executing program)
2021/06/12 10:03:59 fetching corpus: 4500, signal 216861/337094 (executing program)
2021/06/12 10:03:59 fetching corpus: 4550, signal 218137/339341 (executing program)
2021/06/12 10:03:59 fetching corpus: 4600, signal 219468/341579 (executing program)
2021/06/12 10:03:59 fetching corpus: 4650, signal 220432/343593 (executing program)
2021/06/12 10:03:59 fetching corpus: 4700, signal 221170/345463 (executing program)
2021/06/12 10:03:59 fetching corpus: 4750, signal 221698/347161 (executing program)
2021/06/12 10:03:59 fetching corpus: 4800, signal 222334/348943 (executing program)
2021/06/12 10:03:59 fetching corpus: 4850, signal 222910/350652 (executing program)
2021/06/12 10:03:59 fetching corpus: 4900, signal 223788/352596 (executing program)
2021/06/12 10:03:59 fetching corpus: 4950, signal 224429/354328 (executing program)
2021/06/12 10:03:59 fetching corpus: 5000, signal 224885/355977 (executing program)
2021/06/12 10:03:59 fetching corpus: 5050, signal 226373/358300 (executing program)
2021/06/12 10:04:00 fetching corpus: 5100, signal 227360/360261 (executing program)
2021/06/12 10:04:00 fetching corpus: 5150, signal 228309/362182 (executing program)
2021/06/12 10:04:00 fetching corpus: 5200, signal 229230/364104 (executing program)
2021/06/12 10:04:00 fetching corpus: 5250, signal 229931/365886 (executing program)
2021/06/12 10:04:00 fetching corpus: 5300, signal 230730/367708 (executing program)
2021/06/12 10:04:00 fetching corpus: 5350, signal 231774/369708 (executing program)
2021/06/12 10:04:00 fetching corpus: 5400, signal 232700/371632 (executing program)
2021/06/12 10:04:00 fetching corpus: 5450, signal 233710/373566 (executing program)
2021/06/12 10:04:00 fetching corpus: 5500, signal 234152/375119 (executing program)
2021/06/12 10:04:00 fetching corpus: 5550, signal 234893/376863 (executing program)
2021/06/12 10:04:00 fetching corpus: 5600, signal 235749/378690 (executing program)
2021/06/12 10:04:00 fetching corpus: 5650, signal 237103/380856 (executing program)
2021/06/12 10:04:00 fetching corpus: 5700, signal 237915/382639 (executing program)
2021/06/12 10:04:00 fetching corpus: 5750, signal 238662/384358 (executing program)
2021/06/12 10:04:01 fetching corpus: 5800, signal 239461/386123 (executing program)
2021/06/12 10:04:01 fetching corpus: 5850, signal 240414/387980 (executing program)
2021/06/12 10:04:01 fetching corpus: 5900, signal 241401/389821 (executing program)
2021/06/12 10:04:01 fetching corpus: 5950, signal 241996/391446 (executing program)
2021/06/12 10:04:01 fetching corpus: 6000, signal 242571/393034 (executing program)
2021/06/12 10:04:01 fetching corpus: 6050, signal 243356/394802 (executing program)
2021/06/12 10:04:01 fetching corpus: 6100, signal 244053/396492 (executing program)
2021/06/12 10:04:01 fetching corpus: 6150, signal 245070/398371 (executing program)
2021/06/12 10:04:01 fetching corpus: 6200, signal 245714/400033 (executing program)
2021/06/12 10:04:01 fetching corpus: 6250, signal 246264/401622 (executing program)
2021/06/12 10:04:01 fetching corpus: 6300, signal 247278/403496 (executing program)
2021/06/12 10:04:01 fetching corpus: 6350, signal 248314/405326 (executing program)
2021/06/12 10:04:01 fetching corpus: 6400, signal 249201/407056 (executing program)
2021/06/12 10:04:01 fetching corpus: 6450, signal 249745/408575 (executing program)
2021/06/12 10:04:01 fetching corpus: 6500, signal 250948/410465 (executing program)
2021/06/12 10:04:01 fetching corpus: 6550, signal 251450/412014 (executing program)
2021/06/12 10:04:01 fetching corpus: 6600, signal 252246/413697 (executing program)
2021/06/12 10:04:01 fetching corpus: 6650, signal 252895/415245 (executing program)
2021/06/12 10:04:01 fetching corpus: 6700, signal 253456/416788 (executing program)
2021/06/12 10:04:02 fetching corpus: 6750, signal 253941/418294 (executing program)
2021/06/12 10:04:02 fetching corpus: 6800, signal 254572/419873 (executing program)
2021/06/12 10:04:02 fetching corpus: 6850, signal 255340/421551 (executing program)
2021/06/12 10:04:02 fetching corpus: 6900, signal 256071/423204 (executing program)
2021/06/12 10:04:02 fetching corpus: 6950, signal 256474/424637 (executing program)
2021/06/12 10:04:02 fetching corpus: 7000, signal 257680/426528 (executing program)
2021/06/12 10:04:02 fetching corpus: 7050, signal 258311/428056 (executing program)
2021/06/12 10:04:02 fetching corpus: 7100, signal 259552/429950 (executing program)
2021/06/12 10:04:02 fetching corpus: 7150, signal 260096/431454 (executing program)
2021/06/12 10:04:02 fetching corpus: 7200, signal 260828/433074 (executing program)
2021/06/12 10:04:02 fetching corpus: 7250, signal 261489/434618 (executing program)
2021/06/12 10:04:02 fetching corpus: 7300, signal 262062/436100 (executing program)
2021/06/12 10:04:02 fetching corpus: 7350, signal 262894/437753 (executing program)
2021/06/12 10:04:02 fetching corpus: 7400, signal 263293/439162 (executing program)
2021/06/12 10:04:02 fetching corpus: 7450, signal 263899/440651 (executing program)
2021/06/12 10:04:02 fetching corpus: 7500, signal 264270/442019 (executing program)
2021/06/12 10:04:02 fetching corpus: 7550, signal 264865/443483 (executing program)
2021/06/12 10:04:03 fetching corpus: 7600, signal 265517/445040 (executing program)
2021/06/12 10:04:03 fetching corpus: 7650, signal 266183/446533 (executing program)
2021/06/12 10:04:03 fetching corpus: 7700, signal 266944/448121 (executing program)
2021/06/12 10:04:03 fetching corpus: 7750, signal 267670/449632 (executing program)
2021/06/12 10:04:03 fetching corpus: 7800, signal 268244/451087 (executing program)
2021/06/12 10:04:03 fetching corpus: 7850, signal 268946/452656 (executing program)
2021/06/12 10:04:03 fetching corpus: 7900, signal 269531/454123 (executing program)
2021/06/12 10:04:03 fetching corpus: 7950, signal 269961/455518 (executing program)
2021/06/12 10:04:03 fetching corpus: 8000, signal 270752/457045 (executing program)
2021/06/12 10:04:03 fetching corpus: 8050, signal 271341/458440 (executing program)
2021/06/12 10:04:03 fetching corpus: 8100, signal 271791/459825 (executing program)
2021/06/12 10:04:03 fetching corpus: 8150, signal 272426/461333 (executing program)
2021/06/12 10:04:03 fetching corpus: 8200, signal 273403/462960 (executing program)
2021/06/12 10:04:03 fetching corpus: 8250, signal 274002/464410 (executing program)
2021/06/12 10:04:03 fetching corpus: 8300, signal 275235/466190 (executing program)
2021/06/12 10:04:03 fetching corpus: 8350, signal 275648/467553 (executing program)
2021/06/12 10:04:03 fetching corpus: 8400, signal 276224/468938 (executing program)
2021/06/12 10:04:04 fetching corpus: 8450, signal 277164/470508 (executing program)
2021/06/12 10:04:04 fetching corpus: 8500, signal 278158/472111 (executing program)
2021/06/12 10:04:04 fetching corpus: 8550, signal 278860/473535 (executing program)
2021/06/12 10:04:04 fetching corpus: 8600, signal 279313/474853 (executing program)
2021/06/12 10:04:04 fetching corpus: 8650, signal 280349/476469 (executing program)
2021/06/12 10:04:04 fetching corpus: 8700, signal 281252/478021 (executing program)
2021/06/12 10:04:04 fetching corpus: 8750, signal 281649/479339 (executing program)
2021/06/12 10:04:04 fetching corpus: 8800, signal 282980/481037 (executing program)
2021/06/12 10:04:04 fetching corpus: 8850, signal 283533/482364 (executing program)
2021/06/12 10:04:04 fetching corpus: 8900, signal 284235/483744 (executing program)
2021/06/12 10:04:04 fetching corpus: 8950, signal 284743/485065 (executing program)
2021/06/12 10:04:04 fetching corpus: 9000, signal 285205/486362 (executing program)
2021/06/12 10:04:04 fetching corpus: 9050, signal 286070/487869 (executing program)
2021/06/12 10:04:04 fetching corpus: 9100, signal 286918/489377 (executing program)
2021/06/12 10:04:04 fetching corpus: 9150, signal 287712/490805 (executing program)
2021/06/12 10:04:04 fetching corpus: 9200, signal 288330/492212 (executing program)
2021/06/12 10:04:04 fetching corpus: 9250, signal 289224/493690 (executing program)
2021/06/12 10:04:04 fetching corpus: 9300, signal 289823/495030 (executing program)
2021/06/12 10:04:04 fetching corpus: 9350, signal 290416/496379 (executing program)
2021/06/12 10:04:05 fetching corpus: 9400, signal 290846/497622 (executing program)
2021/06/12 10:04:05 fetching corpus: 9450, signal 291578/499000 (executing program)
2021/06/12 10:04:05 fetching corpus: 9500, signal 292005/500243 (executing program)
2021/06/12 10:04:05 fetching corpus: 9550, signal 292521/501534 (executing program)
2021/06/12 10:04:05 fetching corpus: 9600, signal 292957/502796 (executing program)
2021/06/12 10:04:05 fetching corpus: 9650, signal 293319/504050 (executing program)
2021/06/12 10:04:05 fetching corpus: 9700, signal 294194/505551 (executing program)
2021/06/12 10:04:05 fetching corpus: 9750, signal 294850/506876 (executing program)
2021/06/12 10:04:05 fetching corpus: 9800, signal 295270/508143 (executing program)
2021/06/12 10:04:05 fetching corpus: 9850, signal 295883/509469 (executing program)
2021/06/12 10:04:05 fetching corpus: 9900, signal 296251/510680 (executing program)
2021/06/12 10:04:05 fetching corpus: 9950, signal 296845/511997 (executing program)
2021/06/12 10:04:05 fetching corpus: 10000, signal 297345/513246 (executing program)
2021/06/12 10:04:05 fetching corpus: 10050, signal 298047/514572 (executing program)
2021/06/12 10:04:05 fetching corpus: 10100, signal 298613/515855 (executing program)
2021/06/12 10:04:05 fetching corpus: 10150, signal 299092/517085 (executing program)
2021/06/12 10:04:05 fetching corpus: 10200, signal 300264/518590 (executing program)
2021/06/12 10:04:05 fetching corpus: 10250, signal 300663/519787 (executing program)
2021/06/12 10:04:06 fetching corpus: 10300, signal 301355/521119 (executing program)
2021/06/12 10:04:06 fetching corpus: 10350, signal 302077/522423 (executing program)
2021/06/12 10:04:06 fetching corpus: 10400, signal 302766/523704 (executing program)
2021/06/12 10:04:06 fetching corpus: 10450, signal 303365/524991 (executing program)
2021/06/12 10:04:06 fetching corpus: 10500, signal 303956/526235 (executing program)
2021/06/12 10:04:06 fetching corpus: 10550, signal 304851/527617 (executing program)
2021/06/12 10:04:06 fetching corpus: 10600, signal 305406/528846 (executing program)
2021/06/12 10:04:06 fetching corpus: 10650, signal 305848/530044 (executing program)
2021/06/12 10:04:06 fetching corpus: 10700, signal 306256/531239 (executing program)
2021/06/12 10:04:06 fetching corpus: 10750, signal 306516/532368 (executing program)
2021/06/12 10:04:06 fetching corpus: 10800, signal 307229/533573 (executing program)
2021/06/12 10:04:07 fetching corpus: 10850, signal 307677/534752 (executing program)
2021/06/12 10:04:07 fetching corpus: 10900, signal 308270/535981 (executing program)
2021/06/12 10:04:07 fetching corpus: 10950, signal 309044/537220 (executing program)
2021/06/12 10:04:07 fetching corpus: 11000, signal 309416/538396 (executing program)
2021/06/12 10:04:07 fetching corpus: 11050, signal 309797/539534 (executing program)
2021/06/12 10:04:07 fetching corpus: 11100, signal 310142/540674 (executing program)
2021/06/12 10:04:07 fetching corpus: 11150, signal 310688/541850 (executing program)
2021/06/12 10:04:07 fetching corpus: 11200, signal 311212/543003 (executing program)
2021/06/12 10:04:07 fetching corpus: 11250, signal 311677/544135 (executing program)
2021/06/12 10:04:07 fetching corpus: 11300, signal 312194/545316 (executing program)
2021/06/12 10:04:07 fetching corpus: 11350, signal 312618/546446 (executing program)
2021/06/12 10:04:07 fetching corpus: 11400, signal 313523/547689 (executing program)
2021/06/12 10:04:07 fetching corpus: 11450, signal 313923/548816 (executing program)
2021/06/12 10:04:07 fetching corpus: 11500, signal 314346/549978 (executing program)
2021/06/12 10:04:07 fetching corpus: 11550, signal 315279/551268 (executing program)
2021/06/12 10:04:07 fetching corpus: 11600, signal 315895/552453 (executing program)
2021/06/12 10:04:07 fetching corpus: 11650, signal 316306/553600 (executing program)
2021/06/12 10:04:07 fetching corpus: 11700, signal 316716/554725 (executing program)
2021/06/12 10:04:08 fetching corpus: 11750, signal 317120/555866 (executing program)
2021/06/12 10:04:08 fetching corpus: 11800, signal 317658/557046 (executing program)
2021/06/12 10:04:08 fetching corpus: 11850, signal 318469/558223 (executing program)
2021/06/12 10:04:08 fetching corpus: 11900, signal 319084/559370 (executing program)
2021/06/12 10:04:08 fetching corpus: 11950, signal 319509/560516 (executing program)
2021/06/12 10:04:08 fetching corpus: 12000, signal 320103/561708 (executing program)
2021/06/12 10:04:08 fetching corpus: 12050, signal 320786/562884 (executing program)
2021/06/12 10:04:08 fetching corpus: 12100, signal 321399/564061 (executing program)
2021/06/12 10:04:08 fetching corpus: 12150, signal 322246/565293 (executing program)
2021/06/12 10:04:08 fetching corpus: 12200, signal 322871/566450 (executing program)
2021/06/12 10:04:08 fetching corpus: 12250, signal 323205/567530 (executing program)
2021/06/12 10:04:08 fetching corpus: 12300, signal 323540/568601 (executing program)
2021/06/12 10:04:08 fetching corpus: 12350, signal 324059/569727 (executing program)
2021/06/12 10:04:08 fetching corpus: 12400, signal 324422/570788 (executing program)
2021/06/12 10:04:08 fetching corpus: 12450, signal 324833/571845 (executing program)
2021/06/12 10:04:09 fetching corpus: 12500, signal 325191/572930 (executing program)
2021/06/12 10:04:09 fetching corpus: 12550, signal 325478/573995 (executing program)
2021/06/12 10:04:09 fetching corpus: 12600, signal 326209/575158 (executing program)
2021/06/12 10:04:09 fetching corpus: 12650, signal 326856/576306 (executing program)
2021/06/12 10:04:09 fetching corpus: 12700, signal 327232/577321 (executing program)
2021/06/12 10:04:09 fetching corpus: 12750, signal 327715/578388 (executing program)
2021/06/12 10:04:09 fetching corpus: 12800, signal 328559/579524 (executing program)
2021/06/12 10:04:09 fetching corpus: 12850, signal 329141/580615 (executing program)
2021/06/12 10:04:09 fetching corpus: 12900, signal 330001/581769 (executing program)
2021/06/12 10:04:09 fetching corpus: 12950, signal 330421/582815 (executing program)
2021/06/12 10:04:09 fetching corpus: 13000, signal 330757/583853 (executing program)
2021/06/12 10:04:09 fetching corpus: 13050, signal 331247/584891 (executing program)
2021/06/12 10:04:09 fetching corpus: 13100, signal 331657/585943 (executing program)
2021/06/12 10:04:09 fetching corpus: 13150, signal 332048/587039 (executing program)
2021/06/12 10:04:09 fetching corpus: 13200, signal 332488/588118 (executing program)
2021/06/12 10:04:09 fetching corpus: 13250, signal 333040/589217 (executing program)
2021/06/12 10:04:09 fetching corpus: 13300, signal 333456/590234 (executing program)
2021/06/12 10:04:09 fetching corpus: 13350, signal 333802/591259 (executing program)
2021/06/12 10:04:10 fetching corpus: 13400, signal 334083/592227 (executing program)
2021/06/12 10:04:10 fetching corpus: 13450, signal 334659/593216 (executing program)
2021/06/12 10:04:10 fetching corpus: 13500, signal 335320/594243 (executing program)
2021/06/12 10:04:10 fetching corpus: 13550, signal 335881/595274 (executing program)
2021/06/12 10:04:10 fetching corpus: 13600, signal 336880/596395 (executing program)
2021/06/12 10:04:10 fetching corpus: 13650, signal 337862/597480 (executing program)
2021/06/12 10:04:10 fetching corpus: 13700, signal 338594/598549 (executing program)
2021/06/12 10:04:10 fetching corpus: 13750, signal 339235/599596 (executing program)
2021/06/12 10:04:10 fetching corpus: 13800, signal 339914/600619 (executing program)
2021/06/12 10:04:10 fetching corpus: 13850, signal 340310/601631 (executing program)
2021/06/12 10:04:10 fetching corpus: 13900, signal 340637/602614 (executing program)
2021/06/12 10:04:10 fetching corpus: 13950, signal 340991/603584 (executing program)
2021/06/12 10:04:10 fetching corpus: 14000, signal 341570/604622 (executing program)
2021/06/12 10:04:10 fetching corpus: 14050, signal 342140/605585 (executing program)
2021/06/12 10:04:10 fetching corpus: 14100, signal 342417/606528 (executing program)
2021/06/12 10:04:10 fetching corpus: 14150, signal 342986/607520 (executing program)
2021/06/12 10:04:10 fetching corpus: 14200, signal 343340/608491 (executing program)
2021/06/12 10:04:10 fetching corpus: 14250, signal 343693/609464 (executing program)
2021/06/12 10:04:10 fetching corpus: 14300, signal 344118/610486 (executing program)
2021/06/12 10:04:11 fetching corpus: 14350, signal 344482/611430 (executing program)
2021/06/12 10:04:11 fetching corpus: 14400, signal 344711/612364 (executing program)
2021/06/12 10:04:11 fetching corpus: 14450, signal 345064/613320 (executing program)
2021/06/12 10:04:11 fetching corpus: 14500, signal 345474/614272 (executing program)
2021/06/12 10:04:11 fetching corpus: 14550, signal 345743/615204 (executing program)
2021/06/12 10:04:11 fetching corpus: 14600, signal 346107/616161 (executing program)
2021/06/12 10:04:11 fetching corpus: 14650, signal 346552/617104 (executing program)
2021/06/12 10:04:11 fetching corpus: 14700, signal 347082/618090 (executing program)
2021/06/12 10:04:11 fetching corpus: 14750, signal 347372/619025 (executing program)
2021/06/12 10:04:11 fetching corpus: 14800, signal 347719/619973 (executing program)
2021/06/12 10:04:11 fetching corpus: 14850, signal 348018/620918 (executing program)
2021/06/12 10:04:11 fetching corpus: 14900, signal 348624/621840 (executing program)
2021/06/12 10:04:11 fetching corpus: 14950, signal 349060/622799 (executing program)
2021/06/12 10:04:11 fetching corpus: 15000, signal 349372/623724 (executing program)
2021/06/12 10:04:11 fetching corpus: 15050, signal 349596/624647 (executing program)
2021/06/12 10:04:11 fetching corpus: 15100, signal 350054/625575 (executing program)
2021/06/12 10:04:12 fetching corpus: 15150, signal 350368/626545 (executing program)
2021/06/12 10:04:12 fetching corpus: 15200, signal 350825/627513 (executing program)
2021/06/12 10:04:12 fetching corpus: 15250, signal 351265/628445 (executing program)
2021/06/12 10:04:12 fetching corpus: 15300, signal 351505/629357 (executing program)
2021/06/12 10:04:12 fetching corpus: 15350, signal 351833/630318 (executing program)
2021/06/12 10:04:12 fetching corpus: 15400, signal 352174/631247 (executing program)
2021/06/12 10:04:12 fetching corpus: 15450, signal 352431/632133 (executing program)
2021/06/12 10:04:12 fetching corpus: 15500, signal 352865/633011 (executing program)
2021/06/12 10:04:12 fetching corpus: 15550, signal 353380/633935 (executing program)
2021/06/12 10:04:12 fetching corpus: 15600, signal 353726/634818 (executing program)
2021/06/12 10:04:12 fetching corpus: 15650, signal 354023/635728 (executing program)
2021/06/12 10:04:12 fetching corpus: 15700, signal 354582/636613 (executing program)
2021/06/12 10:04:12 fetching corpus: 15750, signal 354851/637501 (executing program)
2021/06/12 10:04:12 fetching corpus: 15800, signal 355261/638379 (executing program)
2021/06/12 10:04:12 fetching corpus: 15850, signal 355549/639286 (executing program)
2021/06/12 10:04:12 fetching corpus: 15900, signal 356507/640152 (executing program)
2021/06/12 10:04:12 fetching corpus: 15950, signal 356977/641091 (executing program)
2021/06/12 10:04:12 fetching corpus: 16000, signal 357400/641956 (executing program)
2021/06/12 10:04:13 fetching corpus: 16050, signal 357809/641956 (executing program)
2021/06/12 10:04:13 fetching corpus: 16100, signal 358167/641956 (executing program)
2021/06/12 10:04:13 fetching corpus: 16150, signal 358514/641956 (executing program)
2021/06/12 10:04:13 fetching corpus: 16200, signal 358877/641956 (executing program)
2021/06/12 10:04:13 fetching corpus: 16250, signal 359375/641957 (executing program)
2021/06/12 10:04:13 fetching corpus: 16300, signal 359690/641957 (executing program)
2021/06/12 10:04:13 fetching corpus: 16350, signal 359992/641957 (executing program)
2021/06/12 10:04:13 fetching corpus: 16400, signal 360347/641957 (executing program)
2021/06/12 10:04:13 fetching corpus: 16450, signal 360571/641957 (executing program)
2021/06/12 10:04:13 fetching corpus: 16500, signal 360875/641961 (executing program)
2021/06/12 10:04:13 fetching corpus: 16550, signal 361089/641961 (executing program)
2021/06/12 10:04:13 fetching corpus: 16600, signal 361391/641961 (executing program)
2021/06/12 10:04:13 fetching corpus: 16650, signal 361932/641961 (executing program)
2021/06/12 10:04:13 fetching corpus: 16700, signal 362239/641961 (executing program)
2021/06/12 10:04:13 fetching corpus: 16750, signal 362813/641961 (executing program)
2021/06/12 10:04:13 fetching corpus: 16800, signal 363254/641961 (executing program)
2021/06/12 10:04:13 fetching corpus: 16850, signal 363527/641961 (executing program)
2021/06/12 10:04:13 fetching corpus: 16900, signal 363789/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 16950, signal 364087/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 17000, signal 364515/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 17050, signal 364858/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 17100, signal 365236/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 17150, signal 365652/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 17200, signal 366011/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 17250, signal 366649/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 17300, signal 367036/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 17350, signal 367407/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 17400, signal 367710/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 17450, signal 368009/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 17500, signal 368504/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 17550, signal 369028/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 17600, signal 369297/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 17650, signal 369760/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 17700, signal 370187/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 17750, signal 370418/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 17800, signal 370947/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 17850, signal 371191/641961 (executing program)
2021/06/12 10:04:14 fetching corpus: 17900, signal 371504/641961 (executing program)
2021/06/12 10:04:15 fetching corpus: 17950, signal 371806/641961 (executing program)
2021/06/12 10:04:15 fetching corpus: 18000, signal 372133/641961 (executing program)
2021/06/12 10:04:15 fetching corpus: 18050, signal 372437/641961 (executing program)
2021/06/12 10:04:15 fetching corpus: 18100, signal 372794/641961 (executing program)
2021/06/12 10:04:15 fetching corpus: 18150, signal 373214/641961 (executing program)
2021/06/12 10:04:15 fetching corpus: 18200, signal 373502/641961 (executing program)
2021/06/12 10:04:15 fetching corpus: 18250, signal 373824/641961 (executing program)
2021/06/12 10:04:15 fetching corpus: 18300, signal 374151/641961 (executing program)
2021/06/12 10:04:15 fetching corpus: 18350, signal 374500/641961 (executing program)
2021/06/12 10:04:15 fetching corpus: 18400, signal 374904/641961 (executing program)
2021/06/12 10:04:15 fetching corpus: 18450, signal 375146/641961 (executing program)
2021/06/12 10:04:15 fetching corpus: 18500, signal 375562/641961 (executing program)
2021/06/12 10:04:15 fetching corpus: 18550, signal 375920/641961 (executing program)
2021/06/12 10:04:15 fetching corpus: 18600, signal 376221/641961 (executing program)
2021/06/12 10:04:15 fetching corpus: 18650, signal 376654/641961 (executing program)
2021/06/12 10:04:15 fetching corpus: 18700, signal 377005/641961 (executing program)
2021/06/12 10:04:15 fetching corpus: 18750, signal 377272/641961 (executing program)
2021/06/12 10:04:15 fetching corpus: 18800, signal 377666/641961 (executing program)
2021/06/12 10:04:16 fetching corpus: 18850, signal 378067/641961 (executing program)
2021/06/12 10:04:16 fetching corpus: 18900, signal 378609/641961 (executing program)
2021/06/12 10:04:16 fetching corpus: 18950, signal 378902/641961 (executing program)
2021/06/12 10:04:16 fetching corpus: 19000, signal 379191/641961 (executing program)
2021/06/12 10:04:16 fetching corpus: 19050, signal 379555/641961 (executing program)
2021/06/12 10:04:16 fetching corpus: 19100, signal 380019/641961 (executing program)
2021/06/12 10:04:16 fetching corpus: 19150, signal 380300/641961 (executing program)
2021/06/12 10:04:16 fetching corpus: 19200, signal 380715/641961 (executing program)
2021/06/12 10:04:16 fetching corpus: 19250, signal 381070/641961 (executing program)
2021/06/12 10:04:16 fetching corpus: 19300, signal 381373/641961 (executing program)
2021/06/12 10:04:16 fetching corpus: 19350, signal 381920/641961 (executing program)
2021/06/12 10:04:16 fetching corpus: 19400, signal 382359/641967 (executing program)
2021/06/12 10:04:16 fetching corpus: 19450, signal 382630/641967 (executing program)
2021/06/12 10:04:16 fetching corpus: 19500, signal 382916/641967 (executing program)
2021/06/12 10:04:16 fetching corpus: 19550, signal 383228/641967 (executing program)
2021/06/12 10:04:16 fetching corpus: 19600, signal 383543/641967 (executing program)
2021/06/12 10:04:16 fetching corpus: 19650, signal 383901/641967 (executing program)
2021/06/12 10:04:16 fetching corpus: 19700, signal 384146/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 19750, signal 384483/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 19800, signal 384784/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 19850, signal 385189/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 19900, signal 385387/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 19950, signal 385682/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 20000, signal 386026/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 20050, signal 386245/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 20100, signal 386980/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 20150, signal 387220/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 20200, signal 387605/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 20250, signal 387997/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 20300, signal 388350/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 20350, signal 388545/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 20400, signal 388830/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 20450, signal 389227/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 20500, signal 389512/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 20550, signal 389780/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 20600, signal 389975/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 20650, signal 390392/641967 (executing program)
2021/06/12 10:04:17 fetching corpus: 20700, signal 390695/641967 (executing program)
2021/06/12 10:04:18 fetching corpus: 20750, signal 390978/641967 (executing program)
2021/06/12 10:04:18 fetching corpus: 20800, signal 391272/641967 (executing program)
2021/06/12 10:04:18 fetching corpus: 20850, signal 391769/641967 (executing program)
2021/06/12 10:04:18 fetching corpus: 20900, signal 392098/641967 (executing program)
2021/06/12 10:04:18 fetching corpus: 20950, signal 392370/641967 (executing program)
2021/06/12 10:04:18 fetching corpus: 21000, signal 392781/641967 (executing program)
2021/06/12 10:04:18 fetching corpus: 21050, signal 393108/641967 (executing program)
2021/06/12 10:04:18 fetching corpus: 21100, signal 393390/641967 (executing program)
2021/06/12 10:04:18 fetching corpus: 21150, signal 393692/641967 (executing program)
2021/06/12 10:04:18 fetching corpus: 21200, signal 393956/641967 (executing program)
2021/06/12 10:04:18 fetching corpus: 21250, signal 394218/641967 (executing program)
2021/06/12 10:04:18 fetching corpus: 21300, signal 394709/641967 (executing program)
2021/06/12 10:04:18 fetching corpus: 21350, signal 394907/641967 (executing program)
2021/06/12 10:04:18 fetching corpus: 21400, signal 395258/641967 (executing program)
2021/06/12 10:04:18 fetching corpus: 21450, signal 395496/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 21500, signal 396514/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 21550, signal 396881/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 21600, signal 397176/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 21650, signal 397464/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 21700, signal 397673/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 21750, signal 398000/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 21800, signal 398308/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 21850, signal 398629/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 21900, signal 399017/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 21950, signal 399252/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 22000, signal 399563/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 22050, signal 399836/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 22100, signal 400125/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 22150, signal 400501/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 22200, signal 400993/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 22250, signal 401245/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 22300, signal 401476/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 22350, signal 401781/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 22400, signal 402056/641967 (executing program)
2021/06/12 10:04:19 fetching corpus: 22450, signal 402426/641967 (executing program)
2021/06/12 10:04:20 fetching corpus: 22500, signal 402747/641967 (executing program)
2021/06/12 10:04:20 fetching corpus: 22550, signal 403013/641967 (executing program)
2021/06/12 10:04:20 fetching corpus: 22600, signal 403442/641967 (executing program)
2021/06/12 10:04:20 fetching corpus: 22650, signal 403697/641967 (executing program)
2021/06/12 10:04:20 fetching corpus: 22700, signal 403931/641967 (executing program)
2021/06/12 10:04:20 fetching corpus: 22750, signal 404211/641967 (executing program)
2021/06/12 10:04:20 fetching corpus: 22800, signal 404535/641967 (executing program)
2021/06/12 10:04:20 fetching corpus: 22850, signal 404806/641967 (executing program)
2021/06/12 10:04:20 fetching corpus: 22900, signal 405116/641967 (executing program)
2021/06/12 10:04:20 fetching corpus: 22950, signal 405489/641967 (executing program)
2021/06/12 10:04:20 fetching corpus: 23000, signal 405828/641967 (executing program)
2021/06/12 10:04:20 fetching corpus: 23050, signal 406000/641967 (executing program)
2021/06/12 10:04:20 fetching corpus: 23100, signal 406260/641967 (executing program)
2021/06/12 10:04:20 fetching corpus: 23150, signal 406667/641967 (executing program)
2021/06/12 10:04:20 fetching corpus: 23200, signal 407290/641967 (executing program)
2021/06/12 10:04:20 fetching corpus: 23250, signal 407638/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 23300, signal 407908/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 23350, signal 408274/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 23400, signal 408588/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 23450, signal 408882/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 23500, signal 409098/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 23550, signal 409362/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 23600, signal 409579/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 23650, signal 409855/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 23700, signal 410223/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 23750, signal 410459/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 23800, signal 410711/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 23850, signal 411015/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 23900, signal 411307/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 23950, signal 411536/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 24000, signal 411919/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 24050, signal 412122/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 24100, signal 412340/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 24150, signal 412607/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 24200, signal 412828/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 24250, signal 413091/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 24300, signal 413615/641967 (executing program)
2021/06/12 10:04:21 fetching corpus: 24350, signal 413858/641967 (executing program)
2021/06/12 10:04:22 fetching corpus: 24400, signal 414135/641967 (executing program)
2021/06/12 10:04:22 fetching corpus: 24450, signal 414449/641967 (executing program)
2021/06/12 10:04:22 fetching corpus: 24500, signal 414800/641967 (executing program)
2021/06/12 10:04:22 fetching corpus: 24550, signal 416150/641967 (executing program)
2021/06/12 10:04:22 fetching corpus: 24600, signal 416441/641967 (executing program)
2021/06/12 10:04:22 fetching corpus: 24650, signal 416683/641967 (executing program)
2021/06/12 10:04:22 fetching corpus: 24700, signal 417060/641967 (executing program)
2021/06/12 10:04:22 fetching corpus: 24750, signal 417362/641967 (executing program)
2021/06/12 10:04:22 fetching corpus: 24800, signal 417640/641967 (executing program)
2021/06/12 10:04:22 fetching corpus: 24850, signal 417838/641967 (executing program)
2021/06/12 10:04:22 fetching corpus: 24900, signal 418144/641967 (executing program)
2021/06/12 10:04:22 fetching corpus: 24950, signal 418376/641967 (executing program)
2021/06/12 10:04:22 fetching corpus: 25000, signal 418580/641967 (executing program)
2021/06/12 10:04:22 fetching corpus: 25050, signal 418857/641967 (executing program)
2021/06/12 10:04:22 fetching corpus: 25100, signal 419081/641967 (executing program)
2021/06/12 10:04:22 fetching corpus: 25150, signal 419251/641967 (executing program)
2021/06/12 10:04:22 fetching corpus: 25200, signal 419489/641967 (executing program)
2021/06/12 10:04:22 fetching corpus: 25250, signal 419801/641967 (executing program)
2021/06/12 10:04:23 fetching corpus: 25300, signal 420027/641967 (executing program)
2021/06/12 10:04:23 fetching corpus: 25350, signal 420613/641967 (executing program)
2021/06/12 10:04:23 fetching corpus: 25400, signal 420865/641967 (executing program)
2021/06/12 10:04:23 fetching corpus: 25450, signal 421107/641967 (executing program)
2021/06/12 10:04:23 fetching corpus: 25500, signal 421359/641967 (executing program)
2021/06/12 10:04:23 fetching corpus: 25550, signal 421650/641967 (executing program)
2021/06/12 10:04:23 fetching corpus: 25600, signal 421914/641967 (executing program)
2021/06/12 10:04:23 fetching corpus: 25650, signal 422221/641967 (executing program)
2021/06/12 10:04:23 fetching corpus: 25700, signal 422435/641967 (executing program)
2021/06/12 10:04:23 fetching corpus: 25750, signal 422675/641967 (executing program)
2021/06/12 10:04:23 fetching corpus: 25800, signal 422951/641967 (executing program)
2021/06/12 10:04:23 fetching corpus: 25850, signal 423312/641967 (executing program)
2021/06/12 10:04:23 fetching corpus: 25900, signal 423543/641969 (executing program)
2021/06/12 10:04:23 fetching corpus: 25950, signal 423810/641969 (executing program)
2021/06/12 10:04:23 fetching corpus: 26000, signal 424028/641969 (executing program)
2021/06/12 10:04:23 fetching corpus: 26050, signal 424361/641969 (executing program)
2021/06/12 10:04:23 fetching corpus: 26100, signal 424626/641969 (executing program)
2021/06/12 10:04:23 fetching corpus: 26150, signal 424855/641969 (executing program)
2021/06/12 10:04:23 fetching corpus: 26200, signal 425315/641969 (executing program)
2021/06/12 10:04:23 fetching corpus: 26250, signal 425650/641969 (executing program)
2021/06/12 10:04:24 fetching corpus: 26300, signal 425889/641969 (executing program)
2021/06/12 10:04:24 fetching corpus: 26350, signal 426206/641969 (executing program)
2021/06/12 10:04:24 fetching corpus: 26400, signal 426797/641969 (executing program)
2021/06/12 10:04:24 fetching corpus: 26450, signal 427035/641969 (executing program)
2021/06/12 10:04:24 fetching corpus: 26500, signal 427316/641969 (executing program)
2021/06/12 10:04:24 fetching corpus: 26550, signal 427532/641969 (executing program)
2021/06/12 10:04:24 fetching corpus: 26600, signal 427965/641969 (executing program)
2021/06/12 10:04:24 fetching corpus: 26650, signal 428253/641969 (executing program)
2021/06/12 10:04:24 fetching corpus: 26700, signal 428510/641969 (executing program)
2021/06/12 10:04:24 fetching corpus: 26750, signal 428981/641969 (executing program)
2021/06/12 10:04:24 fetching corpus: 26800, signal 429283/641969 (executing program)
2021/06/12 10:04:24 fetching corpus: 26850, signal 429497/641969 (executing program)
2021/06/12 10:04:24 fetching corpus: 26900, signal 429818/641969 (executing program)
2021/06/12 10:04:24 fetching corpus: 26950, signal 430045/641969 (executing program)
2021/06/12 10:04:24 fetching corpus: 27000, signal 430270/641969 (executing program)
2021/06/12 10:04:24 fetching corpus: 27050, signal 430505/641969 (executing program)
2021/06/12 10:04:24 fetching corpus: 27100, signal 430675/641969 (executing program)
2021/06/12 10:04:25 fetching corpus: 27150, signal 430899/641969 (executing program)
2021/06/12 10:04:25 fetching corpus: 27200, signal 431055/641969 (executing program)
2021/06/12 10:04:25 fetching corpus: 27250, signal 431250/641969 (executing program)
2021/06/12 10:04:25 fetching corpus: 27300, signal 431566/641969 (executing program)
2021/06/12 10:04:25 fetching corpus: 27350, signal 431772/641969 (executing program)
2021/06/12 10:04:25 fetching corpus: 27400, signal 431982/641969 (executing program)
2021/06/12 10:04:25 fetching corpus: 27450, signal 432318/641969 (executing program)
2021/06/12 10:04:25 fetching corpus: 27500, signal 432677/641969 (executing program)
2021/06/12 10:04:25 fetching corpus: 27550, signal 433064/641969 (executing program)
2021/06/12 10:04:25 fetching corpus: 27600, signal 433362/641969 (executing program)
2021/06/12 10:04:25 fetching corpus: 27650, signal 433576/641969 (executing program)
2021/06/12 10:04:25 fetching corpus: 27700, signal 434145/641969 (executing program)
2021/06/12 10:04:25 fetching corpus: 27750, signal 434475/641969 (executing program)
2021/06/12 10:04:25 fetching corpus: 27800, signal 434738/641969 (executing program)
2021/06/12 10:04:25 fetching corpus: 27850, signal 434919/641969 (executing program)
2021/06/12 10:04:25 fetching corpus: 27900, signal 435163/641969 (executing program)
2021/06/12 10:04:26 fetching corpus: 27950, signal 435390/641969 (executing program)
2021/06/12 10:04:26 fetching corpus: 28000, signal 435558/641969 (executing program)
2021/06/12 10:04:26 fetching corpus: 28050, signal 435778/641969 (executing program)
2021/06/12 10:04:26 fetching corpus: 28100, signal 435988/641969 (executing program)
2021/06/12 10:04:26 fetching corpus: 28150, signal 436146/641969 (executing program)
2021/06/12 10:04:26 fetching corpus: 28200, signal 436394/641969 (executing program)
2021/06/12 10:04:26 fetching corpus: 28250, signal 436568/641969 (executing program)
2021/06/12 10:04:26 fetching corpus: 28300, signal 436796/641969 (executing program)
2021/06/12 10:04:26 fetching corpus: 28350, signal 437011/641969 (executing program)
2021/06/12 10:04:26 fetching corpus: 28400, signal 437369/641969 (executing program)
2021/06/12 10:04:26 fetching corpus: 28450, signal 437612/641969 (executing program)
2021/06/12 10:04:26 fetching corpus: 28500, signal 437757/641969 (executing program)
2021/06/12 10:04:26 fetching corpus: 28550, signal 437992/641969 (executing program)
2021/06/12 10:04:26 fetching corpus: 28600, signal 438256/641969 (executing program)
2021/06/12 10:04:26 fetching corpus: 28650, signal 438511/641969 (executing program)
2021/06/12 10:04:26 fetching corpus: 28700, signal 438695/641969 (executing program)
2021/06/12 10:04:26 fetching corpus: 28750, signal 438950/641969 (executing program)
2021/06/12 10:04:26 fetching corpus: 28800, signal 439113/641969 (executing program)
2021/06/12 10:04:26 fetching corpus: 28850, signal 439352/641969 (executing program)
2021/06/12 10:04:27 fetching corpus: 28900, signal 439609/641969 (executing program)
2021/06/12 10:04:27 fetching corpus: 28950, signal 439789/641969 (executing program)
2021/06/12 10:04:27 fetching corpus: 29000, signal 440021/641969 (executing program)
2021/06/12 10:04:27 fetching corpus: 29050, signal 440302/641969 (executing program)
2021/06/12 10:04:27 fetching corpus: 29100, signal 441912/641969 (executing program)
2021/06/12 10:04:27 fetching corpus: 29150, signal 442130/641969 (executing program)
2021/06/12 10:04:27 fetching corpus: 29200, signal 442365/641969 (executing program)
2021/06/12 10:04:27 fetching corpus: 29250, signal 442516/641969 (executing program)
2021/06/12 10:04:27 fetching corpus: 29300, signal 442715/641969 (executing program)
2021/06/12 10:04:27 fetching corpus: 29350, signal 443039/641969 (executing program)
2021/06/12 10:04:27 fetching corpus: 29400, signal 443326/641969 (executing program)
2021/06/12 10:04:27 fetching corpus: 29450, signal 443546/641969 (executing program)
2021/06/12 10:04:27 fetching corpus: 29500, signal 443770/641969 (executing program)
2021/06/12 10:04:27 fetching corpus: 29550, signal 443927/641969 (executing program)
2021/06/12 10:04:27 fetching corpus: 29600, signal 444267/641969 (executing program)
2021/06/12 10:04:27 fetching corpus: 29650, signal 444575/641969 (executing program)
2021/06/12 10:04:28 fetching corpus: 29700, signal 444860/641969 (executing program)
2021/06/12 10:04:28 fetching corpus: 29750, signal 445041/641969 (executing program)
2021/06/12 10:04:28 fetching corpus: 29800, signal 445368/641969 (executing program)
2021/06/12 10:04:28 fetching corpus: 29850, signal 445616/641969 (executing program)
2021/06/12 10:04:28 fetching corpus: 29900, signal 446135/641969 (executing program)
2021/06/12 10:04:28 fetching corpus: 29950, signal 446553/641969 (executing program)
2021/06/12 10:04:28 fetching corpus: 30000, signal 446770/641969 (executing program)
2021/06/12 10:04:28 fetching corpus: 30050, signal 447100/641969 (executing program)
2021/06/12 10:04:28 fetching corpus: 30100, signal 447347/641969 (executing program)
2021/06/12 10:04:28 fetching corpus: 30150, signal 447527/641969 (executing program)
2021/06/12 10:04:28 fetching corpus: 30200, signal 447664/641969 (executing program)
2021/06/12 10:04:28 fetching corpus: 30250, signal 447864/641969 (executing program)
2021/06/12 10:04:28 fetching corpus: 30300, signal 448039/641969 (executing program)
2021/06/12 10:04:28 fetching corpus: 30350, signal 448216/641969 (executing program)
2021/06/12 10:04:28 fetching corpus: 30400, signal 448432/641969 (executing program)
2021/06/12 10:04:29 fetching corpus: 30450, signal 448815/641969 (executing program)
2021/06/12 10:04:29 fetching corpus: 30500, signal 449053/641969 (executing program)
2021/06/12 10:04:29 fetching corpus: 30550, signal 449302/641969 (executing program)
2021/06/12 10:04:29 fetching corpus: 30600, signal 449643/641969 (executing program)
2021/06/12 10:04:29 fetching corpus: 30650, signal 449930/641969 (executing program)
2021/06/12 10:04:29 fetching corpus: 30700, signal 450151/641969 (executing program)
2021/06/12 10:04:29 fetching corpus: 30750, signal 450375/641969 (executing program)
2021/06/12 10:04:29 fetching corpus: 30800, signal 450550/641969 (executing program)
2021/06/12 10:04:29 fetching corpus: 30850, signal 450828/641969 (executing program)
2021/06/12 10:04:29 fetching corpus: 30900, signal 450987/641969 (executing program)
2021/06/12 10:04:29 fetching corpus: 30950, signal 451645/641969 (executing program)
2021/06/12 10:04:29 fetching corpus: 31000, signal 451899/641969 (executing program)
2021/06/12 10:04:29 fetching corpus: 31050, signal 452072/641969 (executing program)
2021/06/12 10:04:29 fetching corpus: 31100, signal 452343/641969 (executing program)
2021/06/12 10:04:29 fetching corpus: 31150, signal 452547/641969 (executing program)
2021/06/12 10:04:29 fetching corpus: 31200, signal 452737/641969 (executing program)
2021/06/12 10:04:29 fetching corpus: 31250, signal 453049/641969 (executing program)
2021/06/12 10:04:29 fetching corpus: 31300, signal 453367/641969 (executing program)
2021/06/12 10:04:29 fetching corpus: 31350, signal 453589/641969 (executing program)
2021/06/12 10:04:30 fetching corpus: 31400, signal 453801/641969 (executing program)
2021/06/12 10:04:30 fetching corpus: 31450, signal 454096/641969 (executing program)
2021/06/12 10:04:30 fetching corpus: 31500, signal 454409/641969 (executing program)
2021/06/12 10:04:30 fetching corpus: 31550, signal 454568/641969 (executing program)
2021/06/12 10:04:30 fetching corpus: 31600, signal 454787/641969 (executing program)
2021/06/12 10:04:30 fetching corpus: 31650, signal 454965/641969 (executing program)
2021/06/12 10:04:30 fetching corpus: 31700, signal 455202/641969 (executing program)
2021/06/12 10:04:30 fetching corpus: 31750, signal 455400/641969 (executing program)
2021/06/12 10:04:30 fetching corpus: 31800, signal 455714/641969 (executing program)
2021/06/12 10:04:30 fetching corpus: 31850, signal 455923/641969 (executing program)
2021/06/12 10:04:30 fetching corpus: 31900, signal 456268/641969 (executing program)
2021/06/12 10:04:30 fetching corpus: 31950, signal 456474/641969 (executing program)
2021/06/12 10:04:30 fetching corpus: 32000, signal 456612/641969 (executing program)
2021/06/12 10:04:30 fetching corpus: 32050, signal 456826/641969 (executing program)
2021/06/12 10:04:30 fetching corpus: 32100, signal 457124/641969 (executing program)
2021/06/12 10:04:30 fetching corpus: 32150, signal 457311/641969 (executing program)
2021/06/12 10:04:30 fetching corpus: 32200, signal 457638/641969 (executing program)
2021/06/12 10:04:31 fetching corpus: 32250, signal 457755/641969 (executing program)
2021/06/12 10:04:31 fetching corpus: 32300, signal 458026/641969 (executing program)
2021/06/12 10:04:31 fetching corpus: 32350, signal 458205/641969 (executing program)
2021/06/12 10:04:31 fetching corpus: 32400, signal 458415/641969 (executing program)
2021/06/12 10:04:31 fetching corpus: 32450, signal 458818/641969 (executing program)
2021/06/12 10:04:31 fetching corpus: 32500, signal 459094/641969 (executing program)
2021/06/12 10:04:31 fetching corpus: 32550, signal 459390/641969 (executing program)
2021/06/12 10:04:31 fetching corpus: 32600, signal 459600/641969 (executing program)
2021/06/12 10:04:31 fetching corpus: 32650, signal 459883/641969 (executing program)
2021/06/12 10:04:31 fetching corpus: 32700, signal 460150/641969 (executing program)
2021/06/12 10:04:31 fetching corpus: 32750, signal 460365/641969 (executing program)
2021/06/12 10:04:31 fetching corpus: 32800, signal 460544/641969 (executing program)
2021/06/12 10:04:31 fetching corpus: 32850, signal 460774/641969 (executing program)
2021/06/12 10:04:31 fetching corpus: 32900, signal 461110/641969 (executing program)
2021/06/12 10:04:31 fetching corpus: 32950, signal 461263/641969 (executing program)
2021/06/12 10:04:31 fetching corpus: 33000, signal 461473/641969 (executing program)
2021/06/12 10:04:31 fetching corpus: 33050, signal 461691/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 33100, signal 462535/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 33150, signal 462760/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 33200, signal 462984/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 33250, signal 463159/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 33300, signal 463373/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 33350, signal 463592/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 33400, signal 463769/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 33450, signal 463898/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 33500, signal 464187/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 33550, signal 464420/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 33600, signal 464621/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 33650, signal 464869/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 33700, signal 465235/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 33750, signal 465428/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 33800, signal 465586/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 33850, signal 465825/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 33900, signal 466093/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 33950, signal 466329/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 34000, signal 466618/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 34050, signal 466883/641969 (executing program)
2021/06/12 10:04:32 fetching corpus: 34100, signal 467049/641969 (executing program)
2021/06/12 10:04:33 fetching corpus: 34150, signal 467261/641969 (executing program)
2021/06/12 10:04:33 fetching corpus: 34200, signal 467449/641969 (executing program)
2021/06/12 10:04:33 fetching corpus: 34250, signal 467692/641969 (executing program)
2021/06/12 10:04:33 fetching corpus: 34300, signal 467844/641969 (executing program)
2021/06/12 10:04:33 fetching corpus: 34350, signal 468130/641969 (executing program)
2021/06/12 10:04:33 fetching corpus: 34400, signal 468291/641969 (executing program)
2021/06/12 10:04:33 fetching corpus: 34450, signal 468530/641969 (executing program)
2021/06/12 10:04:33 fetching corpus: 34500, signal 468755/641969 (executing program)
2021/06/12 10:04:33 fetching corpus: 34550, signal 468912/641969 (executing program)
2021/06/12 10:04:33 fetching corpus: 34600, signal 469159/641969 (executing program)
2021/06/12 10:04:33 fetching corpus: 34650, signal 469374/641969 (executing program)
2021/06/12 10:04:33 fetching corpus: 34700, signal 469626/641969 (executing program)
2021/06/12 10:04:33 fetching corpus: 34750, signal 469817/641969 (executing program)
2021/06/12 10:04:33 fetching corpus: 34800, signal 470134/641969 (executing program)
2021/06/12 10:04:33 fetching corpus: 34850, signal 470379/641971 (executing program)
2021/06/12 10:04:33 fetching corpus: 34900, signal 470528/641971 (executing program)
2021/06/12 10:04:33 fetching corpus: 34950, signal 470794/641971 (executing program)
2021/06/12 10:04:33 fetching corpus: 35000, signal 471010/641971 (executing program)
2021/06/12 10:04:34 fetching corpus: 35050, signal 471236/641971 (executing program)
2021/06/12 10:04:34 fetching corpus: 35100, signal 471468/641971 (executing program)
2021/06/12 10:04:34 fetching corpus: 35150, signal 471701/641971 (executing program)
2021/06/12 10:04:34 fetching corpus: 35200, signal 471952/641971 (executing program)
2021/06/12 10:04:34 fetching corpus: 35250, signal 472165/641971 (executing program)
2021/06/12 10:04:34 fetching corpus: 35300, signal 472368/641971 (executing program)
2021/06/12 10:04:34 fetching corpus: 35350, signal 472767/641971 (executing program)
2021/06/12 10:04:34 fetching corpus: 35400, signal 473155/641971 (executing program)
2021/06/12 10:04:34 fetching corpus: 35450, signal 473317/641971 (executing program)
2021/06/12 10:04:34 fetching corpus: 35500, signal 473498/641971 (executing program)
2021/06/12 10:04:34 fetching corpus: 35550, signal 473795/641971 (executing program)
2021/06/12 10:04:34 fetching corpus: 35600, signal 474057/641971 (executing program)
2021/06/12 10:04:35 fetching corpus: 35650, signal 474413/641971 (executing program)
2021/06/12 10:04:35 fetching corpus: 35700, signal 474604/641971 (executing program)
2021/06/12 10:04:35 fetching corpus: 35750, signal 474801/641971 (executing program)
2021/06/12 10:04:35 fetching corpus: 35800, signal 474994/641971 (executing program)
2021/06/12 10:04:35 fetching corpus: 35850, signal 475186/641971 (executing program)
2021/06/12 10:04:35 fetching corpus: 35900, signal 475417/641971 (executing program)
2021/06/12 10:04:35 fetching corpus: 35950, signal 475610/641971 (executing program)
2021/06/12 10:04:35 fetching corpus: 36000, signal 475914/641973 (executing program)
2021/06/12 10:04:35 fetching corpus: 36050, signal 476121/641973 (executing program)
2021/06/12 10:04:35 fetching corpus: 36100, signal 476272/641973 (executing program)
2021/06/12 10:04:35 fetching corpus: 36150, signal 476650/641973 (executing program)
2021/06/12 10:04:35 fetching corpus: 36200, signal 476825/641973 (executing program)
2021/06/12 10:04:35 fetching corpus: 36250, signal 476977/641973 (executing program)
2021/06/12 10:04:35 fetching corpus: 36300, signal 477183/641973 (executing program)
2021/06/12 10:04:35 fetching corpus: 36350, signal 477476/641973 (executing program)
2021/06/12 10:04:35 fetching corpus: 36400, signal 477713/641973 (executing program)
2021/06/12 10:04:35 fetching corpus: 36450, signal 477910/641973 (executing program)
2021/06/12 10:04:35 fetching corpus: 36500, signal 478053/641973 (executing program)
2021/06/12 10:04:35 fetching corpus: 36550, signal 478367/641973 (executing program)
2021/06/12 10:04:35 fetching corpus: 36600, signal 478553/641973 (executing program)
2021/06/12 10:04:35 fetching corpus: 36650, signal 478737/641973 (executing program)
2021/06/12 10:04:35 fetching corpus: 36700, signal 478975/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 36750, signal 479174/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 36800, signal 479343/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 36850, signal 479532/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 36900, signal 479880/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 36950, signal 480109/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 37000, signal 480398/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 37050, signal 480673/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 37100, signal 480857/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 37150, signal 481017/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 37200, signal 481224/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 37250, signal 481407/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 37300, signal 481586/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 37350, signal 481927/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 37400, signal 482099/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 37450, signal 482294/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 37500, signal 482688/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 37550, signal 482852/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 37600, signal 483036/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 37650, signal 483262/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 37700, signal 483504/641973 (executing program)
2021/06/12 10:04:36 fetching corpus: 37750, signal 483746/641973 (executing program)
2021/06/12 10:04:37 fetching corpus: 37800, signal 483923/641973 (executing program)
2021/06/12 10:04:37 fetching corpus: 37850, signal 484084/641973 (executing program)
2021/06/12 10:04:37 fetching corpus: 37900, signal 484369/641973 (executing program)
2021/06/12 10:04:37 fetching corpus: 37950, signal 484513/641973 (executing program)
2021/06/12 10:04:37 fetching corpus: 38000, signal 484647/641973 (executing program)
2021/06/12 10:04:37 fetching corpus: 38050, signal 484837/641973 (executing program)
2021/06/12 10:04:37 fetching corpus: 38100, signal 485003/641973 (executing program)
2021/06/12 10:04:37 fetching corpus: 38150, signal 485153/641973 (executing program)
2021/06/12 10:04:37 fetching corpus: 38200, signal 485281/641973 (executing program)
2021/06/12 10:04:37 fetching corpus: 38250, signal 485517/641973 (executing program)
2021/06/12 10:04:37 fetching corpus: 38300, signal 485718/641973 (executing program)
2021/06/12 10:04:37 fetching corpus: 38350, signal 485921/641973 (executing program)
2021/06/12 10:04:37 fetching corpus: 38400, signal 486263/641973 (executing program)
2021/06/12 10:04:37 fetching corpus: 38450, signal 486427/641973 (executing program)
2021/06/12 10:04:37 fetching corpus: 38500, signal 486624/641973 (executing program)
2021/06/12 10:04:37 fetching corpus: 38550, signal 486791/641973 (executing program)
2021/06/12 10:04:38 fetching corpus: 38600, signal 486968/641973 (executing program)
2021/06/12 10:04:38 fetching corpus: 38650, signal 487125/641973 (executing program)
2021/06/12 10:04:38 fetching corpus: 38700, signal 487372/641973 (executing program)
2021/06/12 10:04:38 fetching corpus: 38750, signal 487537/641973 (executing program)
2021/06/12 10:04:38 fetching corpus: 38800, signal 487759/641973 (executing program)
2021/06/12 10:04:38 fetching corpus: 38850, signal 488220/641973 (executing program)
2021/06/12 10:04:38 fetching corpus: 38900, signal 488465/641974 (executing program)
2021/06/12 10:04:38 fetching corpus: 38950, signal 488700/641974 (executing program)
2021/06/12 10:04:38 fetching corpus: 39000, signal 488872/641974 (executing program)
2021/06/12 10:04:38 fetching corpus: 39050, signal 489019/641974 (executing program)
2021/06/12 10:04:38 fetching corpus: 39100, signal 489203/641974 (executing program)
2021/06/12 10:04:38 fetching corpus: 39150, signal 489378/641974 (executing program)
2021/06/12 10:04:38 fetching corpus: 39200, signal 489605/641974 (executing program)
2021/06/12 10:04:38 fetching corpus: 39250, signal 489782/641974 (executing program)
2021/06/12 10:04:38 fetching corpus: 39300, signal 490094/641974 (executing program)
2021/06/12 10:04:38 fetching corpus: 39350, signal 490329/641974 (executing program)
2021/06/12 10:04:38 fetching corpus: 39400, signal 490524/641974 (executing program)
2021/06/12 10:04:38 fetching corpus: 39450, signal 490672/641974 (executing program)
2021/06/12 10:04:38 fetching corpus: 39500, signal 490885/641974 (executing program)
2021/06/12 10:04:38 fetching corpus: 39550, signal 491049/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 39600, signal 491257/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 39650, signal 491565/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 39700, signal 491787/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 39750, signal 491938/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 39800, signal 492092/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 39850, signal 492295/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 39900, signal 492499/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 39950, signal 492750/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 40000, signal 492962/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 40050, signal 493115/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 40100, signal 493274/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 40150, signal 493480/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 40200, signal 493653/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 40250, signal 493819/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 40300, signal 493983/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 40350, signal 494267/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 40400, signal 494408/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 40450, signal 494555/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 40500, signal 494827/641976 (executing program)
2021/06/12 10:04:39 fetching corpus: 40550, signal 495117/641976 (executing program)
2021/06/12 10:04:40 fetching corpus: 40600, signal 495347/641976 (executing program)
2021/06/12 10:04:40 fetching corpus: 40650, signal 495554/641976 (executing program)
2021/06/12 10:04:40 fetching corpus: 40700, signal 495718/641976 (executing program)
2021/06/12 10:04:40 fetching corpus: 40750, signal 495962/641976 (executing program)
2021/06/12 10:04:40 fetching corpus: 40800, signal 496275/641976 (executing program)
2021/06/12 10:04:40 fetching corpus: 40850, signal 496524/641976 (executing program)
2021/06/12 10:04:40 fetching corpus: 40899, signal 496752/641976 (executing program)
2021/06/12 10:04:40 fetching corpus: 40949, signal 497006/641976 (executing program)
2021/06/12 10:04:40 fetching corpus: 40999, signal 497179/641976 (executing program)
2021/06/12 10:04:40 fetching corpus: 41049, signal 497324/641976 (executing program)
2021/06/12 10:04:40 fetching corpus: 41099, signal 497518/641976 (executing program)
2021/06/12 10:04:40 fetching corpus: 41149, signal 497660/641976 (executing program)
2021/06/12 10:04:40 fetching corpus: 41199, signal 497880/641976 (executing program)
2021/06/12 10:04:40 fetching corpus: 41249, signal 498019/641976 (executing program)
2021/06/12 10:04:40 fetching corpus: 41299, signal 498183/641976 (executing program)
2021/06/12 10:04:40 fetching corpus: 41349, signal 498450/641976 (executing program)
2021/06/12 10:04:40 fetching corpus: 41399, signal 498611/641976 (executing program)
2021/06/12 10:04:41 fetching corpus: 41449, signal 498851/641976 (executing program)
2021/06/12 10:04:41 fetching corpus: 41499, signal 499103/641976 (executing program)
2021/06/12 10:04:41 fetching corpus: 41549, signal 499325/641976 (executing program)
2021/06/12 10:04:41 fetching corpus: 41599, signal 499499/641976 (executing program)
2021/06/12 10:04:41 fetching corpus: 41649, signal 499728/641976 (executing program)
2021/06/12 10:04:41 fetching corpus: 41699, signal 500038/641976 (executing program)
2021/06/12 10:04:41 fetching corpus: 41749, signal 500176/641976 (executing program)
2021/06/12 10:04:41 fetching corpus: 41799, signal 500309/641976 (executing program)
2021/06/12 10:04:41 fetching corpus: 41849, signal 500488/641976 (executing program)
2021/06/12 10:04:41 fetching corpus: 41899, signal 500732/641976 (executing program)
2021/06/12 10:04:41 fetching corpus: 41949, signal 500894/641976 (executing program)
2021/06/12 10:04:41 fetching corpus: 41999, signal 501080/641976 (executing program)
2021/06/12 10:04:41 fetching corpus: 42049, signal 501290/641976 (executing program)
2021/06/12 10:04:41 fetching corpus: 42099, signal 501454/641976 (executing program)
2021/06/12 10:04:41 fetching corpus: 42149, signal 501638/641976 (executing program)
2021/06/12 10:04:42 fetching corpus: 42199, signal 501797/641976 (executing program)
2021/06/12 10:04:42 fetching corpus: 42249, signal 502281/641976 (executing program)
2021/06/12 10:04:42 fetching corpus: 42299, signal 502405/641976 (executing program)
2021/06/12 10:04:42 fetching corpus: 42349, signal 502602/641976 (executing program)
2021/06/12 10:04:42 fetching corpus: 42399, signal 502774/641976 (executing program)
2021/06/12 10:04:42 fetching corpus: 42449, signal 502920/641976 (executing program)
2021/06/12 10:04:42 fetching corpus: 42499, signal 503207/641976 (executing program)
2021/06/12 10:04:42 fetching corpus: 42549, signal 503397/641976 (executing program)
2021/06/12 10:04:42 fetching corpus: 42599, signal 503531/641976 (executing program)
2021/06/12 10:04:42 fetching corpus: 42649, signal 503922/641976 (executing program)
2021/06/12 10:04:42 fetching corpus: 42699, signal 504033/641976 (executing program)
2021/06/12 10:04:42 fetching corpus: 42749, signal 504178/641976 (executing program)
2021/06/12 10:04:42 fetching corpus: 42799, signal 504344/641976 (executing program)
2021/06/12 10:04:42 fetching corpus: 42849, signal 504582/641976 (executing program)
2021/06/12 10:04:42 fetching corpus: 42899, signal 504701/641976 (executing program)
2021/06/12 10:04:42 fetching corpus: 42949, signal 504872/641978 (executing program)
2021/06/12 10:04:42 fetching corpus: 42999, signal 505044/641978 (executing program)
2021/06/12 10:04:42 fetching corpus: 43049, signal 505208/641978 (executing program)
2021/06/12 10:04:42 fetching corpus: 43099, signal 505433/641978 (executing program)
2021/06/12 10:04:42 fetching corpus: 43149, signal 505601/641978 (executing program)
2021/06/12 10:04:42 fetching corpus: 43199, signal 505969/641978 (executing program)
2021/06/12 10:04:42 fetching corpus: 43249, signal 506145/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 43299, signal 506282/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 43349, signal 506411/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 43399, signal 506627/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 43449, signal 506814/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 43499, signal 507020/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 43549, signal 507159/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 43599, signal 507366/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 43649, signal 507568/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 43699, signal 507795/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 43749, signal 507922/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 43799, signal 508108/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 43849, signal 508212/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 43899, signal 508342/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 43949, signal 508525/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 43999, signal 508734/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 44049, signal 508921/641978 (executing program)
syzkaller login: [  202.674641][ T3124] ieee802154 phy0 wpan0: encryption failed: -22
[  202.681257][ T3124] ieee802154 phy1 wpan1: encryption failed: -22
2021/06/12 10:04:43 fetching corpus: 44099, signal 509089/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 44149, signal 509283/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 44199, signal 509449/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 44249, signal 509659/641978 (executing program)
2021/06/12 10:04:43 fetching corpus: 44299, signal 509851/641979 (executing program)
2021/06/12 10:04:44 fetching corpus: 44349, signal 509981/641979 (executing program)
2021/06/12 10:04:44 fetching corpus: 44399, signal 510132/641979 (executing program)
2021/06/12 10:04:44 fetching corpus: 44449, signal 510239/641979 (executing program)
2021/06/12 10:04:44 fetching corpus: 44499, signal 510377/641979 (executing program)
2021/06/12 10:04:44 fetching corpus: 44549, signal 510498/641979 (executing program)
2021/06/12 10:04:44 fetching corpus: 44599, signal 510644/641979 (executing program)
2021/06/12 10:04:44 fetching corpus: 44649, signal 510798/641979 (executing program)
2021/06/12 10:04:44 fetching corpus: 44699, signal 511017/641979 (executing program)
2021/06/12 10:04:44 fetching corpus: 44749, signal 511194/641979 (executing program)
2021/06/12 10:04:44 fetching corpus: 44799, signal 511361/641979 (executing program)
2021/06/12 10:04:44 fetching corpus: 44849, signal 511570/641979 (executing program)
2021/06/12 10:04:44 fetching corpus: 44899, signal 511714/641979 (executing program)
2021/06/12 10:04:44 fetching corpus: 44949, signal 511903/641979 (executing program)
2021/06/12 10:04:44 fetching corpus: 44999, signal 512083/641979 (executing program)
2021/06/12 10:04:44 fetching corpus: 45049, signal 512446/641979 (executing program)
2021/06/12 10:04:45 fetching corpus: 45099, signal 512583/641979 (executing program)
2021/06/12 10:04:45 fetching corpus: 45149, signal 512732/641979 (executing program)
2021/06/12 10:04:45 fetching corpus: 45199, signal 512922/641979 (executing program)
2021/06/12 10:04:45 fetching corpus: 45249, signal 513064/641979 (executing program)
2021/06/12 10:04:45 fetching corpus: 45299, signal 513192/641979 (executing program)
2021/06/12 10:04:45 fetching corpus: 45349, signal 513436/641979 (executing program)
2021/06/12 10:04:45 fetching corpus: 45399, signal 513673/641979 (executing program)
2021/06/12 10:04:45 fetching corpus: 45449, signal 513881/641979 (executing program)
2021/06/12 10:04:45 fetching corpus: 45499, signal 514019/641979 (executing program)
2021/06/12 10:04:45 fetching corpus: 45549, signal 514172/641979 (executing program)
2021/06/12 10:04:45 fetching corpus: 45599, signal 514374/641979 (executing program)
2021/06/12 10:04:45 fetching corpus: 45649, signal 514610/641979 (executing program)
2021/06/12 10:04:45 fetching corpus: 45699, signal 514773/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 45749, signal 515001/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 45799, signal 515191/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 45849, signal 515371/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 45899, signal 515622/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 45949, signal 515821/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 45999, signal 515981/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 46049, signal 516149/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 46099, signal 516259/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 46149, signal 516417/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 46199, signal 516553/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 46249, signal 516704/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 46299, signal 516839/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 46349, signal 516962/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 46399, signal 517188/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 46449, signal 517379/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 46499, signal 517615/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 46549, signal 517733/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 46599, signal 517881/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 46649, signal 518014/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 46699, signal 518206/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 46749, signal 518399/641979 (executing program)
2021/06/12 10:04:46 fetching corpus: 46799, signal 518594/641979 (executing program)
2021/06/12 10:04:47 fetching corpus: 46849, signal 518720/641979 (executing program)
2021/06/12 10:04:47 fetching corpus: 46899, signal 518831/641979 (executing program)
2021/06/12 10:04:47 fetching corpus: 46949, signal 518979/641979 (executing program)
2021/06/12 10:04:47 fetching corpus: 46999, signal 519126/641979 (executing program)
2021/06/12 10:04:47 fetching corpus: 47049, signal 519280/641979 (executing program)
2021/06/12 10:04:47 fetching corpus: 47099, signal 519483/641979 (executing program)
2021/06/12 10:04:47 fetching corpus: 47149, signal 519641/641979 (executing program)
2021/06/12 10:04:47 fetching corpus: 47199, signal 519849/641979 (executing program)
2021/06/12 10:04:47 fetching corpus: 47249, signal 520034/641979 (executing program)
2021/06/12 10:04:47 fetching corpus: 47299, signal 520312/641979 (executing program)
2021/06/12 10:04:47 fetching corpus: 47349, signal 520478/641979 (executing program)
2021/06/12 10:04:47 fetching corpus: 47399, signal 520721/641979 (executing program)
2021/06/12 10:04:47 fetching corpus: 47449, signal 520841/641979 (executing program)
2021/06/12 10:04:47 fetching corpus: 47499, signal 521047/641979 (executing program)
2021/06/12 10:04:47 fetching corpus: 47549, signal 521180/641979 (executing program)
2021/06/12 10:04:47 fetching corpus: 47599, signal 521323/641979 (executing program)
2021/06/12 10:04:47 fetching corpus: 47649, signal 521450/641979 (executing program)
2021/06/12 10:04:47 fetching corpus: 47699, signal 521584/641983 (executing program)
2021/06/12 10:04:47 fetching corpus: 47749, signal 521746/641983 (executing program)
2021/06/12 10:04:47 fetching corpus: 47799, signal 521892/641983 (executing program)
2021/06/12 10:04:47 fetching corpus: 47849, signal 522054/641983 (executing program)
2021/06/12 10:04:47 fetching corpus: 47899, signal 522232/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 47949, signal 522386/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 47999, signal 522651/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 48049, signal 522950/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 48099, signal 523135/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 48149, signal 523342/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 48199, signal 523475/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 48249, signal 523738/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 48299, signal 523938/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 48349, signal 524075/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 48399, signal 524248/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 48449, signal 524408/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 48499, signal 524537/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 48549, signal 524730/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 48599, signal 524928/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 48649, signal 525090/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 48699, signal 525222/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 48749, signal 525351/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 48799, signal 525500/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 48849, signal 525669/641983 (executing program)
2021/06/12 10:04:48 fetching corpus: 48899, signal 525802/641983 (executing program)
2021/06/12 10:04:49 fetching corpus: 48949, signal 525976/641986 (executing program)
2021/06/12 10:04:49 fetching corpus: 48999, signal 526208/641986 (executing program)
2021/06/12 10:04:49 fetching corpus: 49049, signal 526329/641986 (executing program)
2021/06/12 10:04:49 fetching corpus: 49099, signal 526458/641986 (executing program)
2021/06/12 10:04:49 fetching corpus: 49149, signal 526658/641986 (executing program)
2021/06/12 10:04:49 fetching corpus: 49199, signal 526822/641986 (executing program)
2021/06/12 10:04:49 fetching corpus: 49249, signal 526941/641986 (executing program)
2021/06/12 10:04:49 fetching corpus: 49299, signal 527092/641986 (executing program)
2021/06/12 10:04:49 fetching corpus: 49349, signal 527278/641986 (executing program)
2021/06/12 10:04:49 fetching corpus: 49399, signal 527407/641986 (executing program)
2021/06/12 10:04:49 fetching corpus: 49449, signal 527540/641986 (executing program)
2021/06/12 10:04:49 fetching corpus: 49499, signal 527740/641986 (executing program)
2021/06/12 10:04:50 fetching corpus: 49549, signal 527925/641986 (executing program)
2021/06/12 10:04:50 fetching corpus: 49599, signal 528075/641986 (executing program)
2021/06/12 10:04:50 fetching corpus: 49649, signal 528280/641986 (executing program)
2021/06/12 10:04:50 fetching corpus: 49699, signal 528500/641986 (executing program)
2021/06/12 10:04:50 fetching corpus: 49749, signal 528659/641986 (executing program)
2021/06/12 10:04:50 fetching corpus: 49799, signal 529067/641986 (executing program)
2021/06/12 10:04:50 fetching corpus: 49849, signal 529199/641986 (executing program)
2021/06/12 10:04:50 fetching corpus: 49899, signal 529479/641986 (executing program)
2021/06/12 10:04:50 fetching corpus: 49949, signal 529635/641986 (executing program)
2021/06/12 10:04:50 fetching corpus: 49999, signal 529750/641986 (executing program)
2021/06/12 10:04:50 fetching corpus: 50049, signal 529881/641986 (executing program)
2021/06/12 10:04:50 fetching corpus: 50099, signal 530041/641986 (executing program)
2021/06/12 10:04:50 fetching corpus: 50149, signal 530203/641986 (executing program)
2021/06/12 10:04:50 fetching corpus: 50199, signal 530362/641986 (executing program)
2021/06/12 10:04:50 fetching corpus: 50249, signal 530546/641986 (executing program)
2021/06/12 10:04:50 fetching corpus: 50299, signal 530782/641986 (executing program)
2021/06/12 10:04:50 fetching corpus: 50349, signal 530957/641986 (executing program)
2021/06/12 10:04:50 fetching corpus: 50399, signal 531178/641986 (executing program)
2021/06/12 10:04:51 fetching corpus: 50449, signal 531312/641986 (executing program)
2021/06/12 10:04:51 fetching corpus: 50499, signal 531462/641986 (executing program)
2021/06/12 10:04:51 fetching corpus: 50549, signal 531626/641986 (executing program)
2021/06/12 10:04:51 fetching corpus: 50599, signal 531787/641986 (executing program)
2021/06/12 10:04:51 fetching corpus: 50649, signal 531922/641986 (executing program)
2021/06/12 10:04:51 fetching corpus: 50699, signal 532042/641986 (executing program)
2021/06/12 10:04:51 fetching corpus: 50749, signal 532204/641986 (executing program)
2021/06/12 10:04:51 fetching corpus: 50799, signal 532338/641986 (executing program)
2021/06/12 10:04:51 fetching corpus: 50849, signal 532492/641987 (executing program)
2021/06/12 10:04:51 fetching corpus: 50899, signal 532650/641987 (executing program)
2021/06/12 10:04:51 fetching corpus: 50949, signal 532888/641987 (executing program)
2021/06/12 10:04:51 fetching corpus: 50999, signal 533149/641988 (executing program)
2021/06/12 10:04:51 fetching corpus: 51049, signal 533282/641988 (executing program)
2021/06/12 10:04:51 fetching corpus: 51099, signal 533409/641988 (executing program)
2021/06/12 10:04:51 fetching corpus: 51149, signal 533518/641988 (executing program)
2021/06/12 10:04:51 fetching corpus: 51199, signal 533723/641989 (executing program)
2021/06/12 10:04:51 fetching corpus: 51249, signal 533865/641989 (executing program)
2021/06/12 10:04:51 fetching corpus: 51299, signal 534001/641989 (executing program)
2021/06/12 10:04:51 fetching corpus: 51349, signal 534123/641989 (executing program)
2021/06/12 10:04:51 fetching corpus: 51399, signal 534281/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 51449, signal 534427/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 51499, signal 534592/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 51549, signal 534764/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 51599, signal 534930/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 51649, signal 535047/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 51699, signal 535272/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 51749, signal 535470/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 51799, signal 535720/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 51849, signal 535976/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 51899, signal 536201/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 51949, signal 536533/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 51999, signal 536727/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 52049, signal 536844/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 52099, signal 537070/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 52149, signal 537268/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 52199, signal 537444/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 52249, signal 537556/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 52299, signal 537712/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 52349, signal 538054/641989 (executing program)
2021/06/12 10:04:52 fetching corpus: 52399, signal 538197/641989 (executing program)
2021/06/12 10:04:53 fetching corpus: 52449, signal 538483/641989 (executing program)
2021/06/12 10:04:53 fetching corpus: 52499, signal 538638/641989 (executing program)
2021/06/12 10:04:53 fetching corpus: 52549, signal 538776/641989 (executing program)
2021/06/12 10:04:53 fetching corpus: 52599, signal 539014/641989 (executing program)
2021/06/12 10:04:53 fetching corpus: 52649, signal 539190/641989 (executing program)
2021/06/12 10:04:53 fetching corpus: 52699, signal 539470/641989 (executing program)
2021/06/12 10:04:53 fetching corpus: 52749, signal 539573/641989 (executing program)
2021/06/12 10:04:53 fetching corpus: 52799, signal 539770/641989 (executing program)
2021/06/12 10:04:53 fetching corpus: 52849, signal 539900/641989 (executing program)
2021/06/12 10:04:53 fetching corpus: 52899, signal 540130/641989 (executing program)
2021/06/12 10:04:53 fetching corpus: 52949, signal 540239/641989 (executing program)
2021/06/12 10:04:53 fetching corpus: 52999, signal 540386/641989 (executing program)
2021/06/12 10:04:53 fetching corpus: 53049, signal 540533/641989 (executing program)
2021/06/12 10:04:53 fetching corpus: 53099, signal 540666/641989 (executing program)
2021/06/12 10:04:53 fetching corpus: 53149, signal 540822/641989 (executing program)
2021/06/12 10:04:53 fetching corpus: 53199, signal 540995/641989 (executing program)
2021/06/12 10:04:53 fetching corpus: 53249, signal 541177/641989 (executing program)
2021/06/12 10:04:53 fetching corpus: 53299, signal 541289/641989 (executing program)
2021/06/12 10:04:54 fetching corpus: 53349, signal 541464/641989 (executing program)
2021/06/12 10:04:54 fetching corpus: 53399, signal 541613/641989 (executing program)
2021/06/12 10:04:54 fetching corpus: 53449, signal 541789/641989 (executing program)
2021/06/12 10:04:54 fetching corpus: 53499, signal 541961/641989 (executing program)
2021/06/12 10:04:54 fetching corpus: 53549, signal 542103/641989 (executing program)
2021/06/12 10:04:54 fetching corpus: 53599, signal 542265/641989 (executing program)
2021/06/12 10:04:54 fetching corpus: 53649, signal 542459/641989 (executing program)
2021/06/12 10:04:54 fetching corpus: 53699, signal 542580/641989 (executing program)
2021/06/12 10:04:54 fetching corpus: 53749, signal 542802/641989 (executing program)
2021/06/12 10:04:54 fetching corpus: 53799, signal 542933/641989 (executing program)
2021/06/12 10:04:54 fetching corpus: 53849, signal 543081/641989 (executing program)
2021/06/12 10:04:55 fetching corpus: 53899, signal 543283/641989 (executing program)
2021/06/12 10:04:55 fetching corpus: 53949, signal 543502/641989 (executing program)
2021/06/12 10:04:55 fetching corpus: 53999, signal 543697/641989 (executing program)
2021/06/12 10:04:55 fetching corpus: 54049, signal 543854/641989 (executing program)
2021/06/12 10:04:55 fetching corpus: 54099, signal 544016/641989 (executing program)
2021/06/12 10:04:55 fetching corpus: 54149, signal 544225/641989 (executing program)
2021/06/12 10:04:55 fetching corpus: 54199, signal 544383/641989 (executing program)
2021/06/12 10:04:55 fetching corpus: 54249, signal 544503/641989 (executing program)
2021/06/12 10:04:55 fetching corpus: 54299, signal 544644/641989 (executing program)
2021/06/12 10:04:55 fetching corpus: 54349, signal 544817/641989 (executing program)
2021/06/12 10:04:55 fetching corpus: 54399, signal 545027/641989 (executing program)
2021/06/12 10:04:55 fetching corpus: 54449, signal 545172/641989 (executing program)
2021/06/12 10:04:55 fetching corpus: 54499, signal 545413/641989 (executing program)
2021/06/12 10:04:55 fetching corpus: 54549, signal 545532/641989 (executing program)
2021/06/12 10:04:55 fetching corpus: 54599, signal 545695/641989 (executing program)
2021/06/12 10:04:55 fetching corpus: 54649, signal 545822/641989 (executing program)
2021/06/12 10:04:55 fetching corpus: 54699, signal 545988/641989 (executing program)
2021/06/12 10:04:55 fetching corpus: 54749, signal 546101/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 54799, signal 546289/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 54849, signal 546444/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 54899, signal 546592/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 54949, signal 546740/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 54999, signal 546944/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 55049, signal 547078/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 55099, signal 547179/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 55149, signal 547278/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 55199, signal 547381/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 55249, signal 547594/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 55299, signal 547720/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 55349, signal 547943/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 55399, signal 548099/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 55449, signal 548259/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 55499, signal 548422/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 55549, signal 548582/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 55599, signal 548810/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 55649, signal 548990/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 55699, signal 549136/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 55749, signal 549319/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 55799, signal 549431/641989 (executing program)
2021/06/12 10:04:56 fetching corpus: 55849, signal 549607/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 55899, signal 549729/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 55949, signal 549865/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 55999, signal 550016/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 56049, signal 550382/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 56099, signal 550518/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 56149, signal 550725/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 56199, signal 550848/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 56249, signal 551052/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 56299, signal 551169/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 56349, signal 551283/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 56399, signal 551440/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 56449, signal 551573/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 56499, signal 551713/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 56549, signal 551813/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 56599, signal 551944/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 56649, signal 552103/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 56699, signal 552201/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 56749, signal 552346/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 56799, signal 552497/641989 (executing program)
2021/06/12 10:04:57 fetching corpus: 56849, signal 552658/641989 (executing program)
2021/06/12 10:04:58 fetching corpus: 56899, signal 552844/641989 (executing program)
2021/06/12 10:04:58 fetching corpus: 56949, signal 552941/641989 (executing program)
2021/06/12 10:04:58 fetching corpus: 56999, signal 553043/641989 (executing program)
2021/06/12 10:04:58 fetching corpus: 57049, signal 553189/641989 (executing program)
2021/06/12 10:04:58 fetching corpus: 57099, signal 553329/641989 (executing program)
2021/06/12 10:04:58 fetching corpus: 57149, signal 553459/641989 (executing program)
2021/06/12 10:04:58 fetching corpus: 57199, signal 553649/641989 (executing program)
2021/06/12 10:04:58 fetching corpus: 57249, signal 553763/641989 (executing program)
2021/06/12 10:04:58 fetching corpus: 57299, signal 553880/641989 (executing program)
2021/06/12 10:04:58 fetching corpus: 57349, signal 554012/641989 (executing program)
2021/06/12 10:04:58 fetching corpus: 57399, signal 554256/641989 (executing program)
2021/06/12 10:04:58 fetching corpus: 57449, signal 554374/641989 (executing program)
2021/06/12 10:04:58 fetching corpus: 57499, signal 554499/641989 (executing program)
2021/06/12 10:04:58 fetching corpus: 57549, signal 554674/641989 (executing program)
2021/06/12 10:04:58 fetching corpus: 57599, signal 554783/641989 (executing program)
2021/06/12 10:04:58 fetching corpus: 57649, signal 554952/641989 (executing program)
2021/06/12 10:04:58 fetching corpus: 57699, signal 555152/641989 (executing program)
2021/06/12 10:04:59 fetching corpus: 57749, signal 555309/641989 (executing program)
2021/06/12 10:04:59 fetching corpus: 57799, signal 555539/641989 (executing program)
2021/06/12 10:04:59 fetching corpus: 57849, signal 555668/641989 (executing program)
2021/06/12 10:04:59 fetching corpus: 57899, signal 555808/641989 (executing program)
2021/06/12 10:04:59 fetching corpus: 57949, signal 555933/641989 (executing program)
2021/06/12 10:04:59 fetching corpus: 57999, signal 556103/641989 (executing program)
2021/06/12 10:04:59 fetching corpus: 58049, signal 556307/641989 (executing program)
2021/06/12 10:04:59 fetching corpus: 58099, signal 556444/641989 (executing program)
2021/06/12 10:04:59 fetching corpus: 58149, signal 556563/641989 (executing program)
2021/06/12 10:04:59 fetching corpus: 58199, signal 556674/641989 (executing program)
2021/06/12 10:04:59 fetching corpus: 58249, signal 556798/641989 (executing program)
2021/06/12 10:05:00 fetching corpus: 58299, signal 557048/641989 (executing program)
2021/06/12 10:05:00 fetching corpus: 58349, signal 557229/641989 (executing program)
2021/06/12 10:05:00 fetching corpus: 58399, signal 557347/641989 (executing program)
2021/06/12 10:05:00 fetching corpus: 58449, signal 557454/641989 (executing program)
2021/06/12 10:05:00 fetching corpus: 58499, signal 557585/641989 (executing program)
2021/06/12 10:05:00 fetching corpus: 58549, signal 557700/641989 (executing program)
2021/06/12 10:05:00 fetching corpus: 58599, signal 557888/641989 (executing program)
2021/06/12 10:05:00 fetching corpus: 58649, signal 558001/641989 (executing program)
2021/06/12 10:05:00 fetching corpus: 58699, signal 558218/641989 (executing program)
2021/06/12 10:05:00 fetching corpus: 58749, signal 558383/641989 (executing program)
2021/06/12 10:05:00 fetching corpus: 58799, signal 558525/641989 (executing program)
2021/06/12 10:05:00 fetching corpus: 58849, signal 558653/641989 (executing program)
2021/06/12 10:05:00 fetching corpus: 58899, signal 558777/641989 (executing program)
2021/06/12 10:05:00 fetching corpus: 58949, signal 558879/641989 (executing program)
2021/06/12 10:05:00 fetching corpus: 58999, signal 559069/641989 (executing program)
2021/06/12 10:05:00 fetching corpus: 59049, signal 559193/641989 (executing program)
2021/06/12 10:05:00 fetching corpus: 59099, signal 559295/641989 (executing program)
2021/06/12 10:05:00 fetching corpus: 59149, signal 559556/641989 (executing program)
2021/06/12 10:05:00 fetching corpus: 59199, signal 559681/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 59249, signal 559781/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 59299, signal 559918/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 59349, signal 560036/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 59399, signal 560190/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 59449, signal 560388/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 59499, signal 560558/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 59549, signal 560666/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 59599, signal 560892/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 59649, signal 561019/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 59699, signal 561164/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 59749, signal 561390/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 59799, signal 561505/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 59849, signal 561728/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 59899, signal 561851/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 59949, signal 561969/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 59999, signal 562116/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 60049, signal 562259/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 60099, signal 562429/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 60149, signal 562591/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 60199, signal 562777/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 60249, signal 562967/641989 (executing program)
2021/06/12 10:05:01 fetching corpus: 60299, signal 563102/641989 (executing program)
2021/06/12 10:05:02 fetching corpus: 60349, signal 563305/641989 (executing program)
2021/06/12 10:05:02 fetching corpus: 60399, signal 563426/641989 (executing program)
2021/06/12 10:05:02 fetching corpus: 60449, signal 563580/641989 (executing program)
2021/06/12 10:05:02 fetching corpus: 60499, signal 563711/641989 (executing program)
2021/06/12 10:05:02 fetching corpus: 60549, signal 563832/641989 (executing program)
2021/06/12 10:05:02 fetching corpus: 60599, signal 564051/641989 (executing program)
2021/06/12 10:05:02 fetching corpus: 60649, signal 564165/641989 (executing program)
2021/06/12 10:05:02 fetching corpus: 60699, signal 564281/641989 (executing program)
2021/06/12 10:05:02 fetching corpus: 60749, signal 564450/641989 (executing program)
2021/06/12 10:05:02 fetching corpus: 60755, signal 564468/641989 (executing program)
2021/06/12 10:05:02 fetching corpus: 60755, signal 564468/641989 (executing program)
2021/06/12 10:05:04 starting 6 fuzzer processes
10:05:10 executing program 0:
socketpair(0x28, 0x0, 0x0, &(0x7f0000000180))

