Debian GNU/Linux 11 syzkaller ttyS0 Warning: Permanently added '[localhost]:13060' (ECDSA) to the list of known hosts. 2022/10/03 20:04:14 fuzzer started 2022/10/03 20:04:14 dialing manager at localhost:35095 syzkaller login: [ 38.334968] cgroup: Unknown subsys name 'net' [ 38.440573] cgroup: Unknown subsys name 'rlimit' 2022/10/03 20:04:28 syscalls: 211 2022/10/03 20:04:28 code coverage: enabled 2022/10/03 20:04:28 comparison tracing: enabled 2022/10/03 20:04:28 extra coverage: enabled 2022/10/03 20:04:28 setuid sandbox: enabled 2022/10/03 20:04:28 namespace sandbox: enabled 2022/10/03 20:04:28 Android sandbox: enabled 2022/10/03 20:04:28 fault injection: enabled 2022/10/03 20:04:28 leak checking: enabled 2022/10/03 20:04:28 net packet injection: enabled 2022/10/03 20:04:28 net device setup: enabled 2022/10/03 20:04:28 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/10/03 20:04:28 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/10/03 20:04:28 USB emulation: enabled 2022/10/03 20:04:28 hci packet injection: enabled 2022/10/03 20:04:28 wifi device emulation: failed to parse kernel version (6.0.0-rc7-next-20220930) 2022/10/03 20:04:28 802.15.4 emulation: enabled 2022/10/03 20:04:28 fetching corpus: 0, signal 0/0 (executing program) 2022/10/03 20:04:30 starting 8 fuzzer processes 20:04:30 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2000}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x50, 0xffffffffffffffff, 0x8000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x5, 0x8, 0x0, {0x0, r3, r4}}, 0x101) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000140)=0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_TID={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) r5 = openat$incfs(r0, &(0x7f00000002c0)='.pending_reads\x00', 0x40, 0x40) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f0000000300)={0xffffffffffffffff}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x4000, 0x8) symlinkat(&(0x7f0000000340)='./file0\x00', r6, &(0x7f00000003c0)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0x22}}, './file0\x00'}) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x24}}, 0x24000804) 20:04:30 executing program 1: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x5c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x80, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0xa}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/7, 0x7, 0x1, 0x3a}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x57, 0x0, &(0x7f0000000340)="c2b6981656b997eb009368db20dc1393ce645b1ba291830a62170dcbea3e17d5d2d1d8fb6409ccf934313b268d12a9424d63440a19d2a292dafa783341bafa1ae89557106d5bb6dbf7ac1b71c479982c957fd004e4a87f"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r1, &(0x7f0000000440)='./file0/file0\x00', &(0x7f00000004c0)={{r2, r3/1000+10000}, {0x0, 0x2710}}, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = openat$incfs(r1, &(0x7f0000000500)='.pending_reads\x00', 0x8800, 0x100) r5 = geteuid() fchownat(r4, &(0x7f0000000540)='./file0\x00', r5, 0xee00, 0x400) epoll_pwait2(r4, &(0x7f0000000580)=[{}, {}], 0x2, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000600)={[0x2]}, 0x8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000640)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) readlinkat(r4, &(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)=""/4096, 0x1000) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000001740)=0x7) name_to_handle_at(r4, &(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)=@xfs_parent={0x1c, 0x82, {0x1, 0xffffffff, 0x2, 0x3}}, &(0x7f0000001800), 0x1400) openat$incfs(r4, &(0x7f0000001840)='.log\x00', 0x200000, 0x20) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001880), 0x83) 20:04:30 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000000c0)={r0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000001c0)={r1}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x3f, 0x1, 0x1, 0x4, @private0, @loopback, 0x40, 0x7800, 0x3, 0xfe}}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2b934586) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000002c0)={0x2}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x800, 0x5) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000340)=0x1) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000380)=0xd80) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x4010, r2, 0x8000000) r3 = openat$incfs(r2, &(0x7f0000000400)='.log\x00', 0x2000, 0x129) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x7b8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000d, 0x30, r2, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x11, r3, 0x0) r4 = openat$incfs(r3, &(0x7f0000000440)='.log\x00', 0x200000, 0x42) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x20, 0x0, &(0x7f0000000480)=[@free_buffer, @acquire_done={0x40106309, 0x2}], 