[  230.918612][ T8252] IPVS: ftp: loaded support on port[0] = 21
[  231.446563][ T8252] chnl_net:caif_netlink_parms(): no params data found
[  231.587610][ T8252] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.595696][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.606379][ T8252] device bridge_slave_0 entered promiscuous mode
[  231.620431][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.628677][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.638614][ T8252] device bridge_slave_1 entered promiscuous mode
[  231.687101][ T8252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.705079][ T8252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.753830][ T8252] team0: Port device team_slave_0 added
[  231.767271][ T8252] team0: Port device team_slave_1 added
[  231.810288][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.817981][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.844665][ T8252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.860798][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.868324][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.895540][ T8252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.962688][ T8252] device hsr_slave_0 entered promiscuous mode
[  231.975631][ T8252] device hsr_slave_1 entered promiscuous mode
[  232.272962][ T8252] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  232.295321][ T8252] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  232.334566][ T8252] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  232.381668][ T8252] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  232.697987][ T8252] 8021q: adding VLAN 0 to HW filter on device bond0
[  232.734288][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  232.743674][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  232.764626][ T8252] 8021q: adding VLAN 0 to HW filter on device team0
[  232.786490][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  232.797215][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  232.808050][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.815910][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.863235][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  232.872966][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  232.883174][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  232.894009][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.901449][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.904223][    T7] Bluetooth: hci0: command 0x0409 tx timeout
[  232.910736][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  232.926336][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  233.010784][ T8252] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  233.022491][ T8252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  233.056813][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  233.067836][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  233.078788][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  233.089473][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  233.100202][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  233.110473][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  233.121021][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  233.131084][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  233.143710][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  233.154270][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  233.196098][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  233.204189][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  233.241677][ T8252] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.306309][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  233.316423][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  233.375740][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  233.385746][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  233.410180][ T8252] device veth0_vlan entered promiscuous mode
[  233.420011][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  233.429689][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  233.462981][ T8252] device veth1_vlan entered promiscuous mode
[  233.544503][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  233.554676][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  233.576046][ T8252] device veth0_macvtap entered promiscuous mode
[  233.601033][ T8252] device veth1_macvtap entered promiscuous mode
[  233.664281][ T8252] batman_adv: batadv0: Interface activated: batadv_slave_0
[  233.672444][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  233.682460][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  233.692370][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  233.702652][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  233.735744][ T8252] batman_adv: batadv0: Interface activated: batadv_slave_1
[  233.745571][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  233.755936][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  233.780551][ T8252] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  233.791493][ T8252] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  233.800633][ T8252] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  233.809805][ T8252] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  234.105968][ T1595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.114101][ T1595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.122690][ T1977] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  234.277889][  T795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  234.286774][  T795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  234.300205][    T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
10:05:15 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x40)