0x36, 0x0, &(0x7f00000004c0)="d657103c83ed06118bc137babcc095fcd2b26539ac06cab0c88ba4c2a1d24fac6878685dff8145746883e7fdfa14d9ec0101074aab9d"}) 20:04:30 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0xc001, 0x180) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x1, 0x4, 0x8, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x80, 0x80, 0x80, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x2f, 0x5, 0x5, 0x9, 0x41, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0x81, 0x100}}) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', r2, 0x2f, 0x1, 0x3, 0x763, 0x30, @loopback, @rand_addr=' \x01\x00', 0x20, 0x8, 0xf3, 0x7}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14, 0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r5, 0x4, 0x6, 0xd3, 0x3f, 0x2c, @rand_addr=' \x01\x00', @private0, 0x1, 0x10, 0x44, 0x800}}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0xc0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000500)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r6 = epoll_create1(0x80000) epoll_pwait2(r6, &(0x7f0000000540)=[{}, {}], 0x2, &(0x7f0000000580), &(0x7f00000005c0)={[0x8]}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f0000000600)={0x9000000d}) epoll_wait(r6, &(0x7f0000000640)=[{}, {}], 0x2, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'ip6_vti0\x00', r5, 0x29, 0x93, 0x6, 0x5, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x20, 0x10, 0x1, 0x3}}) socket$packet(0x11, 0x2, 0x300) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000007c0)=0x6) 20:04:30 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r0, r1/1000+10000}}) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{0x77359400}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x100, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x6000, 0x400, &(0x7f00000002c0)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) utimensat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x100) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x549c0, 0x2c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000480)={@id={0x2, 0x0, @b}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x240000, 0x111) name_to_handle_at(r3, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540)=@FILEID_INO32_GEN={0x8, 0x1, {0x80, 0x9c1c}}, &(0x7f0000000580), 0x1000) r4 = openat$incfs(r2, &(0x7f00000005c0)='.pending_reads\x00', 0x8542, 0x108) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000600)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000640)={@desc={0x1, 0x0, @desc2}}) mq_timedsend(r4, &(0x7f0000000680)="c92974d2cf90b5fd140fd057b921b4d4ff73eb4a529797870c1845cd9454b530b0a8819d7916341731d36fb16260f25176728ec22e6e348226443604ccf9496ff1efa070b02f83f49bc588ab3f269fb06358aeaf239b787713bde56da14634abbf77c62bc2beef", 0x67, 0x3, &(0x7f0000000700)={0x77359400}) r5 = mq_open(&(0x7f0000000740)=':\x00', 0x40, 0x4, &(0x7f0000000780)={0x91f, 0x8000, 0x5e, 0x9969}) mq_timedreceive(r5, &(0x7f00000007c0)=""/18, 0x12, 0xd5, 0x0) 20:04:30 executing program 4: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x81]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x1) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) pselect6(0x40, &(0x7f0000000280)={0x2, 0x1, 0x6, 0x9987, 0x9e77, 0xfffffffffdd33fe7, 0x401, 0x38000}, &(0x7f00000002c0)={0x1, 0xa58, 0xf28e, 0x3, 0x3, 0x4, 0x3, 0x6}, &(0x7f0000000300)={0x1, 0x8, 0x1, 0x0, 0x0, 0x44, 0xf709, 0x7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x6]}, 0x8}) pselect6(0x40, &(0x7f0000000400)={0x6, 0x450, 0x6, 0x9, 0x5, 0x3, 0x6, 0x4}, &(0x7f0000000440)={0x9, 0x1, 0x9, 0x9, 0x3, 0x2, 0x4, 0x100000001}, &(0x7f0000000480)={0x81, 0x9, 0x1ff, 0x5, 0x80, 0x6, 0x3d1, 0x5}, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000540)={&(0x7f0000000500)={[0x10000]}, 0x8}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x600002, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000005c0)={0x0, 0x1}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x48}}, 0x84000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4084) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000009c0)={0xa0000009}) getuid() sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) [ 53.520716] audit: type=1400 audit(1664827470.156:6): avc: denied { execmem } for pid=282 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 20:04:30 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)=0x1) r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x1000000, 0x4010, r0, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x10000000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000012c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd=r4, 