10:05:15 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "028d79", 0x48, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "49fc92a67ccb2f84a3e0fb12c990184cd1f9422af7214f4d", "bf833a205da6519d3527edca0c77e0193d76cb6749b13e549c6e8713a9992b56"}}}}}}}, 0x0)

10:05:15 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "028d79", 0x48, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "49fc92a67ccb2f84a3e0fb12c990184cd1f9422af7214f4d", "bf833a205da6519d3527edca0c77e0193d76cb6749b13e549c6e8713a9992b56"}}}}}}}, 0x0)

[  234.984357][    T5] Bluetooth: hci0: command 0x041b tx timeout
10:05:16 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "028d79", 0x48, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "49fc92a67ccb2f84a3e0fb12c990184cd1f9422af7214f4d", "bf833a205da6519d3527edca0c77e0193d76cb6749b13e549c6e8713a9992b56"}}}}}}}, 0x0)

10:05:16 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x7e, &(0x7f0000000140)={@broadcast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "028d79", 0x48, 0x11, 0x0, @private2, @mcast2, {[], {0x0, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "49fc92a67ccb2f84a3e0fb12c990184cd1f9422af7214f4d", "bf833a205da6519d3527edca0c77e0193d76cb6749b13e549c6e8713a9992b56"}}}}}}}, 0x0)

10:05:16 executing program 0:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280))

10:05:16 executing program 0:
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x3}, {}]}]}, {0x0, [0x0, 0x0, 0x5f, 0x5f]}}, &(0x7f00000001c0)=""/240, 0x3a, 0xf0, 0x1}, 0x20)

10:05:17 executing program 0:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10)
sendmmsg(r0, &(0x7f0000001e00), 0x3fffffffffffe36, 0x0)

[  237.062282][    T5] Bluetooth: hci0: command 0x040f tx timeout
10:05:18 executing program 0:
syz_mount_image$erofs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB='fault_injection=0x0000040'])
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x5, &(0x7f0000000200)=[{&(0x7f0000010000)="1020f5f201000b0009000000030000000c000000090000000100000001000000000000000040000000000000180000001f0000000200000002000000020000000100000018000000000200000002000000060000000a0000000e000000100000030000000100000002", 0x69, 0x400}, {&(0x7f0000010a00)="4379d52700000000001000000000000002000000000000000d0000001000000012000000170000001600000015000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000140000000100000000000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xa6, 0x200000}, {&(0x7f0000010b00)="000000000000000000000000000000000000f4ff08001b0860f9f37300000000", 0x20, 0x200fe0}, {&(0x7f0000011600)="00000000000000000000000000000000000000000000000000000001000000004379d52700000000001000000000000002000000000000000d0000001000000012000000170000001600000015000000ffffffffffffffffffffffffffffffffffffffff01000000000000000000000000000000140000000100000000000000ffffffffffffffffffffffffffffffffffffffff010000000000000000000000000000008501000006000000010000000100000001000000040000004000000040000000fc0f", 0xc6, 0x204fe0}, {&(0x7f0000011700)="000000000000000000000000000000000000000000000000000000002964039d", 0x20, 0x205fe0}], 0x0, &(0x7f00000015c0)=ANY=[])

[  237.423184][ T8523] loop0: detected capacity change from 0 to 8287
[  237.464744][ T8523] F2FS-fs (loop0): Magic Mismatch, valid(0xf2f52010) - read(0x0)
[  237.473164][ T8523] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  237.517338][ T8523] F2FS-fs (loop0): invalid crc value
[  237.539222][ T8523] F2FS-fs (loop0): invalid crc_offset: 0
[  237.546157][ T8523] F2FS-fs (loop0): Failed to get valid F2FS checkpoint
10:05:18 executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
lseek(r0, 0xffff, 0x0)
io_setup(0x81, &(0x7f0000000100))
r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x402c5828, &(0x7f0000000040)={0x0, 0x0, 0x4002, 0xb030})
write$FUSE_ATTR(r0, &(0x7f0000000180)={0x78}, 0x78)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r2, 0x0)
fcntl$setstatus(r0, 0x4, 0x6800)
io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r0, &(0x7f0000000000), 0x0, 0x1000000}])
r3 = fcntl$dupfd(r0, 0x0, r2)
fsync(r3)
write$P9_RREADDIR(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b0057a644dd0000000000"], 0xb)
read$FUSE(0xffffffffffffffff, &(0x7f0000004340)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000004200)={0x50, 0xfffffffffffffffe, r4}, 0x50)
write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x0, r4}, 0x10)

10:05:19 executing program 0:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xa8}}, 0x0)

10:05:19 executing program 0:
ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000080))
ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000000))
openat$dsp1(0xffffff9c, &(0x7f00000000c0), 0x5a1800, 0x0)
ioctl$SNDCTL_DSP_GETISPACE(0xffffffffffffffff, 0x8010500d, &(0x7f0000000040))

10:05:20 executing program 0:
r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='/dev/input/mouse#\x00', &(0x7f0000000200)='\xeemL\x89\xa9a\xd0\xcc\x1f\xe0\xec\x10$\xac`h&c\xe9\x0f\x90\x95.K\xc2\xff\x9f', 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000080), 0x7, 0x400000)
r2 = fsmount(r1, 0x0, 0x80)
r3 = fsopen(&(0x7f0000000240)='ocfs2_dlmfs\x00', 0x1)
write$snapshot(r2, &(0x7f0000000300)="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"/376, 0x178)
fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000100)='\x00\xfcK\xe5\x9e\x96\x11\x16N\xb4_\xd7\xc0\xaa\xcct;\b\xe6\xb3n7\xad\xa6W\xe1\xff.\x1b\xeeH\x8a\xcfC\xd0\xc8\\7\xb8y\x9f\x1b\xdc\x19\xbcb\xdd\xb2\xf0\xfd\x00X*\x85\x95\xd4\x1e9D\xf1\xf8]\f\xfd\xc1\xe5\x17\xe5\"%\',\xaf\xf6jC\xe0!#\xbd\x04\x81\xfa\xff\xff\xff\xffx*\r-\x9f\xbb\x94\x88\xb1n\xcf0\xa9\x10\x19\xc9sF\x03\xe9\xbd\xba\x90\xc4\xb9\xdb\xb9V-ZH\x8a\x9e\xc0\xeal\x8e\xeab,\xa2\xb3\xc1\x9bCy6\x99\x17(\x9bIK\fC\x83\x8d\xe9\xe6\x18\x87\\\xfd\xac.\xad\x97\xfa8\x9dN\xc6\x8e@\xd2\x9e\x93IM\xd0\xf5\xf0\x9b\xe6\xdb\x97\x96\x12\x037rc\x04\xc8\x9fQX$\xc2u\xbb=\xc4\xd3\xb2M\x9f\'-S\x96J\n\x9fP\x04\x99\xe6\xa1\xcfn\x84A\xdb\x8e\x0f\x15\x9c\xd4\x80dl\x02u\xc2*#\xc8\x81\xf0\xd3\x1e\xa9[\xc17&\xfb\f', &(0x7f0000000000)='\xeemL\x89\xa9a\xd0\xcc\x1f\xe0\xec\x10$\xac`h&c\xe9\x0f\x90\x95.K\xc2\xff\x9f', 0x0)

[  239.142476][    T7] Bluetooth: hci0: command 0x0419 tx timeout
10:05:20 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r4, r1)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  239.752744][ T8549] binder: 8548:8549 unknown command 0
[  239.758455][ T8549] binder: 8548:8549 ioctl c0306201 20000200 returned -22
[  239.813778][ T8549] binder: 8548:8549 ioctl c0306201 200000c0 returned -14
[  239.848684][ T8552] binder: 8548:8552 unknown command 0
[  239.854622][ T8552] binder: 8548:8552 ioctl c0306201 20000200 returned -22
[  239.875245][ T8549] binder: 8548:8549 ioctl c0306201 200000c0 returned -14
10:05:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r4, r1)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  240.038909][ T8555] binder: 8554:8555 unknown command 0
[  240.045048][ T8555] binder: 8554:8555 ioctl c0306201 20000200 returned -22
[  240.057789][ T8555] binder: 8554:8555 ioctl c0306201 200000c0 returned -14
10:05:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r4, r1)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  240.220331][ T8557] binder: 8556:8557 unknown command 0
[  240.226589][ T8557] binder: 8556:8557 ioctl c0306201 20000200 returned -22
[  240.238260][ T8557] binder: 8556:8557 ioctl c0306201 200000c0 returned -14
10:05:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r4, r1)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  240.518231][ T8561] binder: 8560:8561 unknown command 0
[  240.524196][ T8561] binder: 8560:8561 ioctl c0306201 20000200 returned -22
[  240.558158][ T8561] binder: 8560:8561 ioctl c0306201 200000c0 returned -14
10:05:21 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r4, r1)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  240.853502][ T8564] binder: 8563:8564 unknown command 0
[  240.859849][ T8564] binder: 8563:8564 ioctl c0306201 20000200 returned -22
[  240.892362][ T8564] binder: 8563:8564 ioctl c0306201 200000c0 returned -14
10:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r4, r1)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  241.178267][ T8568] binder: 8567:8568 unknown command 0
[  241.184365][ T8568] binder: 8567:8568 ioctl c0306201 20000200 returned -22
[  241.197758][ T8568] binder: 8567:8568 ioctl c0306201 200000c0 returned -14
10:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r4, r1)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  241.369678][ T8570] binder: 8569:8570 unknown command 0
[  241.375775][ T8570] binder: 8569:8570 ioctl c0306201 20000200 returned -22
[  241.388023][ T8570] binder: 8569:8570 ioctl c0306201 200000c0 returned -14
10:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r4, r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  241.636650][ T8574] binder: 8572:8574 unknown command 0
[  241.642583][ T8574] binder: 8572:8574 ioctl c0306201 20000200 returned -22
10:05:22 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r4, r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  241.995635][ T8577] binder: 8576:8577 unknown command 0
[  242.001439][ T8577] binder: 8576:8577 ioctl c0306201 20000200 returned -22
10:05:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r4, r1)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  242.315683][ T8580] binder: 8579:8580 unknown command 0
[  242.321309][ T8580] binder: 8579:8580 ioctl c0306201 20000200 returned -22
10:05:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  242.643818][ T8584] binder: 8583:8584 unknown command 0
[  242.649447][ T8584] binder: 8583:8584 ioctl c0306201 20000200 returned -22
[  242.684296][ T8584] binder: 8583:8584 ioctl c0306201 200000c0 returned -14
10:05:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  243.021464][ T8587] binder: 8586:8587 unknown command 0
[  243.027249][ T8587] binder: 8586:8587 ioctl c0306201 20000200 returned -22
[  243.055626][ T8587] binder: 8586:8587 ioctl c0306201 200000c0 returned -14
10:05:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  243.325923][ T8591] binder: 8590:8591 unknown command 0
[  243.331811][ T8591] binder: 8590:8591 ioctl c0306201 20000200 returned -22
[  243.341596][ T8591] binder: 8590:8591 ioctl c0306201 200000c0 returned -14
10:05:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
dup2(r4, r1)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:05:24 executing program 1:
lseek(0xffffffffffffffff, 0x40, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x7ff, 0xef]}, 0x8, 0x800)
sendmmsg(r0, &(0x7f0000001780)=[{{&(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x4, 0x1, 0x3, {0xa, 0x4e24, 0x8000, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fff}}}, 0x80, &(0x7f0000000140)=[{&(0x7f00000000c0)="7bffddf2e1b698758befe7f79e4dfc0b6e39d471b7835808ba9ef4f022b9242ef901b91554fe4cced7dcd1fd133e0a4eb0125979e2f0bc4dedc6f7cec048db5048098c2cc9e47b7e0091cd5b298cb2ebc58e6f78466d3b1a4039859106b7c9304189f6a50dcb0d4244b0b324cac598c3", 0x70}], 0x1, &(0x7f0000000180)=[{0x5c, 0x113, 0x40000, "5d782689fdd596462fac8a70c9c9befea716eb5d7b6c12f0a2afeef1870e1913b260b58042d4a7c407065418433bc8a7fa27e864e704d5f6ee8689ac85dfc747a0e129c9e820805de8ef09a4ec79"}, {0x30, 0x109, 0x2, "28bd6c9c1ddc808dda4c4094b31defbaa215910828a0516c52815d880a89e58a9fe131ab"}, {0x6c, 0x10e, 0x3ff, "5dc2c7a544de35f9a44503a075d2d5a33852044fb142739dedb37db2f704e949b360ce31c40a0843e49b9aa6c191101bfb2720bb45ce7079950ae5ac62dfd0b0096d778523f7f8c5c8dac95658ad9b5ef80a2fd8623e3deb087561fa58803d"}, {0xd8, 0x113, 0x7ff, "0f0923676105af521c6392eddde0ecf2e148efca75093366e46b718109b2dfdce80d1b584fb40305668a052d30903c4e0622d6ed4a354fa875feab8be1091b45ebe150216a9b44313017428b19f10b6fee5d37649da8392608f78253eb07cb420b5ebb9130d6e27fdeb410437ef0c9e354c5d144b71d9fa522a2eeafc05cba72d8f5ab2c3852b7ffaade8884905389b85554dc8d81423321869ee548b3090574bf3416a5e82d806b34f2af3bae4249739a90e26c1d0af70c2addff9cbacf8199c220c600ffed37c8f093e46b"}], 0x1d0}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000000380)="4b644d8e24170ed604672a0d5822f35238f5929f76aef6c79373f7a3bbbb80eece398a46efa87dd46dad76c0792ce552603bdb42bd5c647d8af9d39c58f0cb5cd7fb433302c29126b24200375acfe39e95dd906dd7f3aebfbbb98b95dfa9c0648b1be91c102c921876cbbb9f0982bc413c1626d0c6565f3f2eed14d7af2911f82495d21dc00ff6c9db4eafb5263669e4616146c2", 0x94}, {&(0x7f0000000440)="eb4ed0b1642d543fe0f401c1dc605349a7720fea94dc275fc1d8c2e7670c912d30bc016121123ab5ad9c70343ea7cf42e6a72f7fb83ceda05a29d27b07cbdfa665662ce89433ce5cdfb5748dd8362458ae944b4e7c0afbf07d060794da769329075d8c76060f164cdf1081a2147e40f190e451bd2dfbd930307ad6042fc0d0a26a1537f5d77dc2d1d0b4975355661bf3d4fd8c173da65c3052c47172dd4a3e5abf480b9a2a3d2b24ea3caaee3c11ee216f85cede6f36feb15c6cf3f66a53be0860972cd80a1c0631c36e46e7fee45c16a6b88182655f36026e00ea13f44be88fd15561d3300104da3c7f8ae3617a1eb25f11112fb0a4bf", 0xf7}, {&(0x7f0000000540)="869a8170dc7289b6b82f9ba7087f58afd66a7a286784686d5783914016625b3943b6c4e2c7dd4ed5a2a026e3e24935ae22f7370f818fd8bb9d0b7d66fd1c06ce070b7970d8e78571c0218a272a4ad7bec77bb42ed4d729b95134b4d73e2d18", 0x5f}, {&(0x7f00000005c0)="6f5715d968f1123b175f5fc1c1c2be243480983618b61ee93079e80cf80c48d45913291e791575a546e6512d0dbefb193850476e88b2c841fa4b3df7e8759dc5d4c09a0da30fabcf60b1", 0x4a}, {&(0x7f0000000640)="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", 0x1000}], 0x5, &(0x7f0000001680)=[{0xe4, 0x88, 0x101, "10f1937b3c6cd2cb7ad2c550562cc73c158b418b336caac5f5ea71711b3f1767606ee8def3532fef80e2d663515b18e5cc7420e8076931d7dc9bd5d9f2dc6f81559dbad6b7c91ec68347ae801c912d6b481f4692eff790c9be9b22d35f43cf9a0e24552a8df0066ca67a3f1c635ca33feef19d4cf74a539fe20eb14252f36d13b3cd3c86defde21549e013cd94bae6c0d8403a4b2a367f0f7897cdaaa8df8c21ff55c9897fc1446f0127ce93f70f50321d11f476bb35c6fc4d00792545a6ceffd5247dc2aea28c9723ccf104bf45e71dd51c7ac4a2e0ecc2"}], 0xe4}}], 0x2, 0x28084819)
r1 = dup(r0)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000017c0)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}})
madvise(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x64)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
ioctl$BTRFS_IOC_RESIZE(r0, 0x50009403, &(0x7f0000001800)={{r2}, {@void, @actul_num={@val=0x2b, 0x1, 0x67}}})
r3 = eventfd2(0x9, 0x80000)
close(r3)
r4 = openat(r0, &(0x7f0000001840)='./file0\x00', 0x880, 0x101)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001940)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)=@deltfilter={0x3c, 0x2d, 0x20, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x5, 0x8}, {0x6, 0x6}}, [@TCA_CHAIN={0x8, 0xb, 0x40}, @TCA_CHAIN={0x8, 0xb, 0xbf}, @TCA_RATE={0x6, 0x5, {0x89, 0xcb}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48880}, 0x20000041)
ioctl$SNDCTL_DSP_GETODELAY(r4, 0x80045017, &(0x7f0000001980))
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f00000030c0)={'team0\x00', <r5=>0x0})
sendmsg$nl_route(r1, &(0x7f00000031c0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000003180)={&(0x7f0000003100)=@ipv6_getaddrlabel={0x70, 0x4a, 0x400, 0x70bd2d, 0x25dfdbfd, {0xa, 0x0, 0x38, 0x0, r5, 0xc98}, [@IFAL_ADDRESS={0x14, 0x1, @empty}, @IFAL_LABEL={0x8}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @loopback}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x0)
syz_mount_image$affs(&(0x7f0000003200), &(0x7f0000003240)='./file0/file0\x00', 0x10001, 0x2, &(0x7f0000003400)=[{&(0x7f0000003280)="e158d98e2afb62ec7531adc84f27ba840af23d33c0d4b24f1941340da8df4ece29cf341e370637c75e753ba02b551af0db090261c54b64864b6002d9d1e07b3b6fb1f327a2d2f9784355e91b0f2918515f46fe914582569bde70ed1068b136dda459e2cb899e79c5ce43bb075a84eecc68", 0x71, 0x352ed8e8}, {&(0x7f0000003300)="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", 0xfc, 0x4}], 0x9002, &(0x7f0000003440)={[{'team0\x00'}, {'team0\x00'}, {'\x00'}, {'\x00'}, {'{%'}, {'\xdf*/'}, {'team0\x00'}, {'\'@-.^\\'}], [{@appraise_type}]})
eventfd(0x800)
ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000003480)=<r6=>0x0)
fcntl$setown(0xffffffffffffffff, 0x8, r6)
ioctl$EXT4_IOC_GROUP_EXTEND(r3, 0x40046607, &(0x7f00000034c0))

10:05:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
dup2(r4, r1)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:05:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
dup2(r4, r1)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:05:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(0xffffffffffffffff, r1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:05:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(0xffffffffffffffff, r1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:05:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(0xffffffffffffffff, r1)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:05:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r4, r1)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  245.634903][ T8615] binder: 8614:8615 unknown command 0
[  245.640538][ T8615] binder: 8614:8615 ioctl c0306201 20000200 returned -22
[  246.024954][ T8605] IPVS: ftp: loaded support on port[0] = 21
[  246.495478][ T8605] chnl_net:caif_netlink_parms(): no params data found
10:05:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r4, r1)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  246.749122][ T8751] binder: 8746:8751 unknown command 0
[  246.754866][ T8751] binder: 8746:8751 ioctl c0306201 20000200 returned -22
[  246.778117][ T8605] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.786256][ T8605] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.796161][ T8605] device bridge_slave_0 entered promiscuous mode
[  246.816332][ T8605] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.828402][ T8605] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.838435][ T8605] device bridge_slave_1 entered promiscuous mode
[  246.901526][ T8605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.920108][ T8605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.974389][ T8605] team0: Port device team_slave_0 added
[  246.989592][ T8605] team0: Port device team_slave_1 added
[  247.040295][ T8605] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.047516][ T8605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.074108][ T8605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.093897][ T8605] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.101245][ T8605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.128011][ T8605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.205893][ T8605] device hsr_slave_0 entered promiscuous mode
[  247.221118][ T8605] device hsr_slave_1 entered promiscuous mode
[  247.233729][ T8605] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  247.241905][ T8605] Cannot create hsr debugfs directory
[  247.579862][ T8605] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  247.598448][ T8605] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  247.637332][ T8605] netdevsim netdevsim1 netdevsim2: renamed from eth2
10:05:28 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
r2 = open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r3, 0x811, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x80}, @void, @val={0xc, 0x99, {0x40, 0x57}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x45}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x8, 0x17}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004085}, 0x40800)
r4 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r4, r1)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  247.690242][ T8605] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  247.943254][ T1979] Bluetooth: hci1: command 0x0409 tx timeout
[  247.945136][ T8839] binder: 8838:8839 unknown command 0
[  247.955066][ T8839] binder: 8838:8839 ioctl c0306201 20000200 returned -22
[  248.258779][ T8605] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.306828][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  248.317391][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  248.344249][ T8605] 8021q: adding VLAN 0 to HW filter on device team0
[  248.370613][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  248.381078][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  248.392150][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.399930][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.413646][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  248.433671][ T1977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  248.443852][ T1977] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  248.453574][ T1977] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.461040][ T1977] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.535025][ T1977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  248.546523][ T1977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  248.557735][ T1977] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  248.568617][ T1977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  248.579235][ T1977] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  248.589944][ T1977] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  248.616199][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  248.626942][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  248.636948][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  248.663594][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  248.673623][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  248.697217][ T8605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  248.774482][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  248.782515][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  248.823221][ T8605] 8021q: adding VLAN 0 to HW filter on device batadv0
10:05:29 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  248.897668][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  248.908176][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  248.993792][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  249.004180][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  249.044145][ T8605] device veth0_vlan entered promiscuous mode
[  249.053537][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  249.063507][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  249.133178][ T8605] device veth1_vlan entered promiscuous mode
[  249.147870][ T8844] binder: 8843:8844 unknown command 0
[  249.153776][ T8844] binder: 8843:8844 ioctl c0306201 20000200 returned -22
[  249.177164][ T8844] binder: 8843:8844 ioctl c0306201 200000c0 returned -14
10:05:30 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
open(&(0x7f0000000240)='./file0\x00', 0x420142, 0x58)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  249.299490][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  249.309800][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  249.319573][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  249.329884][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  249.362943][ T8605] device veth0_macvtap entered promiscuous mode
[  249.403547][ T8605] device veth1_macvtap entered promiscuous mode
[  249.435575][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  249.446329][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  249.566423][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  249.577915][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.592128][ T8605] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.600554][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  249.612224][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  249.648258][ T8848] binder: 8847:8848 unknown command 0
[  249.654029][ T8848] binder: 8847:8848 ioctl c0306201 20000200 returned -22
[  249.680874][ T8848] binder: 8847:8848 ioctl c0306201 200000c0 returned -14
[  249.691652][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  249.702802][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.716926][ T8605] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.732770][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  249.743418][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  249.775466][ T8605] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.785924][ T8605] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.795175][ T8605] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.804433][ T8605] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
10:05:30 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  250.035386][ T4652] Bluetooth: hci1: command 0x041b tx timeout
[  250.326792][  T795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.335698][  T795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.347716][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  250.357202][ T8860] binder: 8859:8860 unknown command 0
[  250.363645][ T8860] binder: 8859:8860 ioctl c0306201 20000200 returned -22
[  250.421218][ T8860] binder: 8859:8860 ioctl c0306201 200000c0 returned -14
[  250.495029][  T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.503383][  T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.527155][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  250.758493][ T8872] loop1: detected capacity change from 0 to 264192
10:05:31 executing program 1:
ioctl$NBD_SET_TIMEOUT(0xffffffffffffffff, 0xab09, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="000000000000000028001280110001006272696467655f736c6176650000000010000580050001000000000004001800"], 0x48}}, 0x0)

10:05:31 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  251.025618][ T8882] binder: 8880:8882 unknown command 0
[  251.031259][ T8882] binder: 8880:8882 ioctl c0306201 20000200 returned -22
[  251.240043][ T8885] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
10:05:32 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="71e67a111fde54fe46b904832c8fff73", 0x10)
r2 = accept4$alg(r1, 0x0, 0x0, 0x0)
r3 = dup(r2)
recvmmsg(r3, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000400)=""/188, 0xbc}], 0x1}}], 0x1, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[], 0x24}}, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000008, 0x110, r0, 0x26066000)

10:05:33 executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = openat$mice(0xffffff9c, &(0x7f00000000c0), 0x10000)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000140)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10000, 0x0, 0xff, 0xf, 0x2c7, 0xa200}, 0x20)
r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r3, 0x0)
preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000208000/0x2000)=nil, 0x2000, 0x8, 0x10010, 0xffffffffffffffff, 0x0)
setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x4, 0x4)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @local, 0x7}, 0x1c)
bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x21, 0x0}, 0x1}, 0x1c)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
socket$netlink(0x10, 0x3, 0x8000000004)

10:05:33 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  252.105383][ T8481] Bluetooth: hci1: command 0x040f tx timeout
[  252.192341][ T8898] binder: 8896:8898 unknown command 0
[  252.198103][ T8898] binder: 8896:8898 ioctl c0306201 20000200 returned -22
10:05:33 executing program 1:
perf_event_open(&(0x7f0000000580)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000480)='configfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
mkdir(&(0x7f0000000540)='./file0\x00', 0x0)
r0 = creat(&(0x7f0000000180)='./bus/file0\x00', 0x0)
perf_event_open(&(0x7f0000000900)={0x0, 0x80, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2, 0x4a040, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x92e, 0xffff, 0x0, 0x7, 0x0, 0xdc3}, 0x0, 0x1, 0xffffffffffffffff, 0x0)
sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000006c0)=ANY=[@ANYBLOB="5dde834bc57be149ca26f8f0e2d3d45592646a0d23db65d8777ffc0d3dce7828a92652a41388db8a2e459e9d12963747c80b56e55d2fd22b340d18b1698d19968d", @ANYBLOB="000126bd7000fcdbdf25460000000e00010003000000000000006d0000000f0002006e657464657673696d30000008008e00000000000c008f0002000000000000000c00900000000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008e00020000000c008f0000000000000000000c0090007b000000000000000e0001006e657464657673696d0000000f"], 0x150}}, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='upperdir=./bus,workdir=./file1,lowerdir=./file0'])
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, <r2=>0x0}, &(0x7f0000000400)=0xc)
mount$9p_fd(0x0, &(0x7f0000000000)='./file2\x00', &(0x7f0000000100), 0x1001000, &(0x7f0000000980)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@dfltgid={'dfltgid', 0x3d, r2}}, {@mmap}, {@cachetag}, {@access_any}, {@noextend}, {@version_u}, {@privport}], [{@fowner_eq={'fowner', 0x3d, 0xee01}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x37, 0x32, 0x33, 0x37, 0x34, 0x38, 0x35], 0x2d, [0x63, 0x34, 0x35, 0x37], 0x2d, [0x66, 0x33, 0x37, 0x61], 0x2d, [0x64, 0x51, 0x32, 0x64], 0x2d, [0x66, 0x6d9c4d533e6eace0, 0x38, 0x64, 0x66, 0x31, 0x66, 0x35]}}}, {@smackfstransmute={'smackfstransmute', 0x3d, '/'}}, {@dont_appraise}, {@fowner_gt}]}})
mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000004c0)='exofs\x00', 0xa00000, &(0x7f0000000500)='netdevsim\x00')
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000600)='overlay\x00\xc4\x9b\xf0\xae#\xdc\xb1,\xff\xffc\xcbP\xfdG.[bv=\xdaU\xfe\xaf\xcb\xec`\xa6\xcd\xfa6\xbd\x9fG\xd8\xea\xb5\x89cm@!=D\xac\xd9\xae\x91\xcd*\xf9\xef_\xd57')
lsetxattr$security_capability(&(0x7f0000000680)='./bus/file0\x00', 0x0, &(0x7f0000000440)=@v3={0x3000000, [{0x0, 0x2}]}, 0x18, 0x0)
chdir(&(0x7f00000001c0)='./bus\x00')
truncate(&(0x7f0000000340)='./bus/file0\x00', 0x0)

[  252.594089][    C0] hrtimer: interrupt took 130192 ns
[  252.813028][ T8904] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  253.023826][ T8909] overlayfs: 'file0' not a directory
10:05:34 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
getpeername(r0, &(0x7f0000000140)=@alg, &(0x7f00000001c0)=0x80)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  253.051219][ T8907] overlayfs: filesystem on './bus' not supported as upperdir
[  253.287285][ T8912] binder: 8911:8912 unknown command 0
[  253.293267][ T8912] binder: 8911:8912 ioctl c0306201 20000200 returned -22
10:05:34 executing program 1:
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x0, 0x2, &(0x7f0000000240)=[{&(0x7f0000000080)="cefaad1b", 0x4}, {0x0, 0x0, 0x1fc}], 0x808000, &(0x7f0000000180)=ANY=[])
pipe(&(0x7f00000000c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="73793af285cdc89ae56ef3d345cfab5d544075770dc126bb86d6f30494d258d8cf32a0ea5151fb8bd743ed0ebd32b3740a3da1d2f6aa04620b283c858422d03a64b2814d63e4fabc7d7e73d52e17b0d4fe4d1a8ceeb8606a55a2650ceedae254b35179f59f6f3a055d72f59af3d0dd37472b628fb9b8375b9967f50224da4d20ee58e214d9934680ef10e6611943a446695fd61efb984bcf59749bcdc90161b5b4002d6427d54062a6cf165215de4c45126c05a3bd411f9cc71b8307d0cb24758a8dfbbff5bd74c8299009dd2ae8bb2b36586b606e6667dac12c5acee3"], 0x4)
tee(r0, r1, 0x6, 0x0)
mknodat(r0, &(0x7f0000000040)='./file0\x00', 0x200, 0xffffffff)

[  253.804402][ T8917] loop1: detected capacity change from 0 to 1
[  253.833891][ T8917] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop1
10:05:35 executing program 1:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f0000000300)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f00000000000004", 0x1b, 0x8c80}], 0x0, &(0x7f0000013800))
creat(&(0x7f0000000040)='./file0\x00', 0x1)

10:05:35 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x23, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r2, r1)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  254.185098][ T8481] Bluetooth: hci1: command 0x0419 tx timeout
[  254.320183][ T8925] loop1: detected capacity change from 0 to 512
[  254.377775][ T8925] EXT4-fs (loop1): corrupt root inode, run e2fsck
[  254.385318][ T8925] EXT4-fs (loop1): mount failed
[  254.479716][ T8925] loop1: detected capacity change from 0 to 512
[  254.505584][ T8932] binder: 8930:8932 unknown command 0
[  254.511423][ T8932] binder: 8930:8932 ioctl c0306201 20000200 returned -22
[  254.522573][ T8925] EXT4-fs (loop1): corrupt root inode, run e2fsck
[  254.529429][ T8925] EXT4-fs (loop1): mount failed
[  254.569776][ T8932] binder: 8930:8932 ioctl c0306201 200000c0 returned -14
10:05:35 executing program 1:
connect$qrtr(0xffffffffffffffff, &(0x7f0000000000)={0x2a, 0xffffffff, 0x7ffe}, 0xc)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
pipe(&(0x7f0000000080)={<r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
splice(r1, 0x0, r3, 0x0, 0xf7, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f0000000040)=0x76, 0x4)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='dctcp\x00', 0x6)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x8003, 0x0, 0x7, 0x200}]}, 0x8)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967480a41ba7860ac5cf65ac618ded8454895abeaf4b4836af922b3f1e0b02bd60da03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

10:05:35 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  255.034367][ T8944] binder: 8942:8944 unknown command 0
[  255.040029][ T8944] binder: 8942:8944 ioctl c0306201 20000200 returned -22
[  255.083150][ T8944] binder: 8942:8944 ioctl c0306201 200000c0 returned -14
10:05:36 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  255.472769][ T8950] binder: 8948:8950 unknown command 0
[  255.478477][ T8950] binder: 8948:8950 ioctl c0306201 20000200 returned -22
[  255.517304][ T8950] binder: 8948:8950 ioctl c0306201 200000c0 returned -14
10:05:36 executing program 0:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:05:37 executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
getpid()
r1 = getpid()
sched_setaffinity(r1, 0x8, &(0x7f0000000500)=0x9)
ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180))
ptrace$getregset(0x4204, 0x0, 0x200, &(0x7f0000000040)={&(0x7f0000002d40)=""/150, 0x96})
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000044882, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r3=>0x0)
pipe(&(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
close(r6)
write$binfmt_misc(r5, &(0x7f00000001c0)={'syz0'}, 0x4)
tee(r4, r5, 0x6, 0x0)
io_submit(r3, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a000000, 0x2759, 0xd, 0x0, 0x0, r2, &(0x7f0000000000)="98", 0x1, 0x0, 0x0, 0x0, r5}])
preadv(r2, &(0x7f0000002800)=[{0x0}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f00000005c0)=""/8, 0x8}, {&(0x7f0000002680)=""/242, 0xf2}, {0x0}, {&(0x7f0000002780)=""/113, 0x71}], 0x6, 0x0, 0x8)

[  256.054879][ T8953] binder: 8952:8953 unknown command 0
[  256.060494][ T8953] binder: 8952:8953 ioctl c0306201 20000200 returned -22
10:05:37 executing program 1:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r1, 0x5000943f, &(0x7f0000000080)={{r0}, 0x0, 0x10, @unused=[0x1ff, 0x7, 0x1, 0x483], @subvolid=0x8})
ioctl$KVM_CREATE_VM(r0, 0xae03, 0x25)

10:05:37 executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff)
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382)
r1 = memfd_create(&(0x7f0000000240)='.^\xc5', 0x0)
pwritev(r1, &(0x7f0000000540)=[{&(0x7f0000000840)="1688", 0x2}], 0x1, 0x81805, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, 0x0, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1)
sendfile(r0, r0, 0x0, 0x24002da8)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, {}, 0x0, {}, 0x0, 0x0, 0x0, 0x0, "5b6e292720ad1c122716751da9bf189513d61d4796c07a6a60c48e0a829f91b97739809d64e869ae16798a44aad614a21d3dcf2b3e871587f53cd809f98e00", "f8b699c929b92eb43724035b87cff1866be094eb0000189e00"})
bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0xffff, @dev}, 0x4)
ioctl$LOOP_CLR_FD(r0, 0x4c01)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = dup2(r1, r2)
getsockname$inet(r3, &(0x7f0000000000)={0x2, 0x0, @broadcast}, &(0x7f0000000040)=0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x0, 0x2, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_PAN_ID={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800)
dup2(r0, r0)
preadv(0xffffffffffffffff, &(0x7f0000000640)=[{0x0}, {0x0}, {&(0x7f0000000580)=""/184, 0xb8}], 0x3, 0x9, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
fcntl$dupfd(0xffffffffffffffff, 0x0, r2)
ioctl$LOOP_SET_STATUS(0xffffffffffffffff, 0x4c02, &(0x7f0000000940)={0x0, {}, 0x0, {}, 0xb3b, 0x0, 0x0, 0xd, "1dcc79dc871c727f5161ac2a8e4cc9840bf9758bd451be073ffc9a88295eb61f59ed7b505b740380e9e52408f09a3a51eb40921a93b564681049851448ebb8ba", "3ffc41dee2559d50df9129b097ffb6a24732ffe375f19b9d3e5ca6831952a1c9", [0x7fffffff, 0x3]})
ioctl$LOOP_CLR_FD(r0, 0x4c01)

10:05:38 executing program 0:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  256.985739][ T8965] loop7: detected capacity change from 0 to 1036
[  257.317478][ T8975] binder: 8971:8975 unknown command 0
[  257.323815][ T8975] binder: 8971:8975 ioctl c0306201 20000200 returned -22
10:05:38 executing program 1:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0xe6383000)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009031, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f0000000400)="eb3c906d6b66732e66617400020101000240008000f8", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='nonumtail'])
r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
sendfile(r2, r3, 0x0, 0x800000080004103)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_UPDATE_FT_IES(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0)

10:05:39 executing program 0:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  258.388743][ T8983] binder: 8982:8983 unknown command 0
[  258.394608][ T8983] binder: 8982:8983 ioctl c0306201 20000200 returned -22
10:05:39 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  258.627107][ T8980] loop1: detected capacity change from 0 to 6
[  258.752465][ T8980] FAT-fs (loop1): bogus number of FAT sectors
[  258.752550][ T8980] FAT-fs (loop1): Can't find a valid FAT filesystem
[  258.981387][ T8992] binder: 8991:8992 unknown command 0
[  258.981463][ T8992] binder: 8991:8992 ioctl c0306201 20000200 returned -22
[  259.152344][ T8995] loop1: detected capacity change from 0 to 6
[  259.178255][ T8995] FAT-fs (loop1): bogus number of FAT sectors
[  259.178337][ T8995] FAT-fs (loop1): Can't find a valid FAT filesystem
10:05:40 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  260.191940][ T9002] binder: 9001:9002 unknown command 0
[  260.192315][ T9002] binder: 9001:9002 ioctl c0306201 20000200 returned -22
10:05:41 executing program 1:
openat$full(0xffffff9c, &(0x7f0000000080), 0x40001, 0x0)
r0 = openat$ipvs(0xffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0)
getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0x2, 0x10, 0x8, 0x9}, &(0x7f0000000140)=0x18)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='westwood\x00', 0x9)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8, 0x20010, 0xffffffffffffffff, 0x0)
sendto$inet(r1, &(0x7f0000000140), 0xffffffffffffff58, 0x2000800a, &(0x7f0000000100)={0x2, 0x4e20}, 0x10)
recvfrom(r1, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xffffffffffffff39)

10:05:42 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  261.183688][ T9008] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  261.406554][ T9013] binder: 9011:9013 unknown command 0
[  261.412377][ T9013] binder: 9011:9013 ioctl c0306201 20000200 returned -22
10:05:43 executing program 1:
perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x70224100, 0x0, 0x0, 0x0, 0x0)
r0 = getpgid(0x0)
getpgrp(0x0)
kcmp(r0, 0x0, 0xa, 0xffffffffffffffff, 0xffffffffffffffff)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=<r1=>0x0)
ioprio_set$pid(0x1, r1, 0x2004)
r2 = syz_open_procfs(0x0, &(0x7f0000001140)='fd\x00')
fcntl$notify(0xffffffffffffffff, 0x402, 0xb1c661d318500c51)
gettid()
fcntl$setownex(r2, 0xf, 0x0)
r3 = fork()
wait4(r3, &(0x7f0000000040), 0x4, &(0x7f0000001180))
request_key(&(0x7f00000003c0)='big_key\x00', &(0x7f0000000400)={'syz', 0x0}, &(0x7f0000000440)='user\x00', 0x0)
clone(0x101400, &(0x7f0000000080)="42cd60c19d5509d3f1753607d4aa7246162a0d493dbf4bd25af38c56eaae283a1955afd342654538edca98bc2a7b9514e525165d206ea0f880d3a336ef1b6b62de02bd31295fa73e50379d1e45581578f25e5b08f5e11682e0e4887c8e1850e0f470875997ea97e6c33b135646b03097b519b1e8590e4cf2fd618a729cdc8dab3ec28b9c8f3c2e675849f2d5", &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000300)="ecc5cc99f4a5ca52c3111227bb9a222e30825420588927b0a5b92883b7d9069bbf41d6654e2870c833390c3df6704f3a3e5b9feefd131dc3db75f7492efeba1d80304a5b0ed076f4ee97f910d35439e5412a946fec5445ac63d079446fa5c94262b1b9bab0fb8792a7e23c9db21f35fa8863ed586fcd6237f3fc02f1590fa6fd49da29ebfa35c0812e3eca1c3c26f2663623db4ebb2d890650b5d1534f61e667653067ddef5d6f534c")
ioctl$UFFDIO_WAKE(r2, 0x8010aa02, 0x0)
r4 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe)
request_key(0x0, 0x0, 0x0, r4)
syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0)

10:05:43 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  262.423801][ T9021] IPVS: ftp: loaded support on port[0] = 21
10:05:43 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:05:44 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:05:44 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:05:45 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:05:45 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000040))
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000200)={0x0, "88a1b0ebcb197135b8767aea028a6e8c"})
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @random="9fa6e1f2a2d4", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fbde20", 0x44, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88be}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x802}, {}, {0x8, 0x88c0}}}}}}}, 0x0)

[  264.107190][ T3124] ieee802154 phy0 wpan0: encryption failed: -22
[  264.113929][ T3124] ieee802154 phy1 wpan1: encryption failed: -22
10:05:45 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:05:45 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000040))
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000200)={0x0, "88a1b0ebcb197135b8767aea028a6e8c"})
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @random="9fa6e1f2a2d4", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fbde20", 0x44, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88be}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x802}, {}, {0x8, 0x88c0}}}}}}}, 0x0)

10:05:45 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:05:45 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000040))
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000200)={0x0, "88a1b0ebcb197135b8767aea028a6e8c"})
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @random="9fa6e1f2a2d4", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fbde20", 0x44, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88be}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x802}, {}, {0x8, 0x88c0}}}}}}}, 0x0)

[  265.106410][ T9080] binder: 9077:9080 ioctl c0306201 0 returned -14
10:05:46 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000040))
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000200)={0x0, "88a1b0ebcb197135b8767aea028a6e8c"})
syz_emit_ethernet(0x7a, &(0x7f0000000080)={@broadcast, @random="9fa6e1f2a2d4", @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "fbde20", 0x44, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88be}, {0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x802}, {}, {0x8, 0x88c0}}}}}}}, 0x0)

10:05:46 executing program 2:
r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x0, 0x8, 0x16}, 0x18)
ioctl$PPPOEIOCSFWD(r0, 0x4004b100, &(0x7f0000000080)={0x18, 0x0, {0x0, @empty, 'batadv_slave_0\x00'}})
fcntl$getownex(r0, 0x10, &(0x7f00000000c0))
ioctl$PPPOEIOCSFWD(r0, 0x4004b100, &(0x7f0000000100)={0x18, 0x0, {0x3, @remote, 'bond_slave_1\x00'}})
r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0)
r2 = epoll_create1(0x0)
ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0185647, &(0x7f0000000200)={0x9a0000, 0x3e, 0xe7c, r2, 0x0, &(0x7f00000001c0)={0xa00902, 0x1, '\x00', @p_u16=&(0x7f0000000180)=0x400}})
r3 = syz_open_dev$vcsu(&(0x7f0000000240), 0x8, 0x400000)
connect$pppoe(r3, &(0x7f0000000280)={0x18, 0x0, {0x1, @local, 'ip6tnl0\x00'}}, 0x1e)
r4 = openat$tun(0xffffff9c, &(0x7f00000002c0), 0x8400, 0x0)
ioctl$BTRFS_IOC_SYNC(r4, 0x9408, 0x0)
ioctl$CHAR_RAW_ALIGNOFF(r1, 0x127a, &(0x7f0000000300))
r5 = openat2(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', &(0x7f0000000380)={0x0, 0xd8, 0x5}, 0x18)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81e8943c, &(0x7f00000003c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r6=>0x0})
ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c09425, &(0x7f00000005c0)={"aedbf3e72bf304f6053328629a2a5797", r6, 0x0, {0x5, 0x1}, {0x3, 0x200}, 0xfff, [0x2, 0xe, 0x8, 0x132, 0x1, 0x100000000, 0x8, 0x2, 0x1, 0x3, 0x100000000, 0x35e5c525, 0x8001, 0xffffffffffff631f, 0x6, 0xf78f]})
r7 = openat$dir(0xffffff9c, &(0x7f0000000680)='./file1\x00', 0x20000, 0x9)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r7, 0x40106614, &(0x7f00000006c0))
r8 = openat$hwrng(0xffffff9c, &(0x7f0000000700), 0x44800, 0x0)
connect$pppoe(r8, &(0x7f0000000740)={0x18, 0x0, {0x1, @empty, 'veth1_to_batadv\x00'}}, 0x1e)
vmsplice(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000780)="1714425b10903560c70f8f1615cb166757e0b21a97a70000fa90976f3b3cf71ba81c414cb1832e75bcddffa0f10188256bb981d2cc6409360ab96bbf418afb1ea82a61a0d698f9413e82d81ab38ff49e77cb68f8a0087e7483f40bd48cae92693dd3a1d616a89ec1f306bae1ed4f8649ae93240d4cc98f44109f6041cc0ca7da06aca08a466672ad8134ff35effa6b0c96a6340158f991a326057e00208e189d081ae6f6beb339c39a084c5f5516573ee5c397db3fdd8cbb6be844afd13fa3ba3afa", 0xc2}, {&(0x7f0000000880)="464316dfa2c300df9030ed6a453d47d1b386ac24010939b55a85c32655e1194f317bea9b76470f89bb6994474a2616e9ad0dc0690fbdea2bc8332b", 0x3b}], 0x2, 0xf)

10:05:46 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000040))
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
ioctl$BTRFS_IOC_DEV_INFO(r1, 0xd000941e, &(0x7f0000000200)={0x0, "88a1b0ebcb197135b8767aea028a6e8c"})

10:05:47 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:05:47 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000040))
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  266.296379][ T9091] binder: 9090:9091 ioctl c0306201 0 returned -14
10:05:47 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
ioctl$BTRFS_IOC_GET_FEATURES(r1, 0x80189439, &(0x7f0000000040))

10:05:48 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:05:48 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:05:48 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  267.453112][ T9106] binder: 9105:9106 ioctl c0306201 0 returned -14
10:05:48 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:05:48 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  268.028730][ T9097] IPVS: ftp: loaded support on port[0] = 21
10:05:49 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:05:49 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  268.747085][ T9097] chnl_net:caif_netlink_parms(): no params data found
[  268.981467][ T9097] bridge0: port 1(bridge_slave_0) entered blocking state
[  268.989076][ T9097] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.999799][ T9097] device bridge_slave_0 entered promiscuous mode
[  269.014605][ T9097] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.022423][ T9097] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.032265][ T9097] device bridge_slave_1 entered promiscuous mode
[  269.083427][ T9097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.103460][ T9097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.160232][ T9097] team0: Port device team_slave_0 added
[  269.175331][ T9097] team0: Port device team_slave_1 added
[  269.232218][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_0
[  269.239759][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.267362][ T9097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  269.290116][ T9097] batman_adv: batadv0: Adding interface: batadv_slave_1
[  269.297904][ T9097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  269.324462][ T9097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  269.409268][ T9097] device hsr_slave_0 entered promiscuous mode
[  269.460162][ T9097] device hsr_slave_1 entered promiscuous mode
[  269.492604][ T9097] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  269.500487][ T9097] Cannot create hsr debugfs directory
[  269.942804][   T56] Bluetooth: hci2: command 0x0409 tx timeout
[  270.187079][ T9097] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  270.217777][ T9097] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  270.289687][ T9097] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  270.326359][ T9097] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  270.665821][ T9097] 8021q: adding VLAN 0 to HW filter on device bond0
[  270.701221][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  270.712946][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  270.739721][ T9097] 8021q: adding VLAN 0 to HW filter on device team0
[  270.767679][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  270.778227][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  270.788620][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state
[  270.796403][ T8481] bridge0: port 1(bridge_slave_0) entered forwarding state
[  270.845261][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  270.855072][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  270.865809][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  270.877094][ T8481] bridge0: port 2(bridge_slave_1) entered blocking state
[  270.884767][ T8481] bridge0: port 2(bridge_slave_1) entered forwarding state
[  270.894095][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  270.905675][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  270.933704][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  270.944975][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  270.959215][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  270.986562][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  270.997589][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  271.037066][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  271.048040][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  271.078270][ T9097] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  271.092617][ T9097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  271.109071][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  271.119265][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  271.178066][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  271.186588][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  271.231273][ T9097] 8021q: adding VLAN 0 to HW filter on device batadv0
[  271.296650][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  271.307048][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  271.375274][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  271.385826][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  271.407570][ T9097] device veth0_vlan entered promiscuous mode
[  271.416773][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  271.427199][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  271.463249][ T9097] device veth1_vlan entered promiscuous mode
[  271.555512][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  271.566003][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  271.576088][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  271.586953][ T8481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  271.610809][ T9097] device veth0_macvtap entered promiscuous mode
[  271.634429][ T9097] device veth1_macvtap entered promiscuous mode
[  271.701223][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  271.713612][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.723819][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  271.734688][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.749004][ T9097] batman_adv: batadv0: Interface activated: batadv_slave_0
[  271.757506][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  271.767603][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  271.777456][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  271.788157][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  271.830478][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  271.843583][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.853957][ T9097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  271.865090][ T9097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  271.879285][ T9097] batman_adv: batadv0: Interface activated: batadv_slave_1
[  271.890887][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  271.902279][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  271.934231][ T9097] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  271.944454][ T9097] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  271.953888][ T9097] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  271.963291][ T9097] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  272.036610][   T56] Bluetooth: hci2: command 0x041b tx timeout
[  272.363861][  T106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.372306][  T106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.385048][ T8483] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  272.515564][  T106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  272.523896][  T106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.531776][ T1977] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
10:05:53 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:05:53 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:05:54 executing program 2:
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
mmap(&(0x7f0000535000/0x4000)=nil, 0x4000, 0x200000e, 0x13, r0, 0xc04c5000)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x3ffc00}], 0x1, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x800005, 0x12, r2, 0x0)
preadv(r2, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r4=>0x0})
r5 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0)
getsockopt$inet_opts(r5, 0x0, 0xd, &(0x7f00000000c0)=""/130, &(0x7f0000000180)=0x82)

10:05:54 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:05:54 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}, @IFLA_NET_NS_PID={0x8}]}, 0x30}}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000100)={'ip6_vti0\x00', <r4=>0x0, 0x4, 0x3, 0x5, 0x1, 0x3, @private0, @mcast1, 0x8000, 0x80, 0x6, 0xea8}})
sendmsg$nl_route(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=@newneigh={0x2c, 0x1c, 0x100, 0x70bd2c, 0x25dfdbfc, {0x7, 0x0, 0x0, r4, 0x10, 0x82, 0x6}, [@NDA_MASTER={0x8, 0x9, 0x9}, @NDA_PORT={0x6, 0x6, 0x4e22}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000840}, 0x80)

10:05:54 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:05:55 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  274.105679][ T8483] Bluetooth: hci2: command 0x040f tx timeout
10:05:55 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{}, 0x8, @in=@loopback, 0x0, 0x1}}, 0xe8)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000000100)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', <r3=>0x0, 0x4, 0x1f, 0x81, 0x5, 0x8, @private1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x1, 0xfff, 0x4}})
sendmsg$nl_route(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)=@mpls_getroute={0xc0, 0x1a, 0x8, 0x70bd2b, 0x25dfdbfc, {0x1c, 0x80, 0x10, 0x7c, 0xfd, 0x3, 0xff, 0x0, 0x800}, [@RTA_NEWDST={0x84, 0x13, [{0x55, 0x0, 0x1}, {0x42}, {0x4}, {0x1, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0xe10}, {0x3, 0x0, 0x1}, {0x2}, {0x94}, {0x6, 0x0, 0x1}, {0x40}, {0x7ff, 0x0, 0x1}, {0x6}, {0x6, 0x0, 0x1}, {0x2, 0x0, 0x1}, {0x4, 0x0, 0x1}, {0x1f}, {0x7fff}, {0x1, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x5}, {0x81}, {0x2, 0x0, 0x1}, {0x8000}, {0x8}, {0x40}, {0x91f}, {0x1ff}, {0x8, 0x0, 0x1}, {}, {0xa2f}, {0x401}]}, @RTA_VIA={0x14, 0x12, {0x10, "7ce84341bab6eeabaeb2b4831df6"}}, @RTA_MULTIPATH={0xc, 0x9, {0x5, 0x4, 0x0, r3}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x11}, 0x20000000)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r5=>0x0})
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000140)={{{@in6=@private0, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}}, {{}, 0x8, @in=@loopback, 0x0, 0x1}}, 0xe8)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0xe40f5f901016aa63, &(0x7f0000000080)=0x8, 0x4)
r7 = gettid()
sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c01000010000100"/20, @ANYRES32=r5, @ANYBLOB="00000000adbe840d9a6bba0b", @ANYRES32=r7, @ANYBLOB="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"], 0x13c}}, 0x0)
ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@empty, @private2, @private0, 0x100000, 0x6, 0x3f, 0x500, 0x3, 0x10001, r5})
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)