0x657, &(0x7f0000001280)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="c41f3fc4fb013a5a3fbf8a2245c80adaca66bcc9bfc08ddf11be648ccfb17a105758f6e79e32516e42dba4f2651a169d72d6a84f1762954e8fcefc0c7eccbb7a495393c444c7ee56796fdacc763716ee92e37d528856f1dad3307cd616687d15051f89d075c0c9d5ab1f8b58e4ec799b7a55df517a495eae6b3bcaf069e28c13a24d635b505208e7ed2e91dd3ab96d4fbf61b512ee6a18d8eda7faf8cbad8383c16af631a7a078baa74569d5b3b5920340db8ef5e7d484", 0xb7}, {&(0x7f0000001180)="f49a52e7dd5ec3a7ded175a90f3bc5b4febdfd946a37a3df11ce8ba44ab61d3a16540699751af4a49a23d5cc2a98041b3cbf3d7bb5aae71eb97d2de567d71f0aa2ee899022325ef4b3bba91bf2882f4ff604bb782c899825550260c1dbf0d42bbca8208eeff2e46a3f196a29e57e6dbab5e40c8f5ad5e280fce5a24cf4886b78296673d9414d369b34b5a97f34b4ab0e35c89fb4a94957dc4406a21f27da0c0be00a3453bb4cb22ea30119e2f86b72c5f550b2c2743d982f4efe521c8b1241adcefe15cebb73f48f3b557539354aef8a2b49e8ddd500346fe9b992f6fd7fcfd5357b3f704969fd49cba1d2e6e691", 0xee}], 0x3, 0x2, 0x1, {0x1}}, 0x3) r5 = epoll_create1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000001300)={0x0, 0x0, r5, 0x400000, 0x80000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000001400)={'ip6_vti0\x00', &(0x7f0000001380)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x7f, 0x0, 0x40, @empty, @loopback, 0x80, 0x40, 0x10000, 0xfffffff7}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000014c0)={'syztnl2\x00', &(0x7f0000001440)={'sit0\x00', 0x0, 0x4, 0x6, 0x98, 0x2, 0x0, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x40, 0x9, 0x800}}) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x88000022}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x4c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008810}, 0x400c081) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001600)={'wlan1\x00'}) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44) statx(r4, &(0x7f0000001780)='./file0\x00', 0x2000, 0x100, &(0x7f00000017c0)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001940)={'syztnl1\x00', &(0x7f00000018c0)={'sit0\x00', r8, 0x2f, 0x0, 0x2, 0xb856, 0x0, @mcast1, @remote, 0x1, 0x20, 0x5, 0xc11}}) 20:04:30 executing program 7: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xfff, &(0x7f0000ffc000/0x3000)=nil, 0x2) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0) unshare(0x6020480) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_io_uring_setup(0xad8, &(0x7f0000000100)={0x0, 0xc948, 0x14, 0x2, 0x2d9}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0xf31cd728ce4540f5, 0x20, 0x8, 0x40, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x7800, 0x10, 0x101, 0x3}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000440) unshare(0x70000500) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000400)={0x24, @none={0x0, 0x1}}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000440)={0x0, 0x1, r0, 0x8001}) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x4010, r0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) renameat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') modify_ldt$write2(0x11, &(0x7f0000000540)={0xfffffff8, 0x20000000, 0x4000, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000580)=0x1, 0x4) getdents(0xffffffffffffff9c, &(0x7f00000005c0)=""/97, 0x61) [ 54.835869] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.837724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.839033] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.840530] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.841699] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.844001] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.846232] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.848308] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.849655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.850837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.852891] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.859623] Bluetooth: hci0: HCI_REQ-0x0c1a [ 54.883250] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.889624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.891442] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.894235] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.895982] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.897492] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.904612] Bluetooth: hci2: HCI_REQ-0x0c1a [ 54.988737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.000508] Bluetooth: hci1: HCI_REQ-0x0c1a [ 55.000662] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 55.002796] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 55.020609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 55.021622] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 55.030696] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 55.031938] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 55.033591] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 55.050033] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 55.051318] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 