10:05:55 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  274.718068][ T9394] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.2'.
[  274.728648][ T9394] batman_adv: batadv0: Interface deactivated: batadv_slave_1
10:05:55 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  275.111864][ T9396] netlink: 284 bytes leftover after parsing attributes in process `syz-executor.2'.
10:05:56 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:05:56 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:05:56 executing program 2:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8916, &(0x7f0000000000)='lo:|T{\xdcD\xd2\xaf>o\xd6Q\x00\x19\x02\x00\x04\x00\x7f\x1bb\x00\x00\x00\x01\x89d^\nOt\t\xa3\xf7c\xee,\xa3\x00\x00\x00\x00 \xf9\xedH\xc6L\x10G\x91\xed\x80\xffFl\xd3\x00\x00\x00\x00\x1d\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00e+\v\x1f\xa5\xac\xaf\x80\xbal\xc2\xcb\x03\byuE\x9fM\r0\xdfe\x10\xfe\xdd\x1a\xc2$\x04r\x01\xa9z4#Y\x04\x00\x00\x00\x00\x00\x00\x00[1\xe4\xfc\xa3\x95\xa9k&y\x86\n\xe0\xebN\xcc\b **\xa5\xa3\xb1(\x03|\x97\xa2I\xc8')

10:05:56 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:05:56 executing program 2:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x5, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000e40)={r0, 0x0, 0x13, 0xc4, &(0x7f00000000c0)="3587d7171f78219f4cf2be10b5beb7d3d7978b", &(0x7f0000000d00)=""/196, 0x2, 0x0, 0xb2, 0x23, &(0x7f0000000100)="c644560c18fe64f1e0c9235e2fe56850602b287b7681a481941aca18ca6e1b6428f3acdc699915aebdcda162ac303ae5d11dc75d09af51d70bc14d0108aa841bab5c82be9a0c1aaf83dae0d02be6b281911c03986bf24d1ca81eb8c77a35f027cee35b4232e2283b386d3be86fa37df13db8b9d9ec64c9880c28b59d0bcfdda47e72c15c9b843a134f5aabc698abf4b8eaac78bf217147def27fc84417d4edc2ce19093ae35c16386e54d947f4f1b0059dbe", &(0x7f0000000e00)="f9a5b06386e8924d17922fc86798c4f4e87b5aed2523b1c3cebaf2fbc5fb7d2e0a94e7", 0x1, 0x5}, 0x48)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe0, 0x7)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800002, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
lgetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00', &(0x7f00000000c0), 0x0)

[  276.182422][ T8483] Bluetooth: hci2: command 0x0419 tx timeout
10:05:57 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:05:57 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:05:59 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:05:59 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:05:59 executing program 1:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:06:00 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x464, 0x10, 0x70bd29, 0x25dfdbfc, "b0bd3b356b3092016d162b9e3952ba04a11eb65833db400aba0fcd15256e2f9a030be5217264a39651cc89322e647d4f", ["", "", "", ""]}, 0x40}, 0x1, 0x0, 0x0, 0x5ed2e9e7a79e2642}, 0x814)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x7, 0x800)
r1 = socket$pptp(0x18, 0x1, 0x2)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000200)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000140)="f2e981e4ce29e454703a282fe184ac", 0xf, r1}, 0x64)
syz_emit_ethernet(0x82, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb0800450000740000000000019078ac550001ac1414aa03059078f1000000460000000000000000110000ac140faaac141400070300890300443c00017f00002f00f50000e0000006000000000000000000000000ac14140000000000ac1414aa00"/121], 0x0)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x44, 0x0, 0x10, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7f}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040}, 0x99)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendfile(r0, r3, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4)

10:06:00 executing program 1:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:06:00 executing program 2:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x3c, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="500000001400330027bd700000000000e0000001000000000000000000000000fe80000000000000000000000000000000000000000000000200000000000000", @ANYRES32=r0, @ANYBLOB="c8375cd4365680d8eadea065b310d6abe167a228bf5ae1f0ffd29003e058fd61d6e76ed089fdc6ef0f7dd732e65d951801188030ede1a0e71da2c6f22b4ed026be1b8765b1a09aceb6e177ba536ebff64d7c8b6db1246dd8eaee62c2a0323f5627d1dbfd596be9fd0d7018cc6ec1e4fa3bcdb8310dde514cd9bc3bb4db9207095bbee86d257372cf005d3aee60f328493a48d9430355460a165f2469c6e723bbdeec4cafb653dd4fe70d34eaf128bf832e8e324d9947ee30856ef0f46c9960ecdb241eb15bce5f124ffd4bf83d34158572ad1c5d94d5ce", @ANYBLOB="0000000044704053c1332073d08a14abd600000000ac2cdec1f7e1db6cdedaa57fe06a9b3579622032f41657f0c7cd1426b9c97e83d844eef3e600a8aab7f0f3680f9eb4825e079a1286fcf961dd02000000bc9471a0850f7000886813d3a21e838e71cb835c8aeaa2ab019e56f3ec577c2b5c91"], 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x20000000)
sendmsg$nl_xfrm(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=@expire={0x1ec, 0x18, 0x100, 0x70bd2a, 0x25dfdbfc, {{{@in=@local, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e22, 0x7, 0x4e22, 0x7ff, 0x2, 0x0, 0x60, 0x57}, {@in=@multicast1, 0x4d3}, @in6=@mcast2, {0xef, 0xfffffffffffffffe, 0x0, 0xff, 0x66, 0x9, 0x4, 0x2}, {0x8, 0x53, 0x8, 0x8}, {0x7, 0xe8086c92, 0x7fff}, 0x470bd29, 0x3507, 0x2, 0x4, 0x9, 0x1c}, 0xb2}, [@algo_crypt={0xec, 0x2, {{'rfc3686(chacha20)\x00'}, 0x520, "d59db3e5864bb97d445158d7e7ee130613097545f712972b27eb18aa57d56083ba04ee5f4dd41d4ba3b5f54206881574756860da423588d919c3a535e2754306d06da1e5f6dd01902a0446bb1e299e8cfaa8ef0cda05fde64b4fdd55ca01891a0da6ff164e16bde204150e85f0db5f0a0c72cf70855c0ba262b2795c38926912ad089879403b02e79e3702e4a5a670ac72d81d13f398f6006f02a8dcc4e426ab949aee17"}}, @XFRMA_IF_ID={0x8}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x400}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40044}, 0x20000805)

10:06:00 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(0xffffffffffffffff, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:00 executing program 1:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  279.947523][ T9450] binder: 9449:9450 unknown command 0
[  279.953936][ T9450] binder: 9449:9450 ioctl c0306201 20000200 returned -22
[  279.997574][ T9450] binder: 9449:9450 ioctl c0306201 200000c0 returned -14
10:06:01 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(0xffffffffffffffff, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:01 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  280.428868][ T9455] binder: 9454:9455 unknown command 0
[  280.434771][ T9455] binder: 9454:9455 ioctl c0306201 20000200 returned -22
[  280.499040][ T9455] binder: 9454:9455 ioctl c0306201 200000c0 returned -14
10:06:01 executing program 2:
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'xfrm0\x00', {0x2, 0x0, @private}})
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0)
r1 = openat$nvram(0xffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}]}, 0x34}}, 0x0)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r3, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'syzkaller0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000005}, 0x4c001)

10:06:01 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(0xffffffffffffffff, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:01 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  280.808402][ T9461] smc: net device bond_slave_0 applied user defined pnetid SYZ2
10:06:02 executing program 2:
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="280000005a000100000000000000000018000080140001"], 0x28}], 0x1}, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4, 0x10, 0x4e531f42, 0x2c08}, 0x10)
sendmmsg$alg(r0, &(0x7f0000000140), 0xcc, 0x0)
r1 = open_tree(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0x8101)
r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000700), r0)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r1, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000840)={&(0x7f0000000740)={0xd0, r2, 0x2, 0x70bd26, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10000}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8e3c}, {0x6, 0x11, 0x200}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40}, {0x6, 0x11, 0x40}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x376c}, {0x6, 0x11, 0xf3a6}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x1c0}, 0x24040)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x48, 0x23, 0x300, 0x70bd2c, 0x25dfdbfc, {0xa}, [@nested={0x34, 0x33, 0x0, 0x1, [@typed={0x2e, 0x14, 0x0, 0x0, @binary="fd5da9667e55e3eb308b0eaad0b02c9194fae528ee2524bb6a740431bfdf6ca2b7b7d9ff044afb235d34"}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000}, 0x40000)

[  281.027268][ T9467] binder: 9464:9467 unknown command 0
[  281.033239][ T9467] binder: 9464:9467 ioctl c0306201 20000200 returned -22
[  281.053990][ T9467] binder: 9464:9467 ioctl c0306201 200000c0 returned -14
10:06:02 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:06:02 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  281.417635][ T9470] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  281.538861][ T9474] binder: 9473:9474 unknown command 0
[  281.544851][ T9474] binder: 9473:9474 ioctl c0306201 20000200 returned -22
[  281.597350][ T9476] binder: 9473:9476 ioctl c0306201 200000c0 returned -14
10:06:02 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_dev$vcsa(&(0x7f00000002c0), 0x8, 0x400502)
bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e24, 0x7, @rand_addr=' \x01\x00', 0xb}, 0x1c)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @local}, 0x1c)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket(0x10, 0x80002, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x4, @loopback, 0x2}, 0x1c)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="341f00001300290a000000000000000007000000a240fe63a8f959ddad7f23526055b264bf60ef24def9819f29", @ANYRES32=r3, @ANYBLOB="000000000000000014001a80100004800c0008800800000000000000"], 0x34}}, 0x0)
r6 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r7=>0x0})
r8 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r8, 0x29, 0x22, &(0x7f0000000380)={{{@in6=@local, @in6=@local}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000240)=0xe4)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e24, 0x7fffffff, @mcast2, 0x25}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd604010ff0014060020010000000000000000000000000001fe7100000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="50c2000090780000"], 0x0)
socket$inet6(0xa, 0x1, 0x0)

10:06:02 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:06:02 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  282.059630][ T9481] binder: 9478:9481 unknown command 0
[  282.065348][ T9481] binder: 9478:9481 ioctl c0306201 20000200 returned -22
[  282.107633][ T9481] binder: 9478:9481 ioctl c0306201 200000c0 returned -14
10:06:03 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:06:03 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, 0xffffffffffffffff)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:03 executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000000)=ANY=[@ANYBLOB="2fccb5535c0e429166fa0c22d42af829003564d3acc1a34313a75948a024161f39aef578705e6834b3dbf1eb63f9d92d45e5e8e751464b46cea4efdafcb7a2172b1b6f637880d4932394a93d0be18a132a85508ea5ae947ff0c76d885e87eae28a0b67f29cdd1aad473f9de1338f48ea", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b0000000000180016800800018010000600"/40], 0x40}}, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r5=>0x0})
r6 = socket(0x10, 0x80002, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r6)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r10=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_DEAUTHENTICATE(r6, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r7, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x0, 0x8}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x8000000)
sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x8, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000640)=@gettaction={0xfffffffffffffe91, 0x32, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9a}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0xde91}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x20}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x0, 0x4, 0x7}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x1f}}, {0x10, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x0, 0x3, 0x3}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff7fff}}]}, @action_gd, @action_dump_flags=@TCA_ROOT_FLAGS={0x0, 0x2, {0x1, 0x1}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x24008000}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'syztnl2\x00', &(0x7f0000000100)={'ip6_vti0\x00', <r11=>0x0, 0x2f, 0x81, 0x3, 0x7ff, 0x42, @empty, @loopback, 0x40, 0x700, 0x1, 0x4}})
sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@newtclass={0x88, 0x28, 0x10, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xd, 0xfff1}, {0xc, 0xc}, {0x9, 0x1}}, [@tclass_kind_options=@c_sfq={0x8}, @tclass_kind_options=@c_ingress={0xc}, @tclass_kind_options=@c_tbf={0x8}, @TCA_RATE={0x6, 0x5, {0x1, 0xff}}, @TCA_RATE={0x6, 0x5, {0x20, 0x80}}, @TCA_RATE={0x6, 0x5, {0x0, 0x7}}, @tclass_kind_options=@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_VALUE={0x5, 0x5, 0xca}}}, @tclass_kind_options=@c_tbf={0x8}, @tclass_kind_options=@c_cbs={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x8}}]}, 0x88}, 0x1, 0x0, 0x0, 0x1}, 0x40004)

[  282.624696][ T9490] binder: 9488:9490 unknown command 0
[  282.630302][ T9490] binder: 9488:9490 ioctl c0306201 20000200 returned -22
[  282.685077][ T9492] binder: 9488:9492 ioctl c0306201 200000c0 returned -14
10:06:03 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:06:03 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:04 executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = dup3(r0, r1, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="02"])
dup2(r3, r2)

[  283.162632][ T9500] binder: 9498:9500 unknown command 0
[  283.168224][ T9500] binder: 9498:9500 ioctl c0306201 20000200 returned -22
10:06:04 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  283.340726][ T9504] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
10:06:04 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:04 executing program 2:
perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x80000001}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x200000, 0x6, &(0x7f0000000200)=[{&(0x7f0000010000)="200000000002000019000000900100000f000000000000000200000006000000000008000080000020000000dbf4655fdbf4655f0100ffff53ef010001000000daf4655f000000000000000001000000000000000b0000000004000008000000d2c200001203", 0x66, 0x400}, {&(0x7f0000010100)="00000000000000000000000082e36724c6f34caa846ed2e527703378010040", 0x1f, 0x4e0}, {&(0x7f0000000040)="02000000030000000400000019000f000300040000000000000000000f002e69", 0x20, 0x1000}, {&(0x7f0000012600)="ed41000010000000daf4655fdbf4655fdbf4655f000000000000040080", 0x1d, 0x4400}, {&(0x7f0000012800)="8081000000180000daf4655fdaf4655fdaf4655f00000000000001008000000010000800000000000af301000400000000000000000000000200000030", 0x3d, 0x4800}, {&(0x7f0000013900)="111fc0d901000000803a0900803a09000000000006", 0x15, 0x30000}], 0x0, &(0x7f00000000c0)=ANY=[])
mkdir(&(0x7f00000000c0)='./file0\x00', 0x40)
read$FUSE(0xffffffffffffffff, &(0x7f00000005c0)={0x2020, 0x0, 0x0, <r0=>0x0}, 0x2020)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x8, 0x4, &(0x7f0000000580)=[{&(0x7f0000000300)="9fb21203cc8df2ff0397015ab790bcddd75cbc8c6c820d73f334dcdb8172f0f6bc108e66260f203aa1521ecd978b03dc4f932484b167996f0254fc4993a73276c6e861531bebd5a686a221370ee49f89bf43b999068831af501928cc0fee4a844afb3c073557881f5d42dc7187c4c3925a6f56ec46f998dc888af4d008b117f3613f6eb10594db04aab84e9c39c21c6699ccf982d4cb1b22ba369570f7a2d6c44957d4e45ec56902e1c49982421ac987d3a3ffe9f2cf83c2388471dd56e6bd0d2bcca818a0bded1907aa400717db70de4db753b13b2112a0a618a31537d757b77f5b2d2714d85c07c75a71dc881f0f9e513a82b524f9f90198b59138b5", 0xfd, 0x200}, {&(0x7f0000000400)="2f3655f85eae4c0ffdc97eaec55cff55627d067baa3dc8e493f4d477366df4278543e62136a6f9042754ae5dde302893dc1d517a6b1fd97160df49ad9118cc2c19c35c9b0285c7db7f690819eddba1814d606e80696ae785927d1b736cbbe9fa3b7a03ab5c3369f57f", 0x69, 0x70}, {&(0x7f0000000480)="276a027ebcb6873e7884eff263921822bfec60704689af9f424e340f95dd8114626867b7c4fd7a159368ca49ccca5cf1974931fa7f23cdb22ab062fb867112abb2b4742db28bc638f49d657697cfa5bca0fa68a6fa3db7e200496b50323f91cc5d137096665986094cef87e0846959535f799e0c112fbfc6ee2fd2d4ac0f7437168d981546affa0f74f4c90445e76ee571a4a51c034912fcd4c1172d3a49d2a75ce58f01bcb249356304f2e0", 0xac, 0x81}, {&(0x7f0000000540)="78ecf537fc0941d9d2cc6231933a818940d45496abfe6bde7cfa635bd6de94794548c11a807c6b2447724c8f4a9624598cd91e1c1b1cb96993", 0x39, 0x1}], 0x240000, &(0x7f0000002600)={[{@uni_xlateno}, {@rodir}, {@uni_xlateno}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@rodir}, {@shortname_mixed}, {@utf8no}, {@shortname_mixed}], [{@subj_type}, {@fowner_eq={'fowner', 0x3d, r0}}, {@dont_hash}, {@smackfshat}]})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
perf_event_open(&(0x7f0000000180)={0x6, 0x80, 0x27, 0x7, 0x6, 0x0, 0x0, 0x0, 0x4004, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0xfffffffc, 0x6, @perf_bp={&(0x7f0000000080), 0x4}, 0x181, 0xfff, 0x5, 0x5, 0xba, 0x10001, 0x8, 0x0, 0x10e5, 0x0, 0x6}, 0xffffffffffffffff, 0x6, r1, 0x2)

[  283.717199][ T9513] binder: 9511:9513 unknown command 0
[  283.723108][ T9513] binder: 9511:9513 ioctl c0306201 20000200 returned -22
10:06:04 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:06:05 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  284.016349][ T9516] loop2: detected capacity change from 0 to 4096
[  284.144709][ T9516] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  284.251553][ T9525] binder: 9524:9525 unknown command 0
[  284.258084][ T9525] binder: 9524:9525 ioctl c0306201 20000200 returned -22
10:06:05 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:06:05 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:05 executing program 2:
socket$inet6(0xa, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x511, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2)
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
close(0xffffffffffffffff)
write$binfmt_misc(0xffffffffffffffff, &(0x7f00000001c0)={'syz0'}, 0x4)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x6, 0x0)
perf_event_open(&(0x7f0000000140)={0x5, 0x80, 0x3, 0xe9, 0x7f, 0x0, 0x0, 0x80000000, 0x20000, 0x9, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x401, 0x1, @perf_config_ext={0x8, 0x80000000}, 0x40000, 0x9, 0x0, 0x6, 0xffff, 0x28ba, 0x8, 0x0, 0x5, 0x0, 0x7}, 0xffffffffffffffff, 0xb, 0xffffffffffffffff, 0x8)
ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82)
ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x78480, 0x0)
unshare(0x200)
ioctl$TCSETSF(r1, 0x5453, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0)
read$FUSE(r2, &(0x7f0000008380)={0x2020}, 0x2000a3a0)
ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82)

[  284.583222][ T9529] binder: 9528:9529 unknown command 0
[  284.588863][ T9529] binder: 9528:9529 ioctl c0306201 20000200 returned -22
[  284.601957][ T9529] binder: 9528:9529 ioctl c0306201 0 returned -14
10:06:05 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:06 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  285.093366][ T9539] binder: 9536:9539 unknown command 0
[  285.099275][ T9539] binder: 9536:9539 ioctl c0306201 20000200 returned -22
[  285.158093][ T9543] binder: 9536:9543 ioctl c0306201 0 returned -14
10:06:06 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:06 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000040)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x4000012, r1, 0x0)
preadv(r0, &(0x7f00000001c0), 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x800000000009032, 0xffffffffffffffff, 0xfa3ac000)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000780)={[{@fat=@errors_remount}]})

10:06:06 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  285.628842][ T9552] binder: 9550:9552 unknown command 0
[  285.634945][ T9552] binder: 9550:9552 ioctl c0306201 20000200 returned -22
[  285.692405][ T9554] binder: 9550:9554 ioctl c0306201 0 returned -14
[  285.778084][ T9555] FAT-fs (loop2): bogus number of reserved sectors
[  285.785540][ T9555] FAT-fs (loop2): Can't find a valid FAT filesystem
10:06:07 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:07 executing program 2:
write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

10:06:07 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  286.298708][ T9565] binder: 9564:9565 unknown command 0
[  286.305066][ T9565] binder: 9564:9565 ioctl c0306201 20000200 returned -22
[  286.349197][ T9565] binder: 9564:9565 ioctl c0306201 200000c0 returned -14
10:06:07 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:07 executing program 2:
statfs(&(0x7f0000000180)='./file0\x00', 0x0)
perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x76, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000240)=<r4=>0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x1c5b42, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x80000001)
perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0xa4, 0x3, 0x7, 0xb0, 0x0, 0x9, 0x5001, 0x8, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x3, 0x4}, 0x400, 0x4, 0x5, 0x1, 0x4, 0x7fff, 0x3, 0x0, 0x7, 0x0, 0xfff}, r4, 0xd, r6, 0x2)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000))
r7 = fcntl$dupfd(r0, 0x0, r1)
readv(r7, &(0x7f0000001440)=[{&(0x7f00000000c0)=""/14, 0xe}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/60, 0x3c}, {&(0x7f00000012c0)=""/237, 0xed}, {&(0x7f00000013c0)=""/85, 0x55}], 0x5)

10:06:07 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  286.776618][ T9572] binder: 9571:9572 unknown command 0
[  286.782487][ T9572] binder: 9571:9572 ioctl c0306201 20000200 returned -22
[  286.808400][ T9572] binder: 9571:9572 ioctl c0306201 200000c0 returned -14
[  286.971402][   T34] audit: type=1800 audit(1623492368.016:2): pid=9576 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14007 res=0 errno=0
10:06:08 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, 0x0, 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:08 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  287.166230][   T34] audit: type=1800 audit(1623492368.206:3): pid=9578 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=14007 res=0 errno=0
10:06:08 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x78}]}, &(0x7f00000001c0)='GPL\x00', 0x4, 0x9a, &(0x7f0000000000)=""/154, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x74)
connect(0xffffffffffffffff, &(0x7f0000000140)=@in6={0xa, 0x4e21, 0x7fff, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000100)='add_device_randomness\x00', r0}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
r2 = syz_open_dev$vcsn(&(0x7f0000000200), 0x40, 0x4200)
connect$unix(r2, &(0x7f00000002c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
unshare(0x64040200)

[  287.474009][ T9584] binder: 9582:9584 unknown command 0
[  287.479706][ T9584] binder: 9582:9584 ioctl c0306201 20000200 returned -22
10:06:08 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  287.533143][ T9584] binder: 9582:9584 ioctl c0306201 200000c0 returned -14
10:06:08 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  287.690085][ T9587] IPVS: ftp: loaded support on port[0] = 21
[  287.989931][ T9611] binder: 9610:9611 unknown command 0
[  287.996012][ T9611] binder: 9610:9611 ioctl c0306201 20000200 returned -22
10:06:09 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, 0x0, 0x0, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  288.056227][ T9611] binder: 9610:9611 unknown command 0
[  288.061939][ T9611] binder: 9610:9611 ioctl c0306201 200000c0 returned -22
10:06:09 executing program 2:
syz_read_part_table(0x0, 0x1d4, &(0x7f0000000200)=[{&(0x7f0000000080)="03f605020206af540314004c000000ffffffa50000000000000000000500000000004200000000000000000000000000000000000000000000000000200055aa", 0x40, 0x1c0}])
syz_read_part_table(0xfffffffd, 0x7, &(0x7f00000005c0)=[{&(0x7f0000000000)="13b7368be6ac07a604e05e95", 0xc, 0x2}, {&(0x7f00000000c0)="182f87f8481c018b111714021511cb68b42f8aae07c974e35d67d63279e05c9dfbccbb4fa5e62d18d8ed5cca0ab4527c63f77b1e659c1160abaf64428fc0bd9f28c46945e6a3c01c6fc1358f5b3c57cb6bd9fe5766f6159fdd5f7d180404af4baf2c785dbba56495d7ba12b4abd039c179403ea860b470e1e59c56c2a9c514d14fb470fe18db63731e6ce2b708645de3603b670733e1bac6f7e96a4ce966827842808d54ba35be2889a03a03b0ee5bc9f8b9b5e13324a1792a583ba7c74ef5b1", 0xc0, 0x4}, {&(0x7f0000000240)="a4a219e613ffad8197bdf3df42f3e1d3812cb1e22b0d212bad7e543c21327e9ccd6841ae179809a26fffee5e8012b83a5549728edb97daac23f5623ad575b059b253a7da16d1e5f0f40202f0e5dc5ac0bc62b3f052727d50a24297864ce4e9d6a898d03085ab60b9c08998aaa427238a272489c58a59e56c86b65f8b037f3b4acb939ba0f470d3905302bf9897dfc85f96b56a2ffc0a58c7df146f848a9beb12630b9a531599b0d925b37b998759cebb920163b7b07a11a09a03d90a2d2e6d8542fb26fc20c47b8daa022c4af4881ed874357f1cbd4b464b2b1d20a1e743", 0xde, 0x1}, {&(0x7f0000000180)="5a2e6e7f137439546902ef8d85b34286990250c1b2c3327114640966fe2f9547af4b6e12d2d2112588a690689fb6cd212a28f18fbeb4f52161d9feb2becacdcd5d018b70102fbec9060911f36beae8edac3c40bf915ac99ea5dae0597a0ea13611303de1481afd96aa499ab1c0ceee8086256974130353", 0x77, 0x7fffffff}, {&(0x7f0000000340)="43c0147140fc05ddd12e22594315942638f7ac7faa52126d9d90fce7d19d111cf86c62673108609adff6cbe0583a4594a8838ab7e0b4e05370aeca6d440dd6c07c0f9f1d8b5410ce6fcbe2cccdf6f64ed4f26eca3f6e86e693805e2ec265cd8e04927ff76fc940ce30f15f688be1811bb56f6b723198493b48356b0f78faa211b6041c7808de587a8f54507553583dc2095ae7ddcf199dea40bd014231847b4712438e691377a352f9005f29a7f4aa19feffdf11eaae", 0xb6}, {&(0x7f0000000400)="1a2a048b635996f296afe858c269fea7315045a08218c5ca647cf28fa94cf61bd943b7a5f6f5a1c57e6a17cf321c00425c96e77ba1da83f2d5dc3b4c6280c5bf7b6f17441849b606e426c8df24f64134d14a3e3498fd35a3be99d24513dd3af14cb7032526552c91638c67b60f1fd77fac4934115ba737dce26113ee87d0e2b23d2b3a96ab7470943b749db6249e1ddfc15e78031395eb02752ab96740fb68782eb0b7d86c9c13f1", 0xa8, 0x2}, {&(0x7f00000004c0)="87a7d15344641e8277ab130b61cb9154d95f71d51e75070351f9f7dff1b2646719d0c281262588a714f4f1bc8629a8660f0331637585f46f369dd430eba475b1bd4224164beb4dbc9880fce54d1ffd80ee2381551b2b4ad3990986e8ce262f306bee665622ac0541dacd47a5bbb611bd8d1e8b7eb41f968dfe1fce7ee11d2e0039a272460766a8b9d33692ce2136314b95890be1568e73ad95175d82cbb5023792e0a69809d3d7fdac2846ffc692e2c00f012f4bc9a5a92cf46dc5a2e4387ec722dff9f344e5b8aff6300867480f8a2d78b5be7971f3a3c235738daaad9f479fd032c450a40abe77", 0xe8, 0x1ff}])

10:06:09 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  288.475729][ T9619] loop2: detected capacity change from 0 to 1
[  288.521021][ T9623] binder: 9617:9623 unknown command 0
[  288.527325][ T9623] binder: 9617:9623 ioctl c0306201 20000200 returned -22
[  288.536150][ T4686] ldm_validate_privheads(): Disk read failed.
[  288.542719][ T4686]  loop2: p1 < > p2 p4
[  288.546955][ T4686] loop2: partition table partially beyond EOD, truncated
[  288.555496][ T4686] loop2: p1 start 335762607 is beyond EOD, truncated
[  288.562915][ T4686] loop2: p2 size 327680 extends beyond EOD, truncated
[  288.574357][ T4686] loop2: p4 size 2097152 extends beyond EOD, truncated
[  288.576077][ T9625] binder: 9617:9625 unknown command 0
[  288.587563][ T9625] binder: 9617:9625 ioctl c0306201 200000c0 returned -22
[  288.609598][ T9619] ldm_validate_privheads(): Disk read failed.
[  288.616616][ T9619]  loop2: p1 < > p2 p4
[  288.620799][ T9619] loop2: partition table partially beyond EOD, truncated
[  288.628778][ T9619] loop2: p1 start 335762607 is beyond EOD, truncated
[  288.635985][ T9619] loop2: p2 size 327680 extends beyond EOD, truncated
10:06:09 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, 0x0, 0x0, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  288.665809][ T9619] loop2: p4 size 2097152 extends beyond EOD, truncated
10:06:09 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:10 executing program 2:
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000140)="98c4cac0a7cb4f8ad745f3012cacea8f1ef31a58a82de8b7324d688dbb1fa875f0913e91c54314fb24c2618769f6755d06520655e34f33ddbd8368b04ad237178ad128a9cae3bd85d84e2dd7ad8888616f3f37c4879d7b6be244ce1e3935a72b0dff1d5a3f240e203248d6f90c2b6415cbe195d99bfc65a69c0a0e3be2605f84b5e9858995d0", 0x86, 0x4}], 0x0, &(0x7f0000000040)=ANY=[@ANYRESOCT])

10:06:10 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, 0x0, 0x0, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  289.245927][ T9640] binder: 9639:9640 unknown command 0
[  289.251567][ T9640] binder: 9639:9640 ioctl c0306201 20000200 returned -22
[  289.311124][ T9642] binder: 9639:9642 unknown command 0
[  289.316969][ T9642] binder: 9639:9642 ioctl c0306201 200000c0 returned -22
[  289.512783][ T9646] loop2: detected capacity change from 0 to 8
10:06:10 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  289.561751][ T9646] squashfs: Unknown parameter '01777777777777777777777'
10:06:10 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0), 0x0, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  289.655877][ T9646] loop2: detected capacity change from 0 to 8
[  289.668357][ T9646] squashfs: Unknown parameter '01777777777777777777777'
10:06:10 executing program 2:
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x3, &(0x7f00000001c0)=[{&(0x7f0000000080)="20000000000100000c000000ce0000000f000000010000000000000000000000002000000020000020000000d7f4655fd7f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="2e0000001300000023", 0x9, 0x800}, {&(0x7f0000012b00)="ed41000000040000d7f4655fd7f4655fd7f4655f000000000000040002", 0x1d, 0x8c80}], 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="6772706a71756f74613d6a9817c77f0705d9733494342c6a71666d743d7666737631"])
mkdir(&(0x7f00000000c0)='./file0\x00', 0x82)

[  289.941251][ T9655] binder: 9654:9655 unknown command 0
[  289.947166][ T9655] binder: 9654:9655 ioctl c0306201 20000200 returned -22
[  289.998107][ T9657] binder: 9654:9657 unknown command 0
[  290.004061][ T9657] binder: 9654:9657 ioctl c0306201 200000c0 returned -22
10:06:11 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:11 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0), 0x0, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  290.298630][ T9661] loop2: detected capacity change from 0 to 512
[  290.390277][ T9661] EXT4-fs (loop2): warning: mounting unchecked fs, running e2fsck is recommended
[  290.474523][ T9661] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=j���s4�4,jqfmt=vfsv1,errors=continue. Quota mode: writeback.
[  290.606159][ T9671] binder: 9669:9671 unknown command 0
[  290.611929][ T9671] binder: 9669:9671 ioctl c0306201 20000200 returned -22
[  290.676715][ T9671] binder: 9669:9671 unknown command 0
[  290.682911][ T9671] binder: 9669:9671 ioctl c0306201 200000c0 returned -22
10:06:11 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0), 0x0, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:06:11 executing program 2:
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000c00), 0x200000, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, 0x0, 0x0)
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x16d, 0x5, 0x6, 0x3c73, 0x3}})
ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x99b5, 0x5, 0x9, 0x6, 0x10}})
unshare(0x60000000)
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000000c40)={{r0}, "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"})
mlock2(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0)
mbind(&(0x7f0000ff5000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x2)
r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000c00), 0x200000, 0x0)
sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, 0x0, 0x0)
mmap$perf(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x3000002, 0x10010, r1, 0x7)

10:06:12 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  291.275202][ T9679] binder: 9677:9679 unknown command 0
[  291.280891][ T9679] binder: 9677:9679 ioctl c0306201 20000200 returned -22
10:06:12 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  291.331945][ T9680] IPVS: ftp: loaded support on port[0] = 21
[  291.355689][ T9679] binder: 9677:9679 unknown command 0
[  291.361562][ T9679] binder: 9677:9679 ioctl c0306201 200000c0 returned -22
10:06:12 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='\vc\x00\x00'], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  291.725959][ T9681] IPVS: ftp: loaded support on port[0] = 21
10:06:12 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  292.015236][ T9724] binder: 9720:9724 unknown command 0
[  292.020860][ T9724] binder: 9720:9724 ioctl c0306201 20000200 returned -22
[  292.089744][ T9724] binder: 9720:9724 unknown command 0
[  292.095465][ T9724] binder: 9720:9724 ioctl c0306201 200000c0 returned -22
10:06:13 executing program 2:
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x4c, 0x12, 0x100, 0x70bd2d, 0x25dfdbfd, {0x27, 0x6, 0x3f, 0x4, {0x4e23, 0x4e22, [0x59, 0x4, 0xfffffff9, 0x4], [0xb85, 0x6, 0x5, 0x4], 0x0, [0x81, 0x10000]}, 0x6, 0x7}}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040)
sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000140002000004ff00fbfbffffff010d000105008bd73bd149968196000008000031499cb0632c2edecb4b3743429686b94ef5fb20cafeff5fef0c8fefab6d0438c6718e9cacda522d264d1b2e92fd25f6e1c4ba6134939b44b76c42f027c533bb54db77a6773f0c410641dc48f233dcdbf2d971bf283aa03b761a2ecf56522cd0ffcafa874142f35b13104977fd4e9e65e937881d6268af3700000000009e621c068fdde2002a00a0477c53211086e3b7f5bd0731d6c376da37"], 0x24}}, 0x0)