55.053681] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 55.055427] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 55.061457] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 55.063293] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 55.064898] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 55.066691] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.074328] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 55.080581] Bluetooth: hci7: HCI_REQ-0x0c1a [ 55.094799] Bluetooth: hci6: HCI_REQ-0x0c1a [ 55.101933] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 55.122176] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 55.124229] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.127468] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 55.138974] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.144547] Bluetooth: hci5: HCI_REQ-0x0c1a [ 55.174160] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.189615] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.193628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.204513] Bluetooth: hci4: HCI_REQ-0x0c1a [ 56.905718] Bluetooth: hci0: command 0x0409 tx timeout [ 56.968416] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 56.968461] Bluetooth: hci2: command 0x0409 tx timeout [ 57.033444] Bluetooth: hci1: command 0x0409 tx timeout [ 57.096471] Bluetooth: hci7: command 0x0409 tx timeout [ 57.160456] Bluetooth: hci5: command 0x0409 tx timeout [ 57.160579] Bluetooth: hci6: command 0x0409 tx timeout [ 57.225468] Bluetooth: hci4: command 0x0409 tx timeout [ 58.952414] Bluetooth: hci0: command 0x041b tx timeout [ 59.016556] Bluetooth: hci2: command 0x041b tx timeout [ 59.080392] Bluetooth: hci1: command 0x041b tx timeout [ 59.145395] Bluetooth: hci7: command 0x041b tx timeout [ 59.208440] Bluetooth: hci5: command 0x041b tx timeout [ 59.208847] Bluetooth: hci6: command 0x041b tx timeout [ 59.272399] Bluetooth: hci4: command 0x041b tx timeout [ 61.000453] Bluetooth: hci0: command 0x040f tx timeout [ 61.064447] Bluetooth: hci2: command 0x040f tx timeout [ 61.128440] Bluetooth: hci1: command 0x040f tx timeout [ 61.192424] Bluetooth: hci7: command 0x040f tx timeout [ 61.256531] Bluetooth: hci6: command 0x040f tx timeout [ 61.256557] Bluetooth: hci5: command 0x040f tx timeout [ 61.320442] Bluetooth: hci4: command 0x040f tx timeout [ 61.640424] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 63.048403] Bluetooth: hci0: command 0x0419 tx timeout [ 63.112495] Bluetooth: hci2: command 0x0419 tx timeout [ 63.176455] Bluetooth: hci1: command 0x0419 tx timeout [ 63.241401] Bluetooth: hci7: command 0x0419 tx timeout [ 63.304448] Bluetooth: hci5: command 0x0419 tx timeout [ 63.305503] Bluetooth: hci6: command 0x0419 tx timeout [ 63.368398] Bluetooth: hci4: command 0x0419 tx timeout [ 66.056426] Bluetooth: hci3: Opcode 0x c03 failed: -110 [ 68.618028] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.621144] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.623036] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.628487] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.631536] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.633419] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.637547] Bluetooth: hci3: HCI_REQ-0x0c1a [ 70.664453] Bluetooth: hci3: command 0x0409 tx timeout [ 72.712433] Bluetooth: hci3: command 0x041b tx timeout [ 74.760404] Bluetooth: hci3: command 0x040f tx timeout [ 76.808435] Bluetooth: hci3: command 0x0419 tx timeout 20:05:24 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r0, r1/1000+10000}}) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{0x77359400}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x100, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x6000, 0x400, &(0x7f00000002c0)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) utimensat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x100) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x549c0, 0x2c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000480)={@id={0x2, 0x0, @b}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x240000, 0x111) name_to_handle_at(r3, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540)=@FILEID_INO32_GEN={0x8, 0x1, {0x80, 0x9c1c}}, &(0x7f0000000580), 0x1000) r4 = openat$incfs(r2, &(0x7f00000005c0)='.pending_reads\x00', 0x8542, 0x108) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000600)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000640)={@desc={0x1, 0x0, @desc2}}) mq_timedsend(r4, &(0x7f0000000680)="c92974d2cf90b5fd140fd057b921b4d4ff73eb4a529797870c1845cd9454b530b0a8819d7916341731d36fb16260f25176728ec22e6e348226443604ccf9496ff1efa070b02f83f49bc588ab3f269fb06358aeaf239b787713bde56da14634abbf77c62bc2beef", 0x67, 0x3, &(0x7f0000000700)={0x77359400}) r5 = mq_open(&(0x7f0000000740)=':\x00', 0x40, 