10:06:13 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='\vc\x00\x00'], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:13 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  292.539525][ T9734] binder: 9733:9734 unknown command 0
[  292.545542][ T9734] binder: 9733:9734 ioctl c0306201 20000200 returned -22
[  292.611407][ T9734] binder: 9733:9734 unknown command 0
[  292.617125][ T9734] binder: 9733:9734 ioctl c0306201 200000c0 returned -22
10:06:13 executing program 2:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f00000004c0)=@req3={0x3, 0x232, 0x5, 0x8000, 0x1e71a9ec, 0x2, 0xfbaa}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x4000000)
r0 = socket(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)
sendmmsg(r1, &(0x7f0000000800)=[{{&(0x7f0000000200)=@phonet={0x23, 0x6, 0x80, 0x7}, 0x80, &(0x7f00000006c0), 0x0, &(0x7f0000000700)=[{0xd8, 0x104, 0x1c, "cb2bded6c6e07a2ef556fef2b0921a7c77e94da55123e1a4307a2c28c15641a906b2b658e2df97c80a3348bfb3723c00f95f71008fe3ae985aab0cc9f6ec7e41abeb52b11279379daac59367e82eb890f4f57fbc34c5e4de9d352dd68431952fdbb2afaecd8c7a73e86bc25c08ca2cf7b36e141fd92c7777faae92ff5abae846c9b5e21465f49fe80b89da7e7e99f90ec30424ce4dad126bd095cd46e79e85a39fc0f04f39ce7f132af826ac112b87180621b35b08ed5b460f80ef7ffb5270a7e7e12f87833fe7b244"}], 0xd8}}], 0x1, 0x40000)
r2 = openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0xa0000, 0x5)
pipe(&(0x7f00000000c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r3)
write$binfmt_misc(r4, &(0x7f00000001c0)={'syz0'}, 0x4)
tee(r3, r4, 0x6, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40042406, &(0x7f0000000180)='\x00')
mq_getsetattr(r2, &(0x7f00000000c0)={0x5301, 0x4, 0x40, 0x5}, &(0x7f0000000100))
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r5=>0x0}, &(0x7f0000cab000)=0xa)
setresuid(0x0, r5, 0x0)
write(0xffffffffffffffff, &(0x7f0000000040), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002240)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x6}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, r2}, 0x74)

10:06:13 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='\vc\x00\x00'], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:14 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:06:14 executing program 2:
pipe2$9p(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
syz_mount_image$iso9660(0x0, &(0x7f00000007c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100), 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@uname={'uname', 0x3d, '&\\'}}, {@cache_mmap}, {@dfltuid}, {@version_9p2000}, {@cache_loose}]}})
fsync(r1)

[  293.178210][ T9743] binder: 9742:9743 unknown command 0
[  293.184268][ T9743] binder: 9742:9743 ioctl c0306201 20000200 returned -22
[  293.217525][ T9743] binder: 9742:9743 unknown command 0
[  293.223390][ T9743] binder: 9742:9743 ioctl c0306201 200000c0 returned -22
10:06:14 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f63"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:14 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  293.756947][ T9758] binder: 9750:9758 unknown command 0
[  293.762808][ T9758] binder: 9750:9758 ioctl c0306201 20000200 returned -22
[  293.804930][ T9758] binder: 9750:9758 unknown command 25359
[  293.810993][ T9758] binder: 9750:9758 ioctl c0306201 200000c0 returned -22
10:06:14 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:06:14 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:06:15 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f63"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:15 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  294.382375][ T9767] binder: 9765:9767 unknown command 0
[  294.388085][ T9767] binder: 9765:9767 ioctl c0306201 20000200 returned -22
[  294.428133][ T9767] binder: 9765:9767 unknown command 25359
[  294.434998][ T9767] binder: 9765:9767 ioctl c0306201 200000c0 returned -22
10:06:15 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:06:15 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f63"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:15 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  295.000213][ T9775] binder: 9772:9775 unknown command 0
[  295.006308][ T9775] binder: 9772:9775 ioctl c0306201 20000200 returned -22
[  295.074309][ T9777] binder: 9772:9777 unknown command 25359
[  295.080364][ T9777] binder: 9772:9777 ioctl c0306201 200000c0 returned -22
10:06:16 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:06:16 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:16 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  295.610235][ T9784] binder: 9783:9784 unknown command 0
[  295.616086][ T9784] binder: 9783:9784 ioctl c0306201 20000200 returned -22
[  295.684839][ T9788] binder: 9783:9788 unknown command 811791
[  295.690810][ T9788] binder: 9783:9788 ioctl c0306201 200000c0 returned -22
10:06:16 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:06:16 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:06:16 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  296.219417][ T9795] binder: 9792:9795 unknown command 0
[  296.225240][ T9795] binder: 9792:9795 ioctl c0306201 20000200 returned -22
10:06:17 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  296.282652][ T9797] binder: 9792:9797 unknown command 811791
[  296.288723][ T9797] binder: 9792:9797 ioctl c0306201 200000c0 returned -22
10:06:17 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:06:17 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:17 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  296.852894][ T9805] binder: 9803:9805 unknown command 0
[  296.858526][ T9805] binder: 9803:9805 ioctl c0306201 20000200 returned -22
[  296.914675][ T9806] binder: 9803:9806 unknown command 811791
[  296.920816][ T9806] binder: 9803:9806 ioctl c0306201 200000c0 returned -22
10:06:18 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:06:18 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:06:18 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x0, 0xfffffdfd, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:18 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:06:18 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

[  297.788367][ T9816] binder: 9814:9816 unknown command 0
[  297.794376][ T9816] binder: 9814:9816 ioctl c0306201 20000200 returned -22
10:06:19 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x0, 0xfffffdfd, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:19 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:06:19 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  298.161591][ T9823] binder: 9822:9823 unknown command 0
[  298.167697][ T9823] binder: 9822:9823 ioctl c0306201 20000200 returned -22
10:06:19 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x0, 0xfffffdfd, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  298.527786][ T9830] binder: 9828:9830 unknown command 0
[  298.533735][ T9830] binder: 9828:9830 ioctl c0306201 20000200 returned -22
10:06:19 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:06:19 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x0, 0xfffffdfd, &(0x7f00000002c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  299.149535][ T9836] binder: 9835:9836 unknown command 0
[  299.155413][ T9836] binder: 9835:9836 ioctl c0306201 20000200 returned -22
10:06:20 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x0)

10:06:20 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x0, 0xfffffdfd, &(0x7f00000002c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  299.795391][ T9843] binder: 9842:9843 unknown command 0
[  299.801343][ T9843] binder: 9842:9843 ioctl c0306201 20000200 returned -22
[  300.788128][ T9838] IPVS: ftp: loaded support on port[0] = 21
[  301.756870][ T9838] chnl_net:caif_netlink_parms(): no params data found
[  302.188900][ T9838] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.196980][ T9838] bridge0: port 1(bridge_slave_0) entered disabled state
[  302.242899][ T9838] device bridge_slave_0 entered promiscuous mode
[  302.275414][ T9838] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.285031][ T9838] bridge0: port 2(bridge_slave_1) entered disabled state
[  302.295066][ T9838] device bridge_slave_1 entered promiscuous mode
[  302.464994][ T9838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  302.494948][ T9838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  302.580190][ T9838] team0: Port device team_slave_0 added
[  302.604426][ T9838] team0: Port device team_slave_1 added
[  302.657944][ T9838] batman_adv: batadv0: Adding interface: batadv_slave_0
[  302.665695][ T9838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  302.673523][   T18] Bluetooth: hci3: command 0x0409 tx timeout
[  302.693852][ T9838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  302.727816][ T9838] batman_adv: batadv0: Adding interface: batadv_slave_1
[  302.735250][ T9838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  302.762299][ T9838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  302.924378][ T9838] device hsr_slave_0 entered promiscuous mode
[  302.954753][ T9838] device hsr_slave_1 entered promiscuous mode
[  302.963310][ T9838] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  302.970990][ T9838] Cannot create hsr debugfs directory
[  303.488141][ T9838] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  303.535695][ T9838] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  303.575443][ T9838] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  303.625412][ T9838] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  304.058466][ T9838] 8021q: adding VLAN 0 to HW filter on device bond0
[  304.099215][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  304.108878][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  304.133664][ T9838] 8021q: adding VLAN 0 to HW filter on device team0
[  304.154867][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  304.165495][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  304.175687][ T8482] bridge0: port 1(bridge_slave_0) entered blocking state
[  304.183317][ T8482] bridge0: port 1(bridge_slave_0) entered forwarding state
[  304.235782][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  304.245998][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  304.256207][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  304.266019][ T8482] bridge0: port 2(bridge_slave_1) entered blocking state
[  304.273559][ T8482] bridge0: port 2(bridge_slave_1) entered forwarding state
[  304.283020][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  304.294633][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  304.322842][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  304.334221][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  304.370900][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  304.381411][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  304.392194][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  304.449048][ T9838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  304.459923][ T9838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  304.486179][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  304.496215][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  304.507221][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  304.517496][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  304.587454][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  304.598613][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  304.607419][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  304.653913][ T9838] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.727492][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  304.738705][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  304.786173][ T8482] Bluetooth: hci3: command 0x041b tx timeout
[  304.840334][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  304.850174][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  304.866303][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  304.875736][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  304.890708][ T9838] device veth0_vlan entered promiscuous mode
[  304.936572][ T9838] device veth1_vlan entered promiscuous mode
[  305.028658][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  305.039238][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  305.049339][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  305.059728][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  305.087974][ T9838] device veth0_macvtap entered promiscuous mode
[  305.112639][ T9838] device veth1_macvtap entered promiscuous mode
[  305.167597][ T9838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  305.178752][ T9838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.189589][ T9838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  305.200457][ T9838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.210936][ T9838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  305.221745][ T9838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.236004][ T9838] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.244078][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  305.253870][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  305.263811][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  305.274376][ T8482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  305.305946][ T9838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  305.317084][ T9838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.328524][ T9838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  305.339220][ T9838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.354029][ T9838] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.366091][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  305.376719][ T9340] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  305.416310][ T9838] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.428071][ T9838] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.437819][ T9838] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.446994][ T9838] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.873325][T10063] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.881276][T10063] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.890158][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  305.975309][  T795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  305.983617][  T795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  305.995863][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
10:06:27 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:06:27 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x0)

10:06:27 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x0, 0xfffffdfd, &(0x7f00000002c0)})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:27 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

[  306.620499][T10093] binder: 10090:10093 unknown command 0
[  306.627242][T10093] binder: 10090:10093 ioctl c0306201 20000200 returned -22
[  306.824087][T10064] Bluetooth: hci3: command 0x040f tx timeout
10:06:27 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x0)

10:06:28 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:28 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

[  307.452999][T10103] binder: 10101:10103 unknown command 0
[  307.458700][T10103] binder: 10101:10103 ioctl c0306201 20000200 returned -22
10:06:28 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)

[  307.519327][T10103] binder: 10101:10103 ioctl c0306201 200000c0 returned -14
10:06:28 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:29 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)

10:06:29 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)

[  308.196467][T10113] binder: 10112:10113 unknown command 0
[  308.202582][T10113] binder: 10112:10113 ioctl c0306201 20000200 returned -22
[  308.260350][T10113] binder: 10112:10113 ioctl c0306201 200000c0 returned -14
10:06:29 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:29 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)

10:06:29 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

[  308.894480][T10123] binder: 10122:10123 unknown command 0
[  308.900908][T10123] binder: 10122:10123 ioctl c0306201 20000200 returned -22
[  308.913377][   T56] Bluetooth: hci3: command 0x0419 tx timeout
[  308.958359][T10124] binder: 10122:10124 ioctl c0306201 200000c0 returned -14
10:06:30 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:30 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0)

[  309.595734][T10132] binder: 10131:10132 unknown command 0
[  309.601807][T10132] binder: 10131:10132 ioctl c0306201 20000200 returned -22
[  309.652782][T10133] binder: 10131:10133 ioctl c0306201 200000c0 returned -14
[  309.665641][T10133] binder: 10131:10133 ioctl c0306201 0 returned -14
10:06:30 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:31 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0)

[  310.346440][T10138] binder: 10137:10138 unknown command 0
[  310.352637][T10138] binder: 10137:10138 ioctl c0306201 20000200 returned -22
[  310.381563][T10138] binder: 10137:10138 ioctl c0306201 200000c0 returned -14
[  310.430821][T10138] binder: 10137:10138 ioctl c0306201 0 returned -14
10:06:31 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0)

10:06:31 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)

10:06:31 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  311.273209][T10150] binder: 10148:10150 unknown command 0
[  311.279123][T10150] binder: 10148:10150 ioctl c0306201 20000200 returned -22
10:06:32 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x0, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  311.330866][T10151] binder: 10148:10151 ioctl c0306201 200000c0 returned -14
[  311.401539][T10153] binder: 10148:10153 ioctl c0306201 0 returned -14
10:06:32 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:32 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:06:33 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x0, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  312.161435][T10158] binder: 10157:10158 unknown command 0
[  312.167513][T10158] binder: 10157:10158 ioctl c0306201 20000200 returned -22
[  312.230857][T10159] binder: 10157:10159 ioctl c0306201 200000c0 returned -14
10:06:33 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:33 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x0, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  312.895483][T10167] binder: 10166:10167 unknown command 0
[  312.901362][T10167] binder: 10166:10167 ioctl c0306201 20000200 returned -22
[  312.960859][T10168] binder: 10166:10168 ioctl c0306201 200000c0 returned -14
10:06:34 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:34 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x0, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  313.651152][T10174] binder: 10173:10174 unknown command 0
[  313.657193][T10174] binder: 10173:10174 ioctl c0306201 20000200 returned -22
[  313.720476][T10175] binder: 10173:10175 ioctl c0306201 200000c0 returned -14
10:06:35 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)

10:06:35 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:35 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x0, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  314.337211][T10182] binder: 10179:10182 unknown command 0
[  314.343461][T10182] binder: 10179:10182 ioctl c0306201 20000200 returned -22
[  314.373234][T10182] binder: 10179:10182 ioctl c0306201 200000c0 returned -14
10:06:35 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:35 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x0, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:06:35 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

[  314.956612][T10188] binder: 10187:10188 unknown command 0
[  314.962681][T10188] binder: 10187:10188 ioctl c0306201 20000200 returned -22
[  314.987997][T10188] binder: 10187:10188 ioctl c0306201 200000c0 returned -14
10:06:36 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:36 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  315.731812][T10198] binder: 10196:10198 unknown command 0
[  315.738329][T10198] binder: 10196:10198 ioctl c0306201 20000200 returned -22
[  315.803270][T10199] binder: 10196:10199 ioctl c0306201 200000c0 returned -14
10:06:36 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:06:37 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  316.430809][T10204] binder: 10203:10204 unknown command 0
[  316.436801][T10204] binder: 10203:10204 ioctl c0306201 20000200 returned -22
[  316.499856][T10205] binder: 10203:10205 ioctl c0306201 200000c0 returned -14
10:06:37 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:06:37 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:37 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0)

10:06:38 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x14, 0x22, 0x925, 0x0, 0x0, {0x11}}, 0x14}}, 0x0)

[  317.159282][T10211] binder: 10209:10211 unknown command 0
[  317.165435][T10211] binder: 10209:10211 ioctl c0306201 20000200 returned -22
[  317.221536][T10214] binder: 10209:10214 ioctl c0306201 200000c0 returned -14
10:06:38 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000480)={0x64, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper, @release], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:38 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:06:38 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x14, 0x22, 0x925, 0x0, 0x0, {0x11}}, 0x14}}, 0x0)

[  317.986068][T10222] binder: 10220:10222 unknown command 0
[  317.991965][T10222] binder: 10220:10222 ioctl c0306201 20000200 returned -22
[  318.052854][T10222] binder: 10220:10222 ioctl c0306201 200000c0 returned -14
10:06:39 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

10:06:39 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x14, 0x22, 0x925, 0x0, 0x0, {0x11}}, 0x14}}, 0x0)

[  318.675307][T10229] binder: 10228:10229 unknown command 0
[  318.681289][T10229] binder: 10228:10229 ioctl c0306201 20000200 returned -22
[  318.753543][T10231] binder: 10228:10231 ioctl c0306201 200000c0 returned -14
[  318.777196][T10229] binder: 10228:10229 ioctl c0306201 0 returned -14
10:06:40 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

10:06:40 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  319.475180][T10237] binder: 10235:10237 unknown command 0
[  319.482479][T10237] binder: 10235:10237 ioctl c0306201 20000200 returned -22
[  319.519741][T10237] binder: 10235:10237 ioctl c0306201 200000c0 returned -14
[  319.568950][T10237] binder: 10235:10237 ioctl c0306201 0 returned -14
10:06:40 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0)

10:06:40 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:06:40 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0)

[  320.152817][T10244] binder: 10241:10244 unknown command 0
[  320.158763][T10244] binder: 10241:10244 ioctl c0306201 20000200 returned -22
[  320.223552][T10247] binder: 10241:10247 ioctl c0306201 200000c0 returned -14
10:06:41 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

[  320.277054][T10244] binder: 10241:10244 ioctl c0306201 0 returned -14
10:06:41 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:06:41 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  320.959211][T10255] binder: 10253:10255 unknown command 0
[  320.965267][T10255] binder: 10253:10255 ioctl c0306201 20000200 returned -22
[  321.023673][T10257] binder: 10253:10257 ioctl c0306201 200000c0 returned -14
10:06:42 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:06:42 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:06:42 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:06:42 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:06:43 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:43 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

[  322.292221][T10270] binder: 10268:10270 unknown command 0
[  322.298135][T10270] binder: 10268:10270 ioctl c0306201 20000200 returned -22
10:06:43 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0)

[  322.351854][T10272] binder: 10268:10272 ioctl c0306201 200000c0 returned -14
10:06:43 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:06:43 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic]}]}, 0x28}}, 0x0)

10:06:44 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:06:44 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic]}]}, 0x28}}, 0x0)

10:06:44 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:44 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

[  323.710713][T10289] binder: 10287:10289 unknown command 0
[  323.716826][T10289] binder: 10287:10289 ioctl c0306201 20000200 returned -22
[  323.780266][T10290] binder: 10287:10290 ioctl c0306201 200000c0 returned -14
10:06:44 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic]}]}, 0x28}}, 0x0)

10:06:45 executing program 2:
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:06:45 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x38, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x23, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354"]}]}, 0x38}}, 0x0)

10:06:45 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

[  324.555907][T10276] not chained 10000 origins
[  324.560764][T10276] CPU: 1 PID: 10276 Comm: syz-executor.3 Not tainted 5.12.0-rc6-syzkaller #0
[  324.562246][T10276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  324.562246][T10276] Call Trace:
[  324.562246][T10276]  dump_stack+0x24c/0x2e0
[  324.562246][T10276]  kmsan_internal_chain_origin+0x6f/0x130
[  324.562246][T10276]  ? rawv6_sendmsg+0x4329/0x46b0
[  324.562246][T10276]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  324.562246][T10276]  ? kmsan_get_metadata+0x116/0x180
[  324.606818][T10276]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  324.606818][T10276]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  324.606818][T10276]  ? kmsan_get_metadata+0x116/0x180
[  324.606818][T10276]  ? kmsan_internal_set_origin+0x85/0xc0
[  324.606818][T10276]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  324.606818][T10276]  ? kmsan_unpoison_shadow+0x74/0xa0
[  324.606818][T10276]  ? _copy_from_user+0x1fd/0x300
[  324.606818][T10276]  __msan_chain_origin+0x54/0xa0
[  324.606818][T10276]  __get_compat_msghdr+0x6db/0x9d0
[  324.606818][T10276]  get_compat_msghdr+0x108/0x2b0
[  324.606818][T10276]  __sys_sendmmsg+0x79d/0x1010
[  324.606818][T10276]  ? kmsan_internal_check_memory+0xb5/0x520
[  324.606818][T10276]  ? _copy_to_user+0x1d2/0x270
[  324.606818][T10276]  ? kmsan_get_metadata+0x116/0x180
[  324.606818][T10276]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  324.606818][T10276]  ? kmsan_get_metadata+0x116/0x180
[  324.606818][T10276]  ? kmsan_get_metadata+0x116/0x180
[  324.606818][T10276]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  324.606818][T10276]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  324.606818][T10276]  __do_fast_syscall_32+0x127/0x180
[  324.606818][T10276]  do_fast_syscall_32+0x77/0xd0
[  324.606818][T10276]  do_SYSENTER_32+0x73/0x90
[  324.606818][T10276]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  324.606818][T10276] RIP: 0023:0xf7f2e549
[  324.606818][T10276] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  324.606818][T10276] RSP: 002b:00000000f55285fc EFLAGS: 00000296 ORIG_RAX: 0000000000000159
[  324.606818][T10276] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000480
[  324.606818][T10276] RDX: 00000000000002e9 RSI: 0000000000000000 RDI: 0000000000000000
[  324.606818][T10276] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  324.606818][T10276] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  324.606818][T10276] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  324.606818][T10276] Uninit was stored to memory at:
[  324.606818][T10276]  kmsan_internal_chain_origin+0xad/0x130
[  324.606818][T10276]  __msan_chain_origin+0x54/0xa0
[  324.606818][T10276]  __get_compat_msghdr+0x6db/0x9d0
[  324.606818][T10276]  get_compat_msghdr+0x108/0x2b0
[  324.606818][T10276]  __sys_sendmmsg+0x79d/0x1010
[  324.606818][T10276]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  324.606818][T10276]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  324.606818][T10276]  __do_fast_syscall_32+0x127/0x180
[  324.606818][T10276]  do_fast_syscall_32+0x77/0xd0
[  324.606818][T10276]  do_SYSENTER_32+0x73/0x90
[  324.606818][T10276]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  324.606818][T10276] 
[  324.606818][T10276] Uninit was stored to memory at:
[  324.606818][T10276]  kmsan_internal_chain_origin+0xad/0x130
[  324.606818][T10276]  __msan_chain_origin+0x54/0xa0
[  324.606818][T10276]  __get_compat_msghdr+0x6db/0x9d0
[  324.606818][T10276]  get_compat_msghdr+0x108/0x2b0
[  324.606818][T10276]  __sys_sendmmsg+0x79d/0x1010
[  324.606818][T10276]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  324.606818][T10276]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  324.606818][T10276]  __do_fast_syscall_32+0x127/0x180
[  324.606818][T10276]  do_fast_syscall_32+0x77/0xd0
[  324.606818][T10276]  do_SYSENTER_32+0x73/0x90
[  324.606818][T10276]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  324.606818][T10276] 
[  324.606818][T10276] Uninit was stored to memory at:
[  324.606818][T10276]  kmsan_internal_chain_origin+0xad/0x130
[  324.606818][T10276]  __msan_chain_origin+0x54/0xa0
[  324.606818][T10276]  __get_compat_msghdr+0x6db/0x9d0
[  324.606818][T10276]  get_compat_msghdr+0x108/0x2b0
[  324.606818][T10276]  __sys_sendmmsg+0x79d/0x1010
[  324.606818][T10276]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  324.606818][T10276]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  324.606818][T10276]  __do_fast_syscall_32+0x127/0x180
[  324.606818][T10276]  do_fast_syscall_32+0x77/0xd0
[  324.606818][T10276]  do_SYSENTER_32+0x73/0x90
[  324.606818][T10276]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  324.606818][T10276] 
[  324.606818][T10276] Uninit was stored to memory at:
[  324.606818][T10276]  kmsan_internal_chain_origin+0xad/0x130
[  324.606818][T10276]  __msan_chain_origin+0x54/0xa0
[  324.606818][T10276]  __get_compat_msghdr+0x6db/0x9d0
[  324.606818][T10276]  get_compat_msghdr+0x108/0x2b0
[  324.606818][T10276]  __sys_sendmmsg+0x79d/0x1010
[  324.606818][T10276]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  324.606818][T10276]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  324.606818][T10276]  __do_fast_syscall_32+0x127/0x180
[  324.606818][T10276]  do_fast_syscall_32+0x77/0xd0
[  324.606818][T10276]  do_SYSENTER_32+0x73/0x90
[  324.606818][T10276]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  324.606818][T10276] 
[  324.606818][T10276] Uninit was stored to memory at:
[  324.606818][T10276]  kmsan_internal_chain_origin+0xad/0x130
[  324.606818][T10276]  __msan_chain_origin+0x54/0xa0
[  324.606818][T10276]  __get_compat_msghdr+0x6db/0x9d0
[  324.606818][T10276]  get_compat_msghdr+0x108/0x2b0
[  324.606818][T10276]  __sys_sendmmsg+0x79d/0x1010
[  324.606818][T10276]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  324.606818][T10276]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  324.606818][T10276]  __do_fast_syscall_32+0x127/0x180
[  324.606818][T10276]  do_fast_syscall_32+0x77/0xd0
[  324.606818][T10276]  do_SYSENTER_32+0x73/0x90
[  324.606818][T10276]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  324.606818][T10276] 
[  324.606818][T10276] Uninit was stored to memory at:
[  324.606818][T10276]  kmsan_internal_chain_origin+0xad/0x130
[  324.606818][T10276]  __msan_chain_origin+0x54/0xa0
[  324.606818][T10276]  __get_compat_msghdr+0x6db/0x9d0
[  324.606818][T10276]  get_compat_msghdr+0x108/0x2b0
[  324.606818][T10276]  __sys_sendmmsg+0x79d/0x1010
[  324.606818][T10276]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  324.606818][T10276]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  324.606818][T10276]  __do_fast_syscall_32+0x127/0x180
[  324.606818][T10276]  do_fast_syscall_32+0x77/0xd0
[  324.606818][T10276]  do_SYSENTER_32+0x73/0x90
[  324.606818][T10276]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  324.606818][T10276] 
[  324.606818][T10276] Uninit was stored to memory at:
[  324.606818][T10276]  kmsan_internal_chain_origin+0xad/0x130
[  324.606818][T10276]  __msan_chain_origin+0x54/0xa0
[  324.606818][T10276]  __get_compat_msghdr+0x6db/0x9d0
[  324.606818][T10276]  get_compat_msghdr+0x108/0x2b0
[  324.606818][T10276]  __sys_sendmmsg+0x79d/0x1010
[  324.606818][T10276]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  324.606818][T10276]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  324.606818][T10276]  __do_fast_syscall_32+0x127/0x180
[  324.606818][T10276]  do_fast_syscall_32+0x77/0xd0
[  324.606818][T10276]  do_SYSENTER_32+0x73/0x90
[  324.606818][T10276]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  324.606818][T10276] 
[  324.606818][T10276] Local variable ----msg_sys@__sys_sendmmsg created at:
[  324.606818][T10276]  __sys_sendmmsg+0xbd/0x1010
[  324.606818][T10276]  __sys_sendmmsg+0xbd/0x1010
10:06:46 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x5c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer, @register_looper], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

[  325.714226][ T3124] ieee802154 phy0 wpan0: encryption failed: -22
[  325.720721][ T3124] ieee802154 phy1 wpan1: encryption failed: -22
[  326.866099][T10305] binder: 10303:10305 unknown command 0
[  326.871946][T10305] binder: 10303:10305 ioctl c0306201 20000200 returned -22
[  326.898310][T10305] binder: 10303:10305 ioctl c0306201 200000c0 returned -14
10:06:48 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:06:48 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x38, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x23, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354"]}]}, 0x38}}, 0x0)

10:06:48 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x58, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}, @free_buffer], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:48 executing program 2:
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

[  327.564817][T10314] binder: 10310:10314 unknown command 0
[  327.572222][T10314] binder: 10310:10314 ioctl c0306201 20000200 returned -22
[  327.603871][T10314] binder: 10310:10314 ioctl c0306201 200000c0 returned -14
10:06:48 executing program 2:
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:06:48 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x38, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x23, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354"]}]}, 0x38}}, 0x0)

[  327.849462][T10300] IPVS: ftp: loaded support on port[0] = 21
10:06:49 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:49 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

[  328.438005][T10351] binder: 10349:10351 unknown command 0
[  328.444222][T10351] binder: 10349:10351 ioctl c0306201 20000200 returned -22
10:06:49 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

[  328.478629][T10351] binder: 10349:10351 ioctl c0306201 200000c0 returned -14
10:06:49 executing program 2:
r0 = socket$inet6(0xa, 0x0, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

[  329.094898][T10300] chnl_net:caif_netlink_parms(): no params data found
[  329.488386][T10300] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.496304][T10300] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.506578][T10300] device bridge_slave_0 entered promiscuous mode
[  329.529375][T10300] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.537380][T10300] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.547375][T10300] device bridge_slave_1 entered promiscuous mode
[  329.733245][T10300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  329.774504][T10300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  329.793708][   T56] Bluetooth: hci4: command 0x0409 tx timeout
[  329.899670][T10300] team0: Port device team_slave_0 added
[  329.920483][T10300] team0: Port device team_slave_1 added
[  330.029110][T10300] batman_adv: batadv0: Adding interface: batadv_slave_0
[  330.036548][T10300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.063578][T10300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  330.147607][T10300] batman_adv: batadv0: Adding interface: batadv_slave_1
[  330.155902][T10300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  330.183417][T10300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  330.361049][T10300] device hsr_slave_0 entered promiscuous mode
[  330.404662][T10300] device hsr_slave_1 entered promiscuous mode
[  330.435434][T10300] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  330.444086][T10300] Cannot create hsr debugfs directory
[  330.970843][T10300] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  331.018380][T10300] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  331.040698][T10300] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  331.066945][T10300] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  331.568002][T10300] 8021q: adding VLAN 0 to HW filter on device bond0
[  331.615383][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  331.625278][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  331.655630][T10300] 8021q: adding VLAN 0 to HW filter on device team0
[  331.690769][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  331.701872][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  331.711882][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  331.719533][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  331.777578][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  331.787832][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  331.798624][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  331.808782][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  331.816720][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  331.826394][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  331.837973][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  331.865788][   T56] Bluetooth: hci4: command 0x041b tx timeout
[  332.068644][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  332.080651][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  332.091514][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  332.102541][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  332.113471][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  332.124068][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  332.134233][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  332.144882][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  332.161875][T10300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  332.308874][T10300] 8021q: adding VLAN 0 to HW filter on device batadv0
[  332.317575][ T1979] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  332.327796][ T1979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  332.336127][ T1979] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  332.548734][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  332.559213][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  332.642239][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  332.653017][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  332.676702][T10300] device veth0_vlan entered promiscuous mode
[  332.686416][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  332.698036][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  332.741201][T10300] device veth1_vlan entered promiscuous mode
[  332.784422][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  332.796131][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  332.854664][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  332.865960][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  332.890537][T10300] device veth0_macvtap entered promiscuous mode
[  332.918850][T10300] device veth1_macvtap entered promiscuous mode
[  332.977323][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  332.988298][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.000510][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  333.012145][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.022223][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  333.033003][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.043079][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  333.053936][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.068449][T10300] batman_adv: batadv0: Interface activated: batadv_slave_0
[  333.077283][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  333.087014][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  333.096979][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  333.107716][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  333.139870][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  333.151198][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.163037][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  333.173883][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.184125][T10300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  333.195092][T10300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  333.209260][T10300] batman_adv: batadv0: Interface activated: batadv_slave_1
[  333.217563][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  333.227969][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  333.262641][T10300] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  333.271763][T10300] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  333.283058][T10300] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  333.292422][T10300] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  333.621671][  T890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  333.630467][  T890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  333.680434][ T1977] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  333.813130][T10568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  333.822824][T10568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  333.835560][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  333.945151][   T56] Bluetooth: hci4: command 0x040f tx timeout
10:06:55 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:06:55 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:06:55 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0), 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:55 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:06:55 executing program 2:
r0 = socket$inet6(0xa, 0x0, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

[  334.474973][T10596] binder: 10592:10596 unknown command 0
[  334.480960][T10596] binder: 10592:10596 ioctl c0306201 20000200 returned -22
[  334.531849][T10602] binder: 10592:10602 ioctl c0306201 200000c0 returned -14
10:06:55 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:06:55 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0), 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:56 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:06:56 executing program 2:
r0 = socket$inet6(0xa, 0x0, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:06:56 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

[  335.324573][T10612] binder: 10609:10612 unknown command 0
[  335.330369][T10612] binder: 10609:10612 ioctl c0306201 20000200 returned -22
[  335.389270][T10614] binder: 10609:10614 ioctl c0306201 200000c0 returned -14
10:06:56 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x44, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2f, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc43"]}]}, 0x44}}, 0x0)

10:06:56 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

[  336.022395][T10587] Bluetooth: hci4: command 0x0419 tx timeout
10:06:57 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:06:57 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:06:57 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x44, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2f, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc43"]}]}, 0x44}}, 0x0)

10:06:57 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000005c0), 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:57 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:06:57 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x44, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2f, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc43"]}]}, 0x44}}, 0x0)

[  336.815160][T10639] binder: 10637:10639 unknown command 0
[  336.821022][T10639] binder: 10637:10639 ioctl c0306201 20000200 returned -22
10:06:57 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

[  336.876406][T10641] binder: 10637:10641 ioctl c0306201 200000c0 returned -14
10:06:58 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:06:58 executing program 3:
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0)

10:06:58 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x31, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7"]}]}, 0x48}}, 0x0)

10:06:58 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:06:58 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:59 executing program 3:
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0)

10:06:59 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:06:59 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x31, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7"]}]}, 0x48}}, 0x0)

10:06:59 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

[  338.370815][T10664] binder: 10662:10664 unknown command 0
[  338.376973][T10664] binder: 10662:10664 ioctl c0306201 20000200 returned -22
[  338.435409][T10666] binder: 10662:10666 ioctl c0306201 200000c0 returned -14
10:06:59 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:06:59 executing program 3:
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r0, 0x0)

10:07:00 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x31, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7"]}]}, 0x48}}, 0x0)

10:07:00 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:00 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

[  339.352890][T10681] binder: 10679:10681 unknown command 0
[  339.358687][T10681] binder: 10679:10681 ioctl c0306201 20000200 returned -22
[  339.415624][T10683] binder: 10679:10683 ioctl c0306201 200000c0 returned -14
10:07:00 executing program 3:
r0 = socket$inet6(0xa, 0x0, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:00 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:07:00 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:00 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2a, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x40}}, 0x0)

10:07:01 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

[  340.239558][T10700] binder: 10694:10700 unknown command 0
[  340.245839][T10700] binder: 10694:10700 ioctl c0306201 20000200 returned -22
[  340.296054][T10703] binder: 10694:10703 ioctl c0306201 200000c0 returned -14
10:07:01 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:01 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2a, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x40}}, 0x0)

10:07:01 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:07:01 executing program 3:
r0 = socket$inet6(0xa, 0x0, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:01 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

[  341.083618][T10711] binder: 10710:10711 unknown command 0
[  341.091637][T10711] binder: 10710:10711 ioctl c0306201 20000200 returned -22
10:07:02 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

[  341.161907][T10714] binder: 10710:10714 ioctl c0306201 200000c0 returned -14
10:07:02 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2a, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x40}}, 0x0)

10:07:02 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:07:02 executing program 3:
r0 = socket$inet6(0xa, 0x0, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:02 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:02 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

[  341.931166][T10727] binder: 10726:10727 unknown command 0
[  341.937103][T10727] binder: 10726:10727 ioctl c0306201 20000200 returned -22
10:07:03 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2a, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x40}}, 0x0)

[  342.001019][T10728] binder: 10726:10728 ioctl c0306201 200000c0 returned -14
10:07:03 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x50, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a4965094"})

10:07:03 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:03 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:03 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:03 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2a, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x40}}, 0x0)

[  342.946729][T10744] binder: 10742:10744 unknown command 0
[  342.952985][T10744] binder: 10742:10744 ioctl c0306201 20000200 returned -22
[  343.025425][T10747] binder: 10742:10747 ioctl c0306201 200000c0 returned -14
10:07:04 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:04 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x0, 0x0, 0x0})

10:07:04 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:04 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2a, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x40}}, 0x0)

10:07:04 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

[  343.788043][T10759] binder: 10758:10759 unknown command 0
[  343.794145][T10759] binder: 10758:10759 ioctl c0306201 20000200 returned -22
10:07:04 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

[  343.836678][T10759] binder: 10758:10759 ioctl c0306201 200000c0 returned -14
10:07:05 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x0, 0x0, 0x0})

10:07:05 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:05 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:05 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:05 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