0x4, &(0x7f0000000780)={0x91f, 0x8000, 0x5e, 0x9969}) mq_timedreceive(r5, &(0x7f00000007c0)=""/18, 0x12, 0xd5, 0x0) 20:05:24 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r0, r1/1000+10000}}) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{0x77359400}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x100, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x6000, 0x400, &(0x7f00000002c0)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) utimensat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x100) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x549c0, 0x2c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000480)={@id={0x2, 0x0, @b}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x240000, 0x111) name_to_handle_at(r3, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540)=@FILEID_INO32_GEN={0x8, 0x1, {0x80, 0x9c1c}}, &(0x7f0000000580), 0x1000) r4 = openat$incfs(r2, &(0x7f00000005c0)='.pending_reads\x00', 0x8542, 0x108) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000600)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000640)={@desc={0x1, 0x0, @desc2}}) mq_timedsend(r4, &(0x7f0000000680)="c92974d2cf90b5fd140fd057b921b4d4ff73eb4a529797870c1845cd9454b530b0a8819d7916341731d36fb16260f25176728ec22e6e348226443604ccf9496ff1efa070b02f83f49bc588ab3f269fb06358aeaf239b787713bde56da14634abbf77c62bc2beef", 0x67, 0x3, &(0x7f0000000700)={0x77359400}) r5 = mq_open(&(0x7f0000000740)=':\x00', 0x40, 0x4, &(0x7f0000000780)={0x91f, 0x8000, 0x5e, 0x9969}) mq_timedreceive(r5, &(0x7f00000007c0)=""/18, 0x12, 0xd5, 0x0) 20:05:24 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r0, r1/1000+10000}}) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{0x77359400}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x100, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x6000, 0x400, &(0x7f00000002c0)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) utimensat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x100) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x549c0, 0x2c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000480)={@id={0x2, 0x0, @b}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x240000, 0x111) name_to_handle_at(r3, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540)=@FILEID_INO32_GEN={0x8, 0x1, {0x80, 0x9c1c}}, &(0x7f0000000580), 0x1000) r4 = openat$incfs(r2, &(0x7f00000005c0)='.pending_reads\x00', 0x8542, 0x108) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000600)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000640)={@desc={0x1, 0x0, @desc2}}) mq_timedsend(r4, &(0x7f0000000680)="c92974d2cf90b5fd140fd057b921b4d4ff73eb4a529797870c1845cd9454b530b0a8819d7916341731d36fb16260f25176728ec22e6e348226443604ccf9496ff1efa070b02f83f49bc588ab3f269fb06358aeaf239b787713bde56da14634abbf77c62bc2beef", 0x67, 0x3, &(0x7f0000000700)={0x77359400}) r5 = mq_open(&(0x7f0000000740)=':\x00', 0x40, 0x4, &(0x7f0000000780)={0x91f, 0x8000, 0x5e, 0x9969}) mq_timedreceive(r5, &(0x7f00000007c0)=""/18, 0x12, 0xd5, 0x0) 20:05:24 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r0, r1/1000+10000}}) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{0x77359400}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x100, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x6000, 0x400, &(0x7f00000002c0)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) utimensat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x100) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x549c0, 0x2c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000480)={@id={0x2, 0x0, @b}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x240000, 0x111) name_to_handle_at(r3, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540)=@FILEID_INO32_GEN={0x8, 0x1, {0x80, 0x9c1c}}, &(0x7f0000000580), 0x1000) r4 = openat$incfs(r2, &(0x7f00000005c0)='.pending_reads\x00', 0x8542, 0x108) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000600)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000640)={@desc={0x1, 0x0, @desc2}}) mq_timedsend(r4, &(0x7f0000000680)="c92974d2cf90b5fd140fd057b921b4d4ff73eb4a529797870c1845cd9454b530b0a8819d7916341731d36fb16260f25176728ec22e6e348226443604ccf9496ff1efa070b02f83f49bc588ab3f269fb06358aeaf239b787713bde56da14634abbf77c62bc2beef", 0x67, 0x3, &(0x7f0000000700)={0x77359400}) mq_timedreceive(0xffffffffffffffff, &(0x7f00000007c0)=""/18, 0x12, 0xd5, 0x0) 20:05:24 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r0, r1/1000+10000}}) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{0x77359400}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x100, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x6000, 0x400, &(0x7f00000002c0)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) utimensat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x100) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x549c0, 