[  344.648138][T10774] binder: 10773:10774 unknown command 0
[  344.654485][T10774] binder: 10773:10774 ioctl c0306201 20000200 returned -22
[  344.711077][T10777] binder: 10773:10777 ioctl c0306201 200000c0 returned -14
10:07:06 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x0, 0x0, 0x0})

10:07:06 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:06 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:06 executing program 4:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:06 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

[  345.576482][T10794] binder: 10789:10794 unknown command 0
[  345.582719][T10794] binder: 10789:10794 ioctl c0306201 20000200 returned -22
[  345.644865][T10794] binder: 10789:10794 ioctl c0306201 200000c0 returned -14
10:07:06 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:06 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:07 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x0, 0x0, &(0x7f0000000540)})

10:07:07 executing program 4:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:07 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:07 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

[  346.493644][T10809] binder: 10807:10809 unknown command 0
[  346.499486][T10809] binder: 10807:10809 ioctl c0306201 20000200 returned -22
[  346.556112][T10811] binder: 10807:10811 ioctl c0306201 200000c0 returned -14
10:07:07 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:07 executing program 4:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:07 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x0, 0x0, &(0x7f0000000540)})

10:07:08 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:08 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

[  347.321084][T10823] binder: 10820:10823 unknown command 0
[  347.327198][T10823] binder: 10820:10823 ioctl c0306201 20000200 returned -22
10:07:08 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

[  347.391896][T10825] binder: 10820:10825 ioctl c0306201 200000c0 returned -14
10:07:08 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x0, 0x0, &(0x7f0000000540)})

10:07:08 executing program 4:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:08 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:09 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

[  348.008089][T10834] binder: 10831:10834 unknown command 0
[  348.014118][T10834] binder: 10831:10834 ioctl c0306201 20000200 returned -22
[  348.054175][T10834] binder: 10831:10834 ioctl c0306201 200000c0 returned -14
10:07:09 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:09 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x28, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1a"})

10:07:09 executing program 4:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:09 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:09 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

[  348.753135][T10844] binder: 10843:10844 unknown command 0
[  348.758933][T10844] binder: 10843:10844 ioctl c0306201 20000200 returned -22
[  348.828303][T10848] binder: 10843:10848 ioctl c0306201 200000c0 returned -14
10:07:10 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:10 executing program 4:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:10 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x28, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1a"})

10:07:10 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:10 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, 0x0, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

[  349.544953][T10859] binder: 10855:10859 unknown command 0
[  349.550863][T10859] binder: 10855:10859 ioctl c0306201 20000200 returned -22
[  349.640782][T10862] binder: 10855:10862 ioctl c0306201 200000c0 returned -14
10:07:10 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:11 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:11 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x28, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1a"})

10:07:11 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:11 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

[  350.382191][T10873] binder: 10869:10873 unknown command 0
[  350.388066][T10873] binder: 10869:10873 ioctl c0306201 20000200 returned -22
[  350.463794][T10876] binder: 10869:10876 ioctl c0306201 200000c0 returned -14
10:07:11 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:11 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:11 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x3c, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f58"})

10:07:11 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:12 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

[  351.172834][T10887] binder: 10884:10887 unknown command 0
[  351.178976][T10887] binder: 10884:10887 ioctl c0306201 20000200 returned -22
[  351.231797][T10889] binder: 10884:10889 ioctl c0306201 200000c0 returned -14
10:07:12 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:12 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x3c, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f58"})

10:07:12 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:12 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:13 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

[  352.076729][T10904] binder: 10899:10904 unknown command 0
[  352.082635][T10904] binder: 10899:10904 ioctl c0306201 20000200 returned -22
[  352.126061][T10904] binder: 10899:10904 ioctl c0306201 200000c0 returned -14
10:07:13 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:13 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:13 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:13 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x3c, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f58"})

10:07:13 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:14 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

[  353.003924][T10919] binder: 10917:10919 unknown command 0
[  353.009636][T10919] binder: 10917:10919 ioctl c0306201 20000200 returned -22
10:07:14 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

[  353.055144][T10921] binder: 10917:10921 ioctl c0306201 200000c0 returned -14
[  353.223172][ T1979] Bluetooth: hci0: command 0x0406 tx timeout
10:07:14 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x46, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40"})

10:07:14 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:14 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:14 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:14 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

[  353.802623][T10931] binder: 10930:10931 unknown command 0
[  353.808534][T10931] binder: 10930:10931 ioctl c0306201 20000200 returned -22
[  353.857211][T10934] binder: 10930:10934 ioctl c0306201 200000c0 returned -14
10:07:15 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x46, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40"})

10:07:15 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:15 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:15 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:15 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, 0x0, 0x0)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

[  354.721474][T10947] binder: 10945:10947 unknown command 0
[  354.727688][T10947] binder: 10945:10947 ioctl c0306201 20000200 returned -22
[  354.793518][T10950] binder: 10945:10950 ioctl c0306201 200000c0 returned -14
10:07:16 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:16 executing program 1:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:16 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x46, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40"})

10:07:16 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:16 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:16 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

[  355.592429][T10964] binder: 10962:10964 unknown command 0
[  355.598539][T10964] binder: 10962:10964 ioctl c0306201 20000200 returned -22
[  355.687522][T10966] binder: 10962:10966 ioctl c0306201 200000c0 returned -14
10:07:16 executing program 1:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:17 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x4b, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda"})

10:07:17 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:17 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

[  356.364766][T10978] binder: 10976:10978 unknown command 0
[  356.370576][T10978] binder: 10976:10978 ioctl c0306201 20000200 returned -22
[  356.443689][T10980] binder: 10976:10980 ioctl c0306201 200000c0 returned -14
10:07:17 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:17 executing program 1:
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:17 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x4b, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda"})

10:07:18 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:18 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:18 executing program 5 (fault-call:5 fault-nth:0):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  357.217339][T10993] binder: 10991:10993 unknown command 0
[  357.223640][T10993] binder: 10991:10993 ioctl c0306201 20000200 returned -22
10:07:18 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

[  357.280249][T10995] binder: 10991:10995 ioctl c0306201 200000c0 returned -14
10:07:18 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:18 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x4b, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda"})

10:07:19 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:19 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:19 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

[  358.228143][T11005] binder: 11004:11005 unknown command 0
[  358.234578][T11005] binder: 11004:11005 ioctl c0306201 20000200 returned -22
[  358.265128][T11005] binder: 11004:11005 ioctl c0306201 200000c0 returned -14
10:07:19 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x4e, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a496"})

10:07:19 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:19 executing program 1:
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

[  358.781136][T11016] binder: 11014:11016 unknown command 0
[  358.787201][T11016] binder: 11014:11016 ioctl c0306201 20000200 returned -22
[  358.812795][T11016] binder: 11014:11016 ioctl c0306201 200000c0 returned -14
10:07:20 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:20 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

[  361.808783][T11030] IPVS: ftp: loaded support on port[0] = 21
[  362.155234][T11030] chnl_net:caif_netlink_parms(): no params data found
[  362.365223][T11030] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.373189][T11030] bridge0: port 1(bridge_slave_0) entered disabled state
[  362.383297][T11030] device bridge_slave_0 entered promiscuous mode
[  362.400266][T11030] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.408173][T11030] bridge0: port 2(bridge_slave_1) entered disabled state
[  362.418795][T11030] device bridge_slave_1 entered promiscuous mode
[  362.473749][T11030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  362.496235][T11030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  362.549552][T11030] team0: Port device team_slave_0 added
[  362.566221][T11030] team0: Port device team_slave_1 added
[  362.626906][T11030] batman_adv: batadv0: Adding interface: batadv_slave_0
[  362.634338][T11030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.661104][T11030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  362.691128][T11030] batman_adv: batadv0: Adding interface: batadv_slave_1
[  362.699915][T11030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.728857][T11030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  362.785467][T11030] device hsr_slave_0 entered promiscuous mode
[  362.798619][T11030] device hsr_slave_1 entered promiscuous mode
[  362.807312][T11030] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  362.815664][T11030] Cannot create hsr debugfs directory
[  363.059579][T11030] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  363.095456][T11030] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  363.119523][T11030] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  363.159674][T11030] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  363.386593][T11030] 8021q: adding VLAN 0 to HW filter on device bond0
[  363.417433][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  363.427506][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  363.453128][T11030] 8021q: adding VLAN 0 to HW filter on device team0
[  363.471344][T10587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  363.481815][T10587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  363.492324][T10587] bridge0: port 1(bridge_slave_0) entered blocking state
[  363.499648][T10587] bridge0: port 1(bridge_slave_0) entered forwarding state
[  363.510953][T10587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  363.529651][T10587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  363.539631][T10587] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  363.549178][T10587] bridge0: port 2(bridge_slave_1) entered blocking state
[  363.556609][T10587] bridge0: port 2(bridge_slave_1) entered forwarding state
[  363.586730][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  363.606592][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  363.624138][    T7] Bluetooth: hci5: command 0x0409 tx timeout
[  363.634359][T10587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  363.645580][T10587] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  363.678850][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  363.689418][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  363.700705][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  363.727224][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  363.737638][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  363.762841][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  363.772833][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  363.796187][T11030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  363.838875][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  363.847112][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  363.870712][T11030] 8021q: adding VLAN 0 to HW filter on device batadv0
[  364.004396][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  364.016095][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  364.070230][ T1979] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  364.080314][ T1979] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  364.093090][ T1979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  364.104101][ T1979] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  364.130182][T11030] device veth0_vlan entered promiscuous mode
[  364.159996][T11030] device veth1_vlan entered promiscuous mode
[  364.219493][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  364.232642][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  364.255242][T11030] device veth0_macvtap entered promiscuous mode
[  364.276934][T11030] device veth1_macvtap entered promiscuous mode
[  364.315131][T11030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  364.326094][T11030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.340539][T11030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  364.352199][T11030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.362503][T11030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  364.373476][T11030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.383623][T11030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  364.395108][T11030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.405403][T11030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  364.416877][T11030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.430410][T11030] batman_adv: batadv0: Interface activated: batadv_slave_0
[  364.439311][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  364.449131][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  364.459075][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  364.469767][T10064] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  364.514660][T11030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  364.525594][T11030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.536699][T11030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  364.547672][T11030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.558173][T11030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  364.569143][T11030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.579584][T11030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  364.590470][T11030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.604959][T11030] batman_adv: batadv0: Interface activated: batadv_slave_1
[  364.613162][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  364.623746][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  364.657555][T11030] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  364.667622][T11030] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  364.677309][T11030] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.686492][T11030] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  365.053878][T10568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.061964][T10568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.097548][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  365.190072][T10568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.198340][T10568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.209812][ T4652] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  365.384183][T11274] FAULT_INJECTION: forcing a failure.
[  365.384183][T11274] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  365.397951][T11274] CPU: 1 PID: 11274 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0
[  365.407003][T11274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  365.407722][T11274] Call Trace:
[  365.407722][T11274]  dump_stack+0x24c/0x2e0
[  365.407722][T11274]  should_fail+0x8bd/0x9e0
[  365.407722][T11274]  should_fail_usercopy+0x39/0x40
[  365.407722][T11274]  _copy_from_user+0x63/0x300
[  365.407722][T11274]  __get_compat_msghdr+0x106/0x9d0
[  365.407722][T11274]  ? kmsan_get_metadata+0x116/0x180
[  365.407722][T11274]  ? kmsan_internal_set_origin+0x85/0xc0
[  365.452325][T11274]  ? rcu_read_unlock_strict+0x9/0x10
[  365.452325][T11274]  get_compat_msghdr+0x108/0x2b0
[  365.452325][T11274]  __sys_sendmsg+0x4ac/0x830
[  365.452325][T11274]  ? kmsan_get_metadata+0x116/0x180
[  365.452325][T11274]  ? kmsan_get_metadata+0x116/0x180
[  365.482338][T11274]  ? kmsan_internal_set_origin+0x85/0xc0
[  365.482338][T11274]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  365.482338][T11274]  ? __msan_instrument_asm_store+0x107/0x130
[  365.500000][T11274]  ? fput+0x82/0x320
[  365.500000][T11274]  ? kmsan_get_metadata+0x116/0x180
[  365.512323][T11274]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  365.512323][T11274]  ? kmsan_get_metadata+0x116/0x180
[  365.512323][T11274]  ? kmsan_get_metadata+0x116/0x180
[  365.512323][T11274]  __se_compat_sys_sendmsg+0xa7/0xc0
[  365.512323][T11274]  __ia32_compat_sys_sendmsg+0x4a/0x70
[  365.512323][T11274]  __do_fast_syscall_32+0x127/0x180
[  365.512323][T11274]  do_fast_syscall_32+0x77/0xd0
[  365.512323][T11274]  do_SYSENTER_32+0x73/0x90
[  365.512323][T11274]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  365.512323][T11274] RIP: 0023:0xf7f6a549
[  365.512323][T11274] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  365.512323][T11274] RSP: 002b:00000000f55645fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  365.512323][T11274] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020001240
[  365.512323][T11274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  365.512323][T11274] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  365.512323][T11274] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  365.512323][T11274] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
10:07:26 executing program 5 (fault-call:5 fault-nth:1):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:26 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x4e, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a496"})

10:07:26 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:26 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:26 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:26 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

[  365.704977][    T7] Bluetooth: hci5: command 0x041b tx timeout
[  366.069007][T11287] binder: 11278:11287 unknown command 0
[  366.076054][T11287] binder: 11278:11287 ioctl c0306201 20000200 returned -22
[  366.133192][T11288] binder: 11278:11288 ioctl c0306201 200000c0 returned -14
10:07:27 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:27 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:27 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:27 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, 0x0, 0x0, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:27 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x4e, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a496"})

[  366.523626][T11290] FAULT_INJECTION: forcing a failure.
[  366.523626][T11290] name failslab, interval 1, probability 0, space 0, times 1
[  366.537725][T11290] CPU: 1 PID: 11290 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0
[  366.546955][T11290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  366.547094][T11290] Call Trace:
[  366.547094][T11290]  dump_stack+0x24c/0x2e0
[  366.547094][T11290]  should_fail+0x8bd/0x9e0
[  366.547094][T11290]  __should_failslab+0x1f1/0x290
[  366.547094][T11290]  should_failslab+0x29/0x70
[  366.547094][T11290]  kmem_cache_alloc_node+0xff/0x1180
[  366.547094][T11290]  ? __alloc_skb+0x33a/0xe90
[  366.547094][T11290]  __alloc_skb+0x33a/0xe90
[  366.547094][T11290]  netlink_sendmsg+0xdbc/0x1840
[  366.547094][T11290]  ____sys_sendmsg+0xcfc/0x12f0
[  366.547094][T11290]  ? netlink_getsockopt+0x1830/0x1830
[  366.547094][T11290]  __sys_sendmsg+0x714/0x830
[  366.547094][T11290]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  366.547094][T11290]  ? __msan_instrument_asm_store+0x107/0x130
[  366.547094][T11290]  ? fput+0x82/0x320
[  366.547094][T11290]  ? kmsan_get_metadata+0x116/0x180
[  366.547094][T11290]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  366.547094][T11290]  ? kmsan_get_metadata+0x116/0x180
[  366.547094][T11290]  ? kmsan_get_metadata+0x116/0x180
[  366.547094][T11290]  __se_compat_sys_sendmsg+0xa7/0xc0
[  366.547094][T11290]  __ia32_compat_sys_sendmsg+0x4a/0x70
[  366.547094][T11290]  __do_fast_syscall_32+0x127/0x180
[  366.547094][T11290]  do_fast_syscall_32+0x77/0xd0
[  366.547094][T11290]  do_SYSENTER_32+0x73/0x90
[  366.547094][T11290]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  366.547094][T11290] RIP: 0023:0xf7f6a549
[  366.547094][T11290] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  366.547094][T11290] RSP: 002b:00000000f55645fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  366.547094][T11290] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020001240
[  366.547094][T11290] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  366.547094][T11290] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  366.547094][T11290] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  366.547094][T11290] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
10:07:28 executing program 5 (fault-call:5 fault-nth:2):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:28 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

[  367.327422][T11300] binder: 11298:11300 unknown command 0
[  367.333692][T11300] binder: 11298:11300 ioctl c0306201 20000200 returned -22
[  367.368521][T11300] binder: 11298:11300 ioctl c0306201 200000c0 returned -14
10:07:28 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:28 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x4f, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a49650"})

10:07:28 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, 0x0, 0x0, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:28 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

[  367.784153][ T9340] Bluetooth: hci5: command 0x040f tx timeout
[  367.823120][T11308] FAULT_INJECTION: forcing a failure.
[  367.823120][T11308] name failslab, interval 1, probability 0, space 0, times 0
[  367.836235][T11308] CPU: 1 PID: 11308 Comm: syz-executor.5 Not tainted 5.12.0-rc6-syzkaller #0
[  367.845213][T11308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  367.846043][T11308] Call Trace:
[  367.846043][T11308]  dump_stack+0x24c/0x2e0
[  367.862135][T11308]  should_fail+0x8bd/0x9e0
[  367.862135][T11308]  __should_failslab+0x1f1/0x290
[  367.862135][T11308]  should_failslab+0x29/0x70
[  367.862135][T11308]  __kmalloc_node_track_caller+0x1d9/0x1470
[  367.862135][T11308]  ? kmem_cache_alloc_node+0xbf8/0x1180
[  367.862135][T11308]  ? netlink_sendmsg+0xdbc/0x1840
[  367.862135][T11308]  ? netlink_sendmsg+0xdbc/0x1840
[  367.862135][T11308]  __alloc_skb+0x4dd/0xe90
[  367.902310][T11308]  ? netlink_sendmsg+0xdbc/0x1840
[  367.905468][T11308]  netlink_sendmsg+0xdbc/0x1840
[  367.905468][T11308]  ____sys_sendmsg+0xcfc/0x12f0
[  367.905468][T11308]  ? netlink_getsockopt+0x1830/0x1830
[  367.905468][T11308]  __sys_sendmsg+0x714/0x830
[  367.905468][T11308]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  367.905468][T11308]  ? __msan_instrument_asm_store+0x107/0x130
[  367.905468][T11308]  ? fput+0x82/0x320
[  367.905468][T11308]  ? kmsan_get_metadata+0x116/0x180
[  367.905468][T11308]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  367.905468][T11308]  ? kmsan_get_metadata+0x116/0x180
[  367.905468][T11308]  ? kmsan_get_metadata+0x116/0x180
[  367.905468][T11308]  __se_compat_sys_sendmsg+0xa7/0xc0
[  367.905468][T11308]  __ia32_compat_sys_sendmsg+0x4a/0x70
[  367.905468][T11308]  __do_fast_syscall_32+0x127/0x180
[  367.905468][T11308]  do_fast_syscall_32+0x77/0xd0
[  367.905468][T11308]  do_SYSENTER_32+0x73/0x90
[  367.905468][T11308]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  367.905468][T11308] RIP: 0023:0xf7f6a549
[  367.905468][T11308] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  367.905468][T11308] RSP: 002b:00000000f55645fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  367.905468][T11308] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020001240
[  367.905468][T11308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  367.905468][T11308] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  367.905468][T11308] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  367.905468][T11308] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
10:07:29 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

[  368.415857][T11315] binder: 11312:11315 unknown command 0
[  368.421782][T11315] binder: 11312:11315 ioctl c0306201 20000200 returned -22
10:07:29 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

[  368.480171][T11316] binder: 11312:11316 ioctl c0306201 200000c0 returned -14
10:07:29 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, 0x0, 0x0, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

[  368.582317][ T9340] Bluetooth: hci1: command 0x0406 tx timeout
10:07:29 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x4f, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a49650"})

[  368.953436][T11322] binder: 11320:11322 unknown command 0
[  368.959807][T11322] binder: 11320:11322 ioctl c0306201 20000200 returned -22
[  369.018907][T11325] binder: 11320:11325 ioctl c0306201 200000c0 returned -14
10:07:30 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:30 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000100), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x44, 0x0, &(0x7f00000004c0)=[@transaction={0x40046305, {0x0, 0x400c630e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
dup2(r1, r0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b6300000f630c40"], 0x1, 0xfffffdfd, &(0x7f00000002c0)="bb"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xc, 0x0, &(0x7f0000000000)=[@dead_binder_done], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f00000005c0)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000080)}}], 0x4f, 0x0, &(0x7f0000000540)="77cc10ed47ccd413f15cc5224282cf459cc77839e91f576011b4b391e2395880f65d381de83f1a1afc40ae220c01c351ae7985c2c32f289359bb3f582751097efa2b7e4d7d40d729459eda30a49650"})

10:07:30 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0), 0x0, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:30 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:30 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

[  369.867469][   T56] Bluetooth: hci5: command 0x0419 tx timeout
[  369.976558][T11339] binder: 11337:11339 unknown command 0
[  369.982878][T11339] binder: 11337:11339 ioctl c0306201 20000200 returned -22
[  370.019458][T11339] binder: 11337:11339 ioctl c0306201 200000c0 returned -14
10:07:31 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:31 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0), 0x0, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:31 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1}, 0x40)

10:07:31 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x10, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:33 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:33 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:33 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x3, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:33 executing program 0:
keyctl$setperm(0x4, 0x0, 0x0)

10:07:33 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0), 0x0, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:33 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:33 executing program 0:
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000240))

10:07:33 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:33 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:33 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:33 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:34 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:35 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:35 executing program 0:
bpf$PROG_LOAD(0x7, 0x0, 0x0)

10:07:35 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x8, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:35 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:35 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:35 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:35 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x9, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:36 executing program 0:
r0 = io_uring_setup(0x4fe, &(0x7f0000006800))
r1 = eventfd2(0x0, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000040)=r1, 0x1)

10:07:36 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:36 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:36 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:36 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0xf, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:37 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:37 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'gre0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @empty}}}})

10:07:37 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:37 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:37 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:37 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x60, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:38 executing program 0:
r0 = socket(0x2a, 0x2, 0x0)
getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, 0x0, 0x0)

10:07:38 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, 0x0, 0x0, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:38 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:38 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x300, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:38 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:38 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:39 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, 0x0, 0x0, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:39 executing program 0:
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(&(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)

10:07:39 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:39 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x900, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:39 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:39 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:39 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, 0x0, 0x0, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:39 executing program 0:
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x3f, 0x24, 0xb1, 0x10, 0x12d1, 0x793d, 0x5b04, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x9, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x2, 0x74, 0x0, [], [{}, {}]}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x8, &(0x7f0000000980)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x1, [{0x0, 0x0}]})

10:07:40 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:40 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0xf00, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:40 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:40 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x10, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:40 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0), 0x0, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

[  379.822471][ T9340] usb 1-1: new high-speed USB device number 2 using dummy_hcd
10:07:40 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, 0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:41 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x6000, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:41 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

[  380.063951][ T9340] usb 1-1: Using ep0 maxpacket: 16
[  380.184047][ T9340] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  380.195536][ T9340] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
10:07:41 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0), 0x0, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

[  380.503528][ T9340] usb 1-1: string descriptor 0 read error: -22
[  380.510171][ T9340] usb 1-1: New USB device found, idVendor=12d1, idProduct=793d, bcdDevice=5b.04
[  380.520069][ T9340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.632173][ T9340] usb 1-1: config 0 descriptor??
[  380.678945][ T9340] option 1-1:0.0: GSM modem (1-port) converter detected
10:07:41 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:42 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x30000, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  381.129275][ T8482] usb 1-1: USB disconnect, device number 2
[  381.137273][ T8482] option 1-1:0.0: device disconnected
10:07:42 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1616, 0x1}, 0x40)

10:07:42 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:42 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0), 0x0, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:43 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x34000, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:43 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x10, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:43 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:43 executing program 0:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000280)=[{}], 0x20)

10:07:43 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:43 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x400300, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:44 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f00000000c0)={0x0, "ddeea6cb08354f0b429ddbaa7e0338961cda387b76bf2809b5e03e8dc454f436202587e7983663d378820f22e3cfcda52876320a6a227d7c9be1bb7d13877dbd"}, 0x48, 0xfffffffffffffffc)
keyctl$get_security(0x11, r0, &(0x7f0000000000)=""/71, 0x47)

10:07:44 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:44 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:44 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:45 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x1000000, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:45 executing program 0:
keyctl$setperm(0x8, 0x0, 0x0)

10:07:45 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:46 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x10, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:46 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:46 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x4000000, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:46 executing program 0:
keyctl$setperm(0xa, 0x0, 0x0)

10:07:46 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:46 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:47 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)

10:07:47 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:47 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0x2, &(0x7f0000000040)={0x0, @pix_mp})

10:07:47 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x8000000, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:47 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

[  386.995225][ T3124] ieee802154 phy0 wpan0: encryption failed: -22
[  387.002244][ T3124] ieee802154 phy1 wpan1: encryption failed: -22
10:07:48 executing program 0:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

10:07:49 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:49 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:49 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x9000000, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:49 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:49 executing program 0:
keyctl$setperm(0x16, 0x0, 0x0)

10:07:49 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:07:50 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, r1, 0x0)

10:07:50 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:50 executing program 0:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0)
ioctl$SNDCTL_MIDI_PRETIME(r0, 0xc0046d00, 0x0)

10:07:50 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0xf000000, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:50 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x0)

10:07:50 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x10, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:51 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:51 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000180)={0x3, @pix={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}})

10:07:51 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x0)

10:07:51 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x60000000, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:51 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r1, 0x0)

10:07:51 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:52 executing program 0:
pselect6(0x86, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)={0x0, 0x0, 0x21f}, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f0000000180), 0x8})

10:07:52 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x9effffff, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:52 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x0)

10:07:52 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:52 executing program 0:
add_key(&(0x7f0000000040)='big_key\x00', 0x0, &(0x7f0000000080)="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", 0xfd56, 0xffffffffffffffff)

10:07:53 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0xf0ffffff, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:54 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, 0xffffffffffffffff, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:54 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, 0xffffffffffffffff, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:54 executing program 0:
add_key(&(0x7f0000000240)='encrypted\x00', &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)

10:07:54 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)

10:07:54 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0xffffff7f, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:54 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r1, 0x0)

10:07:55 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:55 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0xffffff9e, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:55 executing program 0:
semget$private(0x0, 0x3, 0x80)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = semget(0x1, 0x1, 0x23)
semctl$IPC_RMID(r1, 0x0, 0x0)
sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000004200)=ANY=[], 0x154c}}, 0x0)

10:07:55 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)

[  394.183753][ T8482] Bluetooth: hci2: command 0x0406 tx timeout
10:07:55 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x10, r1, 0x0)

[  394.553515][T11677] not chained 20000 origins
[  394.558323][T11677] CPU: 0 PID: 11677 Comm: syz-executor.2 Not tainted 5.12.0-rc6-syzkaller #0
[  394.562053][T11677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  394.562053][T11677] Call Trace:
[  394.562053][T11677]  dump_stack+0x24c/0x2e0
[  394.562053][T11677]  kmsan_internal_chain_origin+0x6f/0x130
[  394.562053][T11677]  ? rawv6_sendmsg+0x4329/0x46b0
[  394.562053][T11677]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  394.599805][T11677]  ? kmsan_get_metadata+0x116/0x180
[  394.599805][T11677]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  394.599805][T11677]  ? __msan_metadata_ptr_for_load_8+0x10/0x20
[  394.599805][T11677]  ? kmsan_get_metadata+0x116/0x180
[  394.599805][T11677]  ? kmsan_internal_set_origin+0x85/0xc0
[  394.599805][T11677]  ? kmsan_internal_unpoison_shadow+0x42/0x70
[  394.599805][T11677]  ? kmsan_unpoison_shadow+0x74/0xa0
[  394.599805][T11677]  ? _copy_from_user+0x1fd/0x300
[  394.599805][T11677]  __msan_chain_origin+0x54/0xa0
[  394.599805][T11677]  __get_compat_msghdr+0x6db/0x9d0
[  394.599805][T11677]  get_compat_msghdr+0x108/0x2b0
[  394.599805][T11677]  __sys_sendmmsg+0x79d/0x1010
[  394.666813][T11677]  ? kmsan_internal_check_memory+0xb5/0x520
[  394.666813][T11677]  ? _copy_to_user+0x1d2/0x270
[  394.666813][T11677]  ? kmsan_get_metadata+0x116/0x180
[  394.666813][T11677]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  394.666813][T11677]  ? kmsan_get_metadata+0x116/0x180
[  394.666813][T11677]  ? kmsan_get_metadata+0x116/0x180
[  394.666813][T11677]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  394.666813][T11677]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  394.666813][T11677]  __do_fast_syscall_32+0x127/0x180
[  394.666813][T11677]  do_fast_syscall_32+0x77/0xd0
[  394.666813][T11677]  do_SYSENTER_32+0x73/0x90
[  394.666813][T11677]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  394.666813][T11677] RIP: 0023:0xf7fba549
[  394.666813][T11677] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  394.666813][T11677] RSP: 002b:00000000f55b45fc EFLAGS: 00000296 ORIG_RAX: 0000000000000159
[  394.666813][T11677] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000020000480
[  394.666813][T11677] RDX: 00000000000002e9 RSI: 0000000000000000 RDI: 0000000000000000
[  394.666813][T11677] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  394.666813][T11677] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  394.796361][T11677] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  394.796361][T11677] Uninit was stored to memory at:
[  394.796361][T11677]  kmsan_internal_chain_origin+0xad/0x130
[  394.796361][T11677]  __msan_chain_origin+0x54/0xa0
[  394.796361][T11677]  __get_compat_msghdr+0x6db/0x9d0
[  394.796361][T11677]  get_compat_msghdr+0x108/0x2b0
[  394.796361][T11677]  __sys_sendmmsg+0x79d/0x1010
[  394.834117][T11677]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  394.834117][T11677]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  394.834117][T11677]  __do_fast_syscall_32+0x127/0x180
[  394.834117][T11677]  do_fast_syscall_32+0x77/0xd0
[  394.834117][T11677]  do_SYSENTER_32+0x73/0x90
[  394.834117][T11677]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  394.834117][T11677] 
[  394.834117][T11677] Uninit was stored to memory at:
[  394.834117][T11677]  kmsan_internal_chain_origin+0xad/0x130
[  394.834117][T11677]  __msan_chain_origin+0x54/0xa0
[  394.834117][T11677]  __get_compat_msghdr+0x6db/0x9d0
[  394.834117][T11677]  get_compat_msghdr+0x108/0x2b0
[  394.834117][T11677]  __sys_sendmmsg+0x79d/0x1010
[  394.834117][T11677]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  394.834117][T11677]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  394.834117][T11677]  __do_fast_syscall_32+0x127/0x180
[  394.834117][T11677]  do_fast_syscall_32+0x77/0xd0
[  394.834117][T11677]  do_SYSENTER_32+0x73/0x90
[  394.834117][T11677]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  394.834117][T11677] 
[  394.834117][T11677] Uninit was stored to memory at:
[  394.834117][T11677]  kmsan_internal_chain_origin+0xad/0x130
[  394.834117][T11677]  __msan_chain_origin+0x54/0xa0
[  394.834117][T11677]  __get_compat_msghdr+0x6db/0x9d0
[  394.834117][T11677]  get_compat_msghdr+0x108/0x2b0
[  394.834117][T11677]  __sys_sendmmsg+0x79d/0x1010
[  394.834117][T11677]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  394.834117][T11677]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  394.834117][T11677]  __do_fast_syscall_32+0x127/0x180
[  394.834117][T11677]  do_fast_syscall_32+0x77/0xd0
[  394.834117][T11677]  do_SYSENTER_32+0x73/0x90
[  394.834117][T11677]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  394.834117][T11677] 
[  394.834117][T11677] Uninit was stored to memory at:
[  394.834117][T11677]  kmsan_internal_chain_origin+0xad/0x130
[  394.834117][T11677]  __msan_chain_origin+0x54/0xa0
[  394.834117][T11677]  __get_compat_msghdr+0x6db/0x9d0
[  394.834117][T11677]  get_compat_msghdr+0x108/0x2b0
[  394.834117][T11677]  __sys_sendmmsg+0x79d/0x1010
[  394.834117][T11677]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  394.834117][T11677]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  394.834117][T11677]  __do_fast_syscall_32+0x127/0x180
[  394.834117][T11677]  do_fast_syscall_32+0x77/0xd0
[  394.834117][T11677]  do_SYSENTER_32+0x73/0x90
[  394.834117][T11677]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  394.834117][T11677] 
[  394.834117][T11677] Uninit was stored to memory at:
[  394.834117][T11677]  kmsan_internal_chain_origin+0xad/0x130
[  394.834117][T11677]  __msan_chain_origin+0x54/0xa0
[  394.834117][T11677]  __get_compat_msghdr+0x6db/0x9d0
[  394.834117][T11677]  get_compat_msghdr+0x108/0x2b0
[  394.834117][T11677]  __sys_sendmmsg+0x79d/0x1010
[  394.834117][T11677]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  394.834117][T11677]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  394.834117][T11677]  __do_fast_syscall_32+0x127/0x180
[  394.834117][T11677]  do_fast_syscall_32+0x77/0xd0
[  394.834117][T11677]  do_SYSENTER_32+0x73/0x90
[  394.834117][T11677]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  394.834117][T11677] 
[  394.834117][T11677] Uninit was stored to memory at:
[  394.834117][T11677]  kmsan_internal_chain_origin+0xad/0x130
[  394.834117][T11677]  __msan_chain_origin+0x54/0xa0
[  394.834117][T11677]  __get_compat_msghdr+0x6db/0x9d0
[  394.834117][T11677]  get_compat_msghdr+0x108/0x2b0
[  394.834117][T11677]  __sys_sendmmsg+0x79d/0x1010
[  394.834117][T11677]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  394.834117][T11677]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  394.834117][T11677]  __do_fast_syscall_32+0x127/0x180
[  394.834117][T11677]  do_fast_syscall_32+0x77/0xd0
[  394.834117][T11677]  do_SYSENTER_32+0x73/0x90
[  394.834117][T11677]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  394.834117][T11677] 
[  394.834117][T11677] Uninit was stored to memory at:
[  394.834117][T11677]  kmsan_internal_chain_origin+0xad/0x130
[  394.834117][T11677]  __msan_chain_origin+0x54/0xa0
[  394.834117][T11677]  __get_compat_msghdr+0x6db/0x9d0
[  394.834117][T11677]  get_compat_msghdr+0x108/0x2b0
[  394.834117][T11677]  __sys_sendmmsg+0x79d/0x1010
[  394.834117][T11677]  __se_compat_sys_sendmmsg+0xcd/0xf0
[  394.834117][T11677]  __ia32_compat_sys_sendmmsg+0x56/0x70
[  394.834117][T11677]  __do_fast_syscall_32+0x127/0x180
10:07:56 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

[  394.834117][T11677]  do_fast_syscall_32+0x77/0xd0
[  394.834117][T11677]  do_SYSENTER_32+0x73/0x90
[  394.834117][T11677]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  394.834117][T11677] 
[  394.834117][T11677] Local variable ----msg_sys@__sys_sendmmsg created at:
[  394.834117][T11677]  __sys_sendmmsg+0xbd/0x1010
[  394.834117][T11677]  __sys_sendmmsg+0xbd/0x1010
10:07:58 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:58 executing program 0:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, 0x0)

10:07:58 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0xfffffff0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:58 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)

10:07:58 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:07:58 executing program 0:
bpf$PROG_LOAD(0x1e, 0x0, 0x0)

10:07:58 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x10, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:58 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0)

10:07:58 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0)

10:07:58 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:59 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x0)

10:07:59 executing program 0:
add_key(&(0x7f0000000400)='keyring\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r0 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000580)={0x0, "897ba921e2716914d2beecbd7106f7e9efa4a768796c5ef2fef9a302ccd0be1b6285ef843048fa92e8542b44c3477d0a190ca0bfbce49720bd4a72bda0eb7da5"}, 0x48, 0xfffffffffffffffc)
keyctl$get_security(0x11, r0, 0x0, 0x0)

10:07:59 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)

10:07:59 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0)

10:07:59 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x14, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:07:59 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x0)

10:08:00 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x10, 0x0, &(0x7f0000000180))

10:08:00 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0)

10:08:00 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, 0x0, 0x0, 0x9, 0x0)

10:08:01 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0)

10:08:01 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, 0x0, 0x0)

10:08:01 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0xc0, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:01 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x0, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:08:01 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x7, 0x0)
preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000500)=""/103, 0x67}], 0x1, 0x0, 0x0, 0x1f)

10:08:01 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, 0x0, 0x0, 0x9, 0x0)

10:08:02 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)

10:08:02 executing program 0:
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x3f, 0x24, 0xb1, 0x10, 0x12d1, 0x793d, 0x5b04, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x9a, 0xd7, 0xe8, 0x0, [], [{{0x9, 0x5, 0xa}}, {}]}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x5, &(0x7f0000000980)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]})

10:08:02 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, 0x0, 0x0, 0x9, 0x0)

10:08:02 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x0, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:08:02 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0xec1, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:02 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)

[  402.012318][ T9340] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  402.252724][ T9340] usb 1-1: Using ep0 maxpacket: 16
[  402.484494][ T9340] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  402.494952][ T9340] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  402.763786][ T9340] usb 1-1: string descriptor 0 read error: -22
[  402.770366][ T9340] usb 1-1: New USB device found, idVendor=12d1, idProduct=793d, bcdDevice=5b.04
[  402.780107][ T9340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  402.860843][ T9340] usb 1-1: config 0 descriptor??
[  403.225586][ T1979] usb 1-1: USB disconnect, device number 3
10:08:04 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0, 0x12, 0xffffffffffffffff, 0x0)

10:08:04 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0), 0x0, 0x9, 0x0)

10:08:04 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x0, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:08:04 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x33fe0, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:04 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, 0x0}, 0x0)

10:08:04 executing program 0:
r0 = io_uring_setup(0x6cc8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)

10:08:05 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0), 0x0, 0x9, 0x0)

10:08:05 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x0, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:08:05 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0)

10:08:05 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x200012c8, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:05 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020)
read$FUSE(r0, &(0x7f0000002200)={0x2020}, 0x2020)

10:08:06 executing program 0:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x40012040)

10:08:06 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x0, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:08:06 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x7ffff000, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:06 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0)

10:08:06 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0), 0x0, 0x9, 0x0)

10:08:06 executing program 0:
r0 = io_uring_setup(0x566e, &(0x7f0000000340))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
r1 = io_uring_setup(0x566e, &(0x7f0000000340))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)

10:08:06 executing program 3:
bpf$PROG_LOAD(0x6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

10:08:07 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x0, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:08:07 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0)

10:08:07 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0)

10:08:07 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0xfffffdef, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:07 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0)

10:08:07 executing program 3:
bpf$PROG_LOAD(0x6, 0x0, 0x0)

10:08:08 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x0, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:08:08 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:08:08 executing program 0:
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
fanotify_mark(r0, 0x1, 0x10, 0xffffffffffffffff, 0x0)

10:08:08 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0)

10:08:08 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x10, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:08 executing program 3:
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @auto=[0x34, 0x35]}, &(0x7f0000000080)={0x0, "cd685970bad66e63ddaee9e563b7bafcb7e4ce87582f6e6ed7aba6a8f95ee59ebdf52364fa523f080f57b757aef691f89abf22285a0fe8c7ec8b5b5d292df852"}, 0x48, 0xfffffffffffffffe)

10:08:08 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x0, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:08:09 executing program 0:
r0 = io_uring_setup(0x6cc8, &(0x7f0000000080)={0x0, 0x0, 0x1, 0x0, 0x1a8})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)

10:08:09 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:08:09 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x6)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev}, 0x0, @in=@empty}}, 0xe4)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0)
r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3800004, 0x12, r1, 0x0)
preadv(r1, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0)

10:08:09 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:09 executing program 3:
bpf$PROG_LOAD(0x7, 0x0, 0x2)

10:08:09 executing program 0:
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$sock_ifreq(r0, 0x8993, &(0x7f0000000000)={'ipvlan1\x00', @ifru_mtu})

10:08:09 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x0, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:08:09 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:08:09 executing program 3:
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000001940), 0x4)

10:08:09 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x3, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:10 executing program 2:
bpf$PROG_LOAD(0x1e, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

10:08:10 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x0, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:08:10 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x14, 0x22, 0x925, 0x0, 0x0, {0x11}}, 0x14}}, 0x0)

10:08:10 executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
sendto$inet6(r0, &(0x7f0000000080)="fe", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x1c)

10:08:10 executing program 3:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000005c0), 0x8)
mq_timedreceive(r0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x0, 0x989680})

10:08:10 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x4, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:10 executing program 2:
r0 = socket$inet6(0xa, 0x3, 0x80)
ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, 0x0)

10:08:11 executing program 3:
r0 = socket$l2tp(0x2, 0x2, 0x73)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0)

10:08:11 executing program 0:
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000019c0), 0x2, 0x0)
write$FUSE_WRITE(r0, &(0x7f00000004c0)={0xffffff22}, 0x36)

10:08:11 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x0, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:08:11 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x14, 0x22, 0x925, 0x0, 0x0, {0x11}}, 0x14}}, 0x0)

10:08:11 executing program 2:
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='V', 0xfffffffffffffe54, 0x0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @dev}, 0x1c)

10:08:11 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x8, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:12 executing program 0:
r0 = io_uring_setup(0x566e, &(0x7f0000000340))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
syz_io_uring_complete(0x0)
r1 = io_uring_setup(0x566e, &(0x7f0000000340))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)

10:08:12 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x0, 0x0, 0x0, {0x11}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:08:12 executing program 3:
connect$can_j1939(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f00000007c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x0)
pipe2(&(0x7f00000007c0), 0x0)
pipe2(&(0x7f00000007c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x0)
r2 = syz_usb_connect$cdc_ncm(0x5, 0x7e, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6c, 0x2, 0x1, 0x7, 0x40, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x9, 0x24, 0x6, 0x0, 0x1, "e0c6ed67"}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x5, 0x81}, {0x6, 0x24, 0x1a, 0x2, 0x2e}, [@mbim={0xc, 0x24, 0x1b, 0x6, 0x2, 0x0, 0xd0, 0x8, 0x3f}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x20, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x40, 0x14, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3f, 0x7, 0x1f}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x1f, 0x1, 0x1, 0x0, 0x7}, 0x2f, &(0x7f0000000300)={0x5, 0xf, 0x2f, 0x3, [@ptm_cap={0x3}, @ssp_cap={0x1c, 0x10, 0xa, 0x1, 0x4, 0x2, 0x1ef00, 0x3f, [0xc0, 0xff3ff0, 0xc000, 0xff000f]}, @wireless={0xb, 0x10, 0x1, 0xc, 0x1, 0x2e, 0x1, 0x3, 0x10}]}, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x1001}}]})
syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000500)={0x14, &(0x7f0000000400)={0x0, 0x7, 0xb1, {0xb1, 0x4, "81975bad18624187f9a5e04b4b323cf5c9376975d0e6a4f349dca04d63842bbf0d0dc0f15c4c4ccf62a9086125fc28206b695248ee150a59201660bb644c83895f2c6e32a77d0469b92ca4b2ee82284e02e2ac52dd30f4f8fba24c937f9bd13ae0275442d7287ff73bedbdbbbab627470fc38e63204014879ecafa5e1438e895684ac28b082b4684605062c95c8c685dedda436ee488eb2a39fc988dd1084fc50d701c87d9aac29c624bb2c4ae949f"}}, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000540)={0x0, 0x17, 0x14, "e64e1eda747cfc7eecb1ca957bc363be3810a8a9"}, &(0x7f0000000580)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000005c0)={0x0, 0x8, 0x1, 0x22}, &(0x7f0000000600)={0x20, 0x80, 0x1c, {0x3, 0x7f, 0x4, 0x7, 0x3, 0x8, 0x101, 0x2, 0x1ff, 0x300, 0x7, 0x1ff}}, &(0x7f0000000640)={0x20, 0x85, 0x4, 0xfff}, &(0x7f0000000680)={0x20, 0x83, 0x2}, &(0x7f00000006c0)={0x20, 0x87, 0x2}, &(0x7f0000000700)={0x20, 0x89, 0x2, 0x1}})

10:08:12 executing program 2:
socketpair(0x8, 0x0, 0x0, &(0x7f0000000900))

10:08:12 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x14, 0x22, 0x925, 0x0, 0x0, {0x11}}, 0x14}}, 0x0)

10:08:12 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x9, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:12 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0189436, &(0x7f0000000040)={0x0, @pix_mp})

10:08:12 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:08:13 executing program 2:
bpf$PROG_LOAD(0x1c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

[  411.972711][    T5] usb 4-1: new high-speed USB device number 2 using dummy_hcd
10:08:13 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

[  412.213040][    T5] usb 4-1: Using ep0 maxpacket: 8
10:08:13 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0xf, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  412.333877][    T5] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  412.345885][    T5] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  412.356532][    T5] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
10:08:13 executing program 0:
keyctl$setperm(0x7, 0x0, 0x0)
r0 = io_uring_setup(0x566e, &(0x7f0000000340))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
syz_io_uring_complete(0x0)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
r1 = io_uring_setup(0x566e, &(0x7f0000000340))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0)
syz_io_uring_complete(0x0)

[  412.703989][    T5] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  412.713723][    T5] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.722571][    T5] usb 4-1: Product: syz
[  412.727121][    T5] usb 4-1: Manufacturer: ခ
[  412.731966][    T5] usb 4-1: SerialNumber: syz
10:08:13 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:08:13 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:08:14 executing program 3:
pipe2(&(0x7f0000000080), 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040))

10:08:14 executing program 2:
mq_open(&(0x7f0000002500)='\'\x00', 0x40, 0x0, 0x0)

10:08:14 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x60, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:14 executing program 0:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000080)={'veth0_macvtap\x00', @link_local})

[  413.462893][    T5] cdc_ncm 4-1:1.0: bind() failure
[  413.477907][    T5] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  413.486422][    T5] cdc_ncm 4-1:1.1: bind() failure
10:08:14 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {}, [@nested={0x2b, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

[  413.656232][    T5] usb 4-1: USB disconnect, device number 2
10:08:14 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:08:14 executing program 2:
syz_open_dev$dri(&(0x7f0000000040), 0xa9a, 0x200)

10:08:15 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x300, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:15 executing program 3:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x2, @pix_mp})

10:08:15 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x14, 0x22, 0x925, 0x0, 0x0, {0x11}}, 0x14}}, 0x0)

10:08:15 executing program 0:
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "cd685970bad66e63ddaee9e563b7bafcb7e4ce87582f6e6ed7aba6a8f95ee59ebdf52364fa523f080f57b757aef691f89abf22285a0fe8c7ec8b5b5d292df852"}, 0x48, 0xfffffffffffffffe)
keyctl$setperm(0xb, r0, 0x0)

10:08:15 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x20, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0xc, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}]}]}, 0x20}}, 0x0)

10:08:15 executing program 2:
connect$can_j1939(0xffffffffffffffff, 0x0, 0x0)
pipe2(0x0, 0x0)
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x0)
pipe2(0x0, 0x0)
pipe2(&(0x7f00000007c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x8a, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x78, 0x2, 0x1, 0x7, 0x40, 0x7f, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x2, 0x0, 0x81}, {0x6, 0x24, 0x1a, 0x2}, [@mdlm_detail={0x9, 0x24, 0x13, 0x8, "a9fffab5a9"}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x0, 0x0, 0xd0, 0x8, 0x3f}, @dmm={0x7, 0x24, 0x14, 0x3ff}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x20, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x40, 0x14, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3f, 0x7}}}}}}}]}}, 0x0)

10:08:15 executing program 3:
r0 = io_uring_setup(0x566e, &(0x7f0000000340))
r1 = socket$l2tp(0x2, 0x2, 0x73)
io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r1], 0x1)

10:08:16 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x900, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:16 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x14, 0x22, 0x925, 0x0, 0x0, {0x11}}, 0x14}}, 0x0)

10:08:16 executing program 0:
socket(0x11, 0x2, 0x3)

10:08:16 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x18, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x4, 0xe}]}, 0x18}}, 0x0)

[  415.372578][ T8472] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  415.612277][ T8472] usb 3-1: Using ep0 maxpacket: 8
10:08:16 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x14, 0x22, 0x925, 0x0, 0x0, {0x11}}, 0x14}}, 0x0)

[  415.732500][ T8472] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  415.745487][ T8472] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023
[  415.756545][ T8472] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
10:08:17 executing program 0:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
pselect6(0x40, &(0x7f0000000300)={0x8}, &(0x7f0000000340)={0x40}, 0x0, 0x0, 0x0)

10:08:17 executing program 3:
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)="cb56b6cc0407008b65d8b4ac2ca35c66", 0x10)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000000f80)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="018ee9f82e", 0x5}, {&(0x7f0000000140)="5531f5e79d1230ddde98e2f96ff18ba13900c35e67d75c5a6810890239fb4c7dde6a19", 0x23}, {&(0x7f0000000180)="e31520aa566f0e3686390a8b9a5e851d473b7f3f48f1cab37f45b3adf98590fe02c1bb355a5d7ba1193e0f1b8da27a3185d39bb2f03d2665a8220e0b301f45542d83e05d03a32b5d4d26b012d5763340bebd3fc37f86adfa618871ae0af56300de382edf1aa89e0d", 0x68}], 0x3, 0x0, 0x0, 0x1a0}}], 0x1, 0x0)

10:08:17 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0xf00, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  416.070173][T12027] =====================================================
[  416.072054][T12027] BUG: KMSAN: uninit-value in validate_beacon_head+0x502/0x5f0
[  416.072054][T12027] CPU: 0 PID: 12027 Comm: syz-executor.4 Not tainted 5.12.0-rc6-syzkaller #0
[  416.072054][T12027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  416.072054][T12027] Call Trace:
[  416.072054][T12027]  dump_stack+0x24c/0x2e0
[  416.072054][T12027]  kmsan_report+0xfb/0x1e0
[  416.072054][T12027]  __msan_warning+0x5c/0xa0
[  416.072054][T12027]  validate_beacon_head+0x502/0x5f0
[  416.072054][T12027]  ? nl80211_exit+0x50/0x50
[  416.072054][T12027]  __nla_validate_parse+0x20fe/0x4ab0
[  416.072054][T12027]  __nla_parse+0x141/0x150
[  416.072054][T12027]  genl_family_rcv_msg_attrs_parse+0x429/0x5b0
[  416.072054][T12027]  ? nl80211_stop_ap+0xc0/0xc0
[  416.152182][T12027]  genl_rcv_msg+0xbd6/0x1610
[  416.152182][T12027]  ? nl80211_stop_ap+0xc0/0xc0
[  416.152182][T12027]  ? nl80211_get_station+0x750/0x750
[  416.152182][T12027]  ? kmsan_internal_set_origin+0x85/0xc0
[  416.152182][T12027]  ? kmsan_get_metadata+0x116/0x180
[  416.152182][T12027]  netlink_rcv_skb+0x6fa/0x810
[  416.152182][T12027]  ? genl_bind+0x4b0/0x4b0
[  416.152182][T12027]  genl_rcv+0x63/0x80
[  416.152182][T12027]  netlink_unicast+0x11d6/0x14a0
[  416.152182][T12027]  ? genl_pernet_exit+0x90/0x90
[  416.152182][T12027]  netlink_sendmsg+0x1740/0x1840
[  416.152182][T12027]  ____sys_sendmsg+0xcfc/0x12f0
[  416.152182][T12027]  ? netlink_getsockopt+0x1830/0x1830
[  416.152182][T12027]  __sys_sendmsg+0x714/0x830
[  416.152182][T12027]  ? kmsan_copy_to_user+0x9c/0xb0
[  416.152182][T12027]  ? _copy_to_user+0x1d2/0x270
[  416.152182][T12027]  ? kmsan_get_metadata+0x116/0x180
[  416.152182][T12027]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  416.152182][T12027]  ? kmsan_get_metadata+0x116/0x180
[  416.152182][T12027]  ? kmsan_get_metadata+0x116/0x180
[  416.152182][T12027]  __se_compat_sys_sendmsg+0xa7/0xc0
[  416.152182][T12027]  __ia32_compat_sys_sendmsg+0x4a/0x70
[  416.152182][T12027]  __do_fast_syscall_32+0x127/0x180
[  416.152182][T12027]  do_fast_syscall_32+0x77/0xd0
[  416.152182][T12027]  do_SYSENTER_32+0x73/0x90
[  416.152182][T12027]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  416.152182][T12027] RIP: 0023:0xf7fbc549
[  416.152182][T12027] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  416.152182][T12027] RSP: 002b:00000000f55b65fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  416.152182][T12027] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020001240
[  416.152182][T12027] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  416.152182][T12027] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  416.152182][T12027] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  416.152182][T12027] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  416.152182][T12027] 
[  416.152182][T12027] Uninit was created at:
[  416.152182][T12027]  kmsan_internal_poison_shadow+0x5c/0xf0
[  416.152182][T12027]  kmsan_slab_alloc+0x8e/0xe0
[  416.152182][T12027]  __kmalloc_node_track_caller+0xa4f/0x1470
[  416.152182][T12027]  __alloc_skb+0x4dd/0xe90
[  416.152182][T12027]  netlink_sendmsg+0xdbc/0x1840
[  416.152182][T12027]  ____sys_sendmsg+0xcfc/0x12f0
[  416.152182][T12027]  __sys_sendmsg+0x714/0x830
[  416.152182][T12027]  __se_compat_sys_sendmsg+0xa7/0xc0
[  416.152182][T12027]  __ia32_compat_sys_sendmsg+0x4a/0x70
[  416.152182][T12027]  __do_fast_syscall_32+0x127/0x180
[  416.152182][T12027]  do_fast_syscall_32+0x77/0xd0
[  416.152182][T12027]  do_SYSENTER_32+0x73/0x90
[  416.152182][T12027]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  416.152182][T12027] =====================================================
[  416.152182][T12027] Disabling lock debugging due to kernel taint
[  416.502843][ T8472] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  416.512385][ T8472] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  416.520555][ T8472] usb 3-1: Product: syz
[  416.525265][ T8472] usb 3-1: Manufacturer: syz
[  416.529978][ T8472] usb 3-1: SerialNumber: syz
10:08:17 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x18, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x4, 0xe}]}, 0x18}}, 0x0)

10:08:18 executing program 2:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0)

10:08:18 executing program 0:
r0 = io_uring_setup(0x566e, &(0x7f0000000340))
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0)
syz_io_uring_complete(r1)

[  417.215175][ T8472] cdc_ncm 3-1:1.0: bind() failure
[  417.230521][ T8472] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  417.237609][ T8472] cdc_ncm 3-1:1.1: bind() failure
10:08:18 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:08:18 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x6000, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  417.394177][ T8472] usb 3-1: USB disconnect, device number 2
[  417.484003][T12052] =====================================================
[  417.491083][T12052] BUG: KMSAN: uninit-value in validate_beacon_head+0x502/0x5f0
[  417.492036][T12052] CPU: 1 PID: 12052 Comm: syz-executor.4 Tainted: G    B             5.12.0-rc6-syzkaller #0
[  417.492036][T12052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  417.492036][T12052] Call Trace:
[  417.492036][T12052]  dump_stack+0x24c/0x2e0
[  417.492036][T12052]  kmsan_report+0xfb/0x1e0
[  417.492036][T12052]  __msan_warning+0x5c/0xa0
[  417.492036][T12052]  validate_beacon_head+0x502/0x5f0
[  417.492036][T12052]  ? nl80211_exit+0x50/0x50
[  417.492036][T12052]  __nla_validate_parse+0x20fe/0x4ab0
[  417.492036][T12052]  __nla_parse+0x141/0x150
[  417.492036][T12052]  genl_family_rcv_msg_attrs_parse+0x429/0x5b0
[  417.492036][T12052]  ? nl80211_stop_ap+0xc0/0xc0
[  417.492036][T12052]  genl_rcv_msg+0xbd6/0x1610
[  417.492036][T12052]  ? nl80211_stop_ap+0xc0/0xc0
[  417.492036][T12052]  ? nl80211_get_station+0x750/0x750
[  417.492036][T12052]  ? kmsan_internal_set_origin+0x85/0xc0
[  417.492036][T12052]  ? kmsan_get_metadata+0x116/0x180
[  417.492036][T12052]  netlink_rcv_skb+0x6fa/0x810
[  417.492036][T12052]  ? genl_bind+0x4b0/0x4b0
[  417.492036][T12052]  genl_rcv+0x63/0x80
[  417.492036][T12052]  netlink_unicast+0x11d6/0x14a0
[  417.492036][T12052]  ? genl_pernet_exit+0x90/0x90
[  417.492036][T12052]  netlink_sendmsg+0x1740/0x1840
[  417.492036][T12052]  ____sys_sendmsg+0xcfc/0x12f0
[  417.492036][T12052]  ? netlink_getsockopt+0x1830/0x1830
[  417.492036][T12052]  __sys_sendmsg+0x714/0x830
[  417.492036][T12052]  ? kmsan_copy_to_user+0x9c/0xb0
[  417.492036][T12052]  ? _copy_to_user+0x1d2/0x270
[  417.492036][T12052]  ? kmsan_get_metadata+0x116/0x180
[  417.492036][T12052]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  417.492036][T12052]  ? kmsan_get_metadata+0x116/0x180
[  417.492036][T12052]  ? kmsan_get_metadata+0x116/0x180
[  417.492036][T12052]  __se_compat_sys_sendmsg+0xa7/0xc0
[  417.492036][T12052]  __ia32_compat_sys_sendmsg+0x4a/0x70
[  417.492036][T12052]  __do_fast_syscall_32+0x127/0x180
[  417.492036][T12052]  do_fast_syscall_32+0x77/0xd0
[  417.492036][T12052]  do_SYSENTER_32+0x73/0x90
[  417.492036][T12052]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  417.492036][T12052] RIP: 0023:0xf7fbc549
[  417.492036][T12052] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  417.492036][T12052] RSP: 002b:00000000f55b65fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  417.492036][T12052] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020001240
[  417.492036][T12052] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  417.492036][T12052] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  417.492036][T12052] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  417.492036][T12052] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  417.492036][T12052] 
[  417.492036][T12052] Uninit was created at:
[  417.492036][T12052]  kmsan_internal_poison_shadow+0x5c/0xf0
[  417.492036][T12052]  kmsan_slab_alloc+0x8e/0xe0
[  417.492036][T12052]  __kmalloc_node_track_caller+0xa4f/0x1470
[  417.492036][T12052]  __alloc_skb+0x4dd/0xe90
[  417.492036][T12052]  netlink_sendmsg+0xdbc/0x1840
[  417.492036][T12052]  ____sys_sendmsg+0xcfc/0x12f0
[  417.492036][T12052]  __sys_sendmsg+0x714/0x830
[  417.492036][T12052]  __se_compat_sys_sendmsg+0xa7/0xc0
[  417.492036][T12052]  __ia32_compat_sys_sendmsg+0x4a/0x70
[  417.492036][T12052]  __do_fast_syscall_32+0x127/0x180
[  417.492036][T12052]  do_fast_syscall_32+0x77/0xd0
[  417.492036][T12052]  do_SYSENTER_32+0x73/0x90
[  417.492036][T12052]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  417.492036][T12052] =====================================================
10:08:18 executing program 3:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r0, 0x28, 0x6, &(0x7f0000000200), 0x10)

10:08:19 executing program 0:
r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, 0x0)

10:08:19 executing program 4:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x18, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x4, 0xe}]}, 0x18}}, 0x0)

10:08:19 executing program 2:
keyctl$setperm(0x18, 0x0, 0x0)

[  418.727028][T12071] =====================================================
[  418.732084][T12071] BUG: KMSAN: uninit-value in validate_beacon_head+0x502/0x5f0
[  418.732084][T12071] CPU: 0 PID: 12071 Comm: syz-executor.4 Tainted: G    B             5.12.0-rc6-syzkaller #0
[  418.732084][T12071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  418.732084][T12071] Call Trace:
[  418.732084][T12071]  dump_stack+0x24c/0x2e0
[  418.732084][T12071]  kmsan_report+0xfb/0x1e0
[  418.772275][T12071]  __msan_warning+0x5c/0xa0
[  418.772275][T12071]  validate_beacon_head+0x502/0x5f0
[  418.772275][T12071]  ? nl80211_exit+0x50/0x50
[  418.772275][T12071]  __nla_validate_parse+0x20fe/0x4ab0
[  418.772275][T12071]  __nla_parse+0x141/0x150
[  418.772275][T12071]  genl_family_rcv_msg_attrs_parse+0x429/0x5b0
[  418.805730][T12071]  ? nl80211_stop_ap+0xc0/0xc0
[  418.805730][T12071]  genl_rcv_msg+0xbd6/0x1610
[  418.805730][T12071]  ? nl80211_stop_ap+0xc0/0xc0
[  418.805730][T12071]  ? nl80211_get_station+0x750/0x750
[  418.805730][T12071]  ? kmsan_internal_set_origin+0x85/0xc0
[  418.805730][T12071]  ? kmsan_get_metadata+0x116/0x180
[  418.805730][T12071]  netlink_rcv_skb+0x6fa/0x810
[  418.805730][T12071]  ? genl_bind+0x4b0/0x4b0
[  418.805730][T12071]  genl_rcv+0x63/0x80
[  418.805730][T12071]  netlink_unicast+0x11d6/0x14a0
[  418.805730][T12071]  ? genl_pernet_exit+0x90/0x90
[  418.805730][T12071]  netlink_sendmsg+0x1740/0x1840
[  418.805730][T12071]  ____sys_sendmsg+0xcfc/0x12f0
[  418.805730][T12071]  ? netlink_getsockopt+0x1830/0x1830
[  418.805730][T12071]  __sys_sendmsg+0x714/0x830
[  418.805730][T12071]  ? kmsan_copy_to_user+0x9c/0xb0
[  418.805730][T12071]  ? _copy_to_user+0x1d2/0x270
[  418.805730][T12071]  ? kmsan_get_metadata+0x116/0x180
[  418.805730][T12071]  ? kmsan_get_shadow_origin_ptr+0x84/0xb0
[  418.805730][T12071]  ? kmsan_get_metadata+0x116/0x180
[  418.805730][T12071]  ? kmsan_get_metadata+0x116/0x180
[  418.805730][T12071]  __se_compat_sys_sendmsg+0xa7/0xc0
[  418.805730][T12071]  __ia32_compat_sys_sendmsg+0x4a/0x70
[  418.805730][T12071]  __do_fast_syscall_32+0x127/0x180
[  418.805730][T12071]  do_fast_syscall_32+0x77/0xd0
[  418.805730][T12071]  do_SYSENTER_32+0x73/0x90
[  418.805730][T12071]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  418.805730][T12071] RIP: 0023:0xf7fbc549
[  418.805730][T12071] Code: 03 74 c0 01 10 05 03 74 b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 8d b4 26 00 00 00 00 8d b4 26 00 00 00 00
[  418.805730][T12071] RSP: 002b:00000000f55b65fc EFLAGS: 00000296 ORIG_RAX: 0000000000000172
[  418.805730][T12071] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000020001240
[  418.805730][T12071] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  418.805730][T12071] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[  418.805730][T12071] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000
[  419.005436][T12071] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[  419.005436][T12071] 
[  419.005436][T12071] Uninit was created at:
[  419.005436][T12071]  kmsan_internal_poison_shadow+0x5c/0xf0
[  419.005436][T12071]  kmsan_slab_alloc+0x8e/0xe0
[  419.005436][T12071]  __kmalloc_node_track_caller+0xa4f/0x1470
[  419.005436][T12071]  __alloc_skb+0x4dd/0xe90
[  419.005436][T12071]  netlink_sendmsg+0xdbc/0x1840
[  419.005436][T12071]  ____sys_sendmsg+0xcfc/0x12f0
[  419.005436][T12071]  __sys_sendmsg+0x714/0x830
[  419.005436][T12071]  __se_compat_sys_sendmsg+0xa7/0xc0
[  419.005436][T12071]  __ia32_compat_sys_sendmsg+0x4a/0x70
[  419.005436][T12071]  __do_fast_syscall_32+0x127/0x180
10:08:20 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000040)={0x8, @pix_mp})

10:08:20 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

[  419.005436][T12071]  do_fast_syscall_32+0x77/0xd0
[  419.005436][T12071]  do_SYSENTER_32+0x73/0x90
[  419.005436][T12071]  entry_SYSENTER_compat_after_hwframe+0x4d/0x5c
[  419.005436][T12071] =====================================================
10:08:20 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
preadv2(r0, &(0x7f0000000580)=[{&(0x7f0000000500)=""/103, 0x67}], 0x1, 0x0, 0x0, 0x0)

10:08:20 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x30000, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:20 executing program 2:
pipe2(&(0x7f00000007c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
connect$can_j1939(r0, 0x0, 0xb)

10:08:20 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x40, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x2b, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845"]}]}, 0x40}}, 0x0)

10:08:21 executing program 0:
bpf$PROG_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

10:08:21 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x34000, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:21 executing program 2:
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x9240, 0x0)

10:08:21 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:08:21 executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x58}}, 0x0)

10:08:21 executing program 0:
bpf$PROG_LOAD(0xa, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

10:08:21 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x400300, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:22 executing program 2:
keyctl$setperm(0xd, 0x0, 0x0)

10:08:22 executing program 4:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0)
poll(&(0x7f0000001040)=[{r0}], 0x1, 0x0)

10:08:22 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:08:22 executing program 3:
bpf$PROG_LOAD(0x22, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78)

10:08:22 executing program 0:
bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x40)

10:08:22 executing program 2:
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)

10:08:22 executing program 4:
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
ioctl$SNDCTL_SEQ_THRESHOLD(r0, 0x4004510d, 0x0)

10:08:22 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x1000000, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:22 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}]}]}, 0x28}}, 0x0)

10:08:23 executing program 3:
add_key(&(0x7f0000000000)='ceph\x00', 0x0, &(0x7f0000000080)="e6", 0x1, 0xfffffffffffffffe)

10:08:23 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ifreq(r0, 0x8911, &(0x7f0000000040)={'veth1_vlan\x00', @ifru_names})

10:08:23 executing program 2:
mq_open(&(0x7f0000000000)='{)\\{&^\\*\x00', 0x0, 0x0, 0x0)

10:08:23 executing program 4:
r0 = signalfd(0xffffffffffffffff, &(0x7f00000005c0), 0x8)
fsetxattr$security_evm(r0, 0x0, 0x0, 0x0, 0x5)

10:08:23 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x4000000, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:23 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic]}]}, 0x28}}, 0x0)

10:08:23 executing program 3:
bpf$PROG_LOAD(0x1c, 0x0, 0x0)

10:08:24 executing program 0:
connect$can_j1939(0xffffffffffffffff, 0x0, 0x0)
pipe2(0x0, 0x0)
pipe2(0x0, 0x0)
pipe2(&(0x7f00000007c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x0)
syz_usb_connect$cdc_ncm(0x0, 0x81, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x2, 0x1, 0x7, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x1}, {0x6}, [@mbim={0xc, 0x24, 0x1b, 0x0, 0x0, 0x0, 0x0, 0x8}, @dmm={0x7, 0x24, 0x14, 0x0, 0x8}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x20}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x14}}, {{0x9, 0x5, 0x3, 0x2, 0x3ff, 0x3f, 0x7, 0x1f}}}}}}}]}}, &(0x7f00000003c0)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x300, 0x1f, 0x1, 0x1, 0x40, 0x7}, 0x10, &(0x7f0000000300)={0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}]}, 0x1, [{0x4, &(0x7f0000000340)=@lang_id={0x4}}]})

10:08:24 executing program 4:
add_key(&(0x7f0000001300)='pkcs7_test\x00', 0x0, &(0x7f0000001380)="ff11", 0xfffff, 0xffffffffffffffff)

10:08:24 executing program 2:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmmsg(r0, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000004880)=[{0x0}, {0x0, 0xffffffffffffff3b}], 0x2}}], 0x1, 0x0, &(0x7f0000004a40))

10:08:24 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x8000000, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:24 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic]}]}, 0x28}}, 0x0)

10:08:24 executing program 3:
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)

[  423.672355][ T1979] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  423.916563][ T1979] usb 1-1: Using ep0 maxpacket: 8
10:08:25 executing program 4:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0205649, &(0x7f0000000040)={0x0, @pix_mp})

10:08:25 executing program 2:
prctl$PR_GET_TID_ADDRESS(0x8, 0x0)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5eb5c8cad29564937e95bb3ded4934485363837382ae7b28ca143aa4366bcd67f46af36d317b5986c23a0882347a9959d77a9f200b7a54e489fbe7f43df1d496"}, 0x48, 0xfffffffffffffffe)

[  424.034237][ T1979] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 32, changing to 9
[  424.045869][ T1979] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  424.057624][ T1979] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  424.067854][ T1979] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023
10:08:25 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x9000000, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:25 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x28, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x14, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic]}]}, 0x28}}, 0x0)

[  424.455056][ T1979] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  424.464726][ T1979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  424.473350][ T1979] usb 1-1: Product: syz
[  424.477769][ T1979] usb 1-1: Manufacturer: syz
[  424.482852][ T1979] usb 1-1: SerialNumber: syz
10:08:25 executing program 3:
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
recvmsg$can_j1939(r0, &(0x7f0000000180)={&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000140)=[{0x0}, {0x0}], 0x2}, 0x0)

10:08:25 executing program 2:
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

[  424.902393][ T9340] Bluetooth: hci3: command 0x0406 tx timeout
10:08:26 executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r0, 0x8942, &(0x7f0000000040)={'wg1\x00', @ifru_mtu})

10:08:26 executing program 4:
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$SNDCTL_SEQ_CTRLRATE(r0, 0xc0045103, &(0x7f0000000280)=0x3)

10:08:26 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0xf000000, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

[  425.282594][ T1979] cdc_ncm 1-1:1.0: bind() failure
[  425.297517][ T1979] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  425.304692][ T1979] cdc_ncm 1-1:1.1: bind() failure
10:08:26 executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x34, 0x22, 0x925, 0x0, 0x0, {0x11}, [@nested={0x20, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433"]}]}, 0x34}}, 0x0)

[  425.445635][ T1979] usb 1-1: USB disconnect, device number 4
10:08:26 executing program 3:
add_key(&(0x7f0000000100)='asymmetric\x00', 0x0, &(0x7f0000000180)='`6', 0x2, 0xfffffffffffffffb)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)

10:08:26 executing program 2:
add_key(&(0x7f0000000180)='ceph\x00', 0x0, &(0x7f0000000200)="08d8a19599e3ae7e7d6acb62", 0xc, 0xfffffffffffffffe)

10:08:27 executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f00000001c0)={'batadv0\x00', @remote})

10:08:27 executing program 5:
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2800004, 0x12, r0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}], 0x1, 0x9, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1800003, 0x12, r0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001280)={0x48, 0x22, 0x925, 0x60000000, 0x0, {0x11}, [@nested={0x32, 0xe, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @generic="9804df0d91fbbac63ff0e433d4f354c493aa7610ea0845bdd7cc4393d7b7"]}]}, 0x48}}, 0x0)

10:08:27 executing program 0:
request_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0xfffffffffffffffe, 0x0)