0x2c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000480)={@id={0x2, 0x0, @b}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x240000, 0x111) name_to_handle_at(r3, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540)=@FILEID_INO32_GEN={0x8, 0x1, {0x80, 0x9c1c}}, &(0x7f0000000580), 0x1000) r4 = openat$incfs(r2, &(0x7f00000005c0)='.pending_reads\x00', 0x8542, 0x108) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000600)) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r3, 0xc0406619, &(0x7f0000000640)={@desc={0x1, 0x0, @desc2}}) mq_timedreceive(0xffffffffffffffff, &(0x7f00000007c0)=""/18, 0x12, 0xd5, 0x0) 20:05:25 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r0, r1/1000+10000}}) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{0x77359400}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x100, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x6000, 0x400, &(0x7f00000002c0)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) utimensat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x100) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x549c0, 0x2c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000480)={@id={0x2, 0x0, @b}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x240000, 0x111) name_to_handle_at(r3, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540)=@FILEID_INO32_GEN={0x8, 0x1, {0x80, 0x9c1c}}, &(0x7f0000000580), 0x1000) r4 = openat$incfs(r2, &(0x7f00000005c0)='.pending_reads\x00', 0x8542, 0x108) ioctl$BINDER_GET_FROZEN_INFO(r4, 0xc00c620f, &(0x7f0000000600)) mq_timedreceive(0xffffffffffffffff, &(0x7f00000007c0)=""/18, 0x12, 0xd5, 0x0) 20:05:25 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r0, r1/1000+10000}}) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{0x77359400}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x100, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x6000, 0x400, &(0x7f00000002c0)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) utimensat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x100) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x549c0, 0x2c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000480)={@id={0x2, 0x0, @b}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x240000, 0x111) name_to_handle_at(r3, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540)=@FILEID_INO32_GEN={0x8, 0x1, {0x80, 0x9c1c}}, &(0x7f0000000580), 0x1000) openat$incfs(r2, &(0x7f00000005c0)='.pending_reads\x00', 0x8542, 0x108) mq_timedreceive(0xffffffffffffffff, &(0x7f00000007c0)=""/18, 0x12, 0xd5, 0x0) 20:05:25 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r0, r1/1000+10000}}) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{0x77359400}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x100, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x6000, 0x400, &(0x7f00000002c0)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) utimensat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x100) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x549c0, 0x2c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000480)={@id={0x2, 0x0, @b}}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x240000, 0x111) name_to_handle_at(r3, &(0x7f0000000500)='./file1\x00', &(0x7f0000000540)=@FILEID_INO32_GEN={0x8, 0x1, {0x80, 0x9c1c}}, &(0x7f0000000580), 0x1000) mq_timedreceive(0xffffffffffffffff, &(0x7f00000007c0)=""/18, 0x12, 0xd5, 0x0) [ 109.024525] audit: type=1400 audit(1664827525.660:7): avc: denied { block_suspend } for pid=3744 comm="syz-executor.4" capability=36 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 [ 110.169596] Unsupported ieee802154 address type: 0 20:05:45 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0xc001, 0x180) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x1, 0x4, 0x8, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x80, 0x80, 0x80, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x2f, 0x5, 0x5, 0x9, 0x41, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0x81, 0x100}}) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', r2, 0x2f, 0x1, 0x3, 0x763, 0x30, @loopback, @rand_addr=' \x01\x00', 0x20, 0x8, 0xf3, 0x7}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14, 0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r5, 0x4, 0x6, 0xd3, 0x3f, 0x2c, @rand_addr=' \x01\x00', @private0, 0x1, 0x10, 0x44, 0x800}}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0xc0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000500)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r6 = epoll_create1(0x80000) epoll_pwait2(r6, &(0x7f0000000540)=[{}, {}], 0x2, &(0x7f0000000580), &(0x7f00000005c0)={[0x8]}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f0000000600)={0x9000000d}) epoll_wait(r6, &(0x7f0000000640)=[{}, {}], 0x2, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'ip6_vti0\x00', r5, 0x29, 0x93, 0x6, 0x5, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x20, 0x10, 0x1, 0x3}}) socket$packet(0x11, 0x2, 0x300) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000007c0)=0x6) 20:05:45 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2000}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x50, 0xffffffffffffffff, 0x8000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x5, 0x8, 0x0, {0x0, r3, r4}}, 0x101) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000140)=0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_TID={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) r5 = openat$incfs(r0, &(0x7f00000002c0)='.pending_reads\x00', 0x40, 0x40) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f0000000300)={0xffffffffffffffff}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x4000, 0x8) symlinkat(&(0x7f0000000340)='./file0\x00', r6, &(0x7f00000003c0)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0x22}}, './file0\x00'}) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x24}}, 0x24000804) 20:05:45 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000000c0)={r0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000001c0)={r1}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x3f, 0x1, 0x1, 0x4, @private0, @loopback, 0x40, 0x7800, 0x3, 0xfe}}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2b934586) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000002c0)={0x2}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x800, 0x5) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000340)=0x1) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000380)=0xd80) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x4010, r2, 0x8000000) r3 = openat$incfs(r2, &(0x7f0000000400)='.log\x00', 0x2000, 0x129) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x7b8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000d, 0x30, r2, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x11, r3, 0x0) r4 = openat$incfs(r3, &(0x7f0000000440)='.log\x00', 0x200000, 0x42) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x20, 0x0, &(0x7f0000000480)=[@free_buffer, @acquire_done={0x40106309, 0x2}], 0x36, 0x0, &(0x7f00000004c0)="d657103c83ed06118bc137babcc095fcd2b26539ac06cab0c88ba4c2a1d24fac6878685dff8145746883e7fdfa14d9ec0101074aab9d"}) 20:05:45 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r0, r1/1000+10000}}) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{0x77359400}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x100, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x6000, 0x400, &(0x7f00000002c0)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) utimensat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x100) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x549c0, 0x2c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000480)={@id={0x2, 0x0, @b}}) openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x240000, 0x111) mq_timedreceive(0xffffffffffffffff, &(0x7f00000007c0)=""/18, 0x12, 0xd5, 0x0) 20:05:45 executing program 1: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x5c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x80, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0xa}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/7, 0x7, 0x1, 0x3a}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x57, 0x0, &(0x7f0000000340)="c2b6981656b997eb009368db20dc1393ce645b1ba291830a62170dcbea3e17d5d2d1d8fb6409ccf934313b268d12a9424d63440a19d2a292dafa783341bafa1ae89557106d5bb6dbf7ac1b71c479982c957fd004e4a87f"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r1, &(0x7f0000000440)='./file0/file0\x00', &(0x7f00000004c0)={{r2, r3/1000+10000}, {0x0, 0x2710}}, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = openat$incfs(r1, &(0x7f0000000500)='.pending_reads\x00', 0x8800, 0x100) r5 = geteuid() fchownat(r4, &(0x7f0000000540)='./file0\x00', r5, 0xee00, 0x400) epoll_pwait2(r4, &(0x7f0000000580)=[{}, {}], 0x2, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000600)={[0x2]}, 0x8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000640)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) readlinkat(r4, &(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)=""/4096, 0x1000) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000001740)=0x7) name_to_handle_at(r4, &(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)=@xfs_parent={0x1c, 0x82, {0x1, 0xffffffff, 0x2, 0x3}}, &(0x7f0000001800), 0x1400) openat$incfs(r4, &(0x7f0000001840)='.log\x00', 0x200000, 0x20) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001880), 0x83) 20:05:45 executing program 4: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x81]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x1) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) pselect6(0x40, &(0x7f0000000280)={0x2, 0x1, 0x6, 0x9987, 0x9e77, 0xfffffffffdd33fe7, 0x401, 0x38000}, &(0x7f00000002c0)={0x1, 0xa58, 0xf28e, 0x3, 0x3, 0x4, 0x3, 0x6}, &(0x7f0000000300)={0x1, 0x8, 0x1, 0x0, 0x0, 0x44, 0xf709, 0x7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x6]}, 0x8}) pselect6(0x40, &(0x7f0000000400)={0x6, 0x450, 0x6, 0x9, 0x5, 0x3, 0x6, 0x4}, &(0x7f0000000440)={0x9, 0x1, 0x9, 0x9, 0x3, 0x2, 0x4, 0x100000001}, &(0x7f0000000480)={0x81, 0x9, 0x1ff, 0x5, 0x80, 0x6, 0x3d1, 0x5}, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000540)={&(0x7f0000000500)={[0x10000]}, 0x8}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x600002, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000005c0)={0x0, 0x1}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x48}}, 0x84000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4084) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000009c0)={0xa0000009}) getuid() sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) 20:05:45 executing program 7: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xfff, &(0x7f0000ffc000/0x3000)=nil, 0x2) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0) unshare(0x6020480) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_io_uring_setup(0xad8, &(0x7f0000000100)={0x0, 0xc948, 0x14, 0x2, 0x2d9}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0xf31cd728ce4540f5, 0x20, 0x8, 0x40, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x7800, 0x10, 0x101, 0x3}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000440) unshare(0x70000500) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000400)={0x24, @none={0x0, 0x1}}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000440)={0x0, 0x1, r0, 0x8001}) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x4010, r0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) renameat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') modify_ldt$write2(0x11, &(0x7f0000000540)={0xfffffff8, 0x20000000, 0x4000, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000580)=0x1, 0x4) getdents(0xffffffffffffff9c, &(0x7f00000005c0)=""/97, 0x61) 20:05:45 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)=0x1) r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x1000000, 0x4010, r0, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x10000000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000012c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd=r4, 0x657, &(0x7f0000001280)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="c41f3fc4fb013a5a3fbf8a2245c80adaca66bcc9bfc08ddf11be648ccfb17a105758f6e79e32516e42dba4f2651a169d72d6a84f1762954e8fcefc0c7eccbb7a495393c444c7ee56796fdacc763716ee92e37d528856f1dad3307cd616687d15051f89d075c0c9d5ab1f8b58e4ec799b7a55df517a495eae6b3bcaf069e28c13a24d635b505208e7ed2e91dd3ab96d4fbf61b512ee6a18d8eda7faf8cbad8383c16af631a7a078baa74569d5b3b5920340db8ef5e7d484", 0xb7}, {&(0x7f0000001180)="f49a52e7dd5ec3a7ded175a90f3bc5b4febdfd946a37a3df11ce8ba44ab61d3a16540699751af4a49a23d5cc2a98041b3cbf3d7bb5aae71eb97d2de567d71f0aa2ee899022325ef4b3bba91bf2882f4ff604bb782c899825550260c1dbf0d42bbca8208eeff2e46a3f196a29e57e6dbab5e40c8f5ad5e280fce5a24cf4886b78296673d9414d369b34b5a97f34b4ab0e35c89fb4a94957dc4406a21f27da0c0be00a3453bb4cb22ea30119e2f86b72c5f550b2c2743d982f4efe521c8b1241adcefe15cebb73f48f3b557539354aef8a2b49e8ddd500346fe9b992f6fd7fcfd5357b3f704969fd49cba1d2e6e691", 0xee}], 0x3, 0x2, 0x1, {0x1}}, 0x3) r5 = epoll_create1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000001300)={0x0, 0x0, r5, 0x400000, 0x80000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000001400)={'ip6_vti0\x00', &(0x7f0000001380)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x7f, 0x0, 0x40, @empty, @loopback, 0x80, 0x40, 0x10000, 0xfffffff7}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000014c0)={'syztnl2\x00', &(0x7f0000001440)={'sit0\x00', 0x0, 0x4, 0x6, 0x98, 0x2, 0x0, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x40, 0x9, 0x800}}) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x88000022}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x4c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008810}, 0x400c081) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001600)={'wlan1\x00'}) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44) statx(r4, &(0x7f0000001780)='./file0\x00', 0x2000, 0x100, &(0x7f00000017c0)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001940)={'syztnl1\x00', &(0x7f00000018c0)={'sit0\x00', r8, 0x2f, 0x0, 0x2, 0xb856, 0x0, @mcast1, @remote, 0x1, 0x20, 0x5, 0xc11}}) 20:05:45 executing program 1: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x5c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x80, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0xa}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/7, 0x7, 0x1, 0x3a}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x57, 0x0, &(0x7f0000000340)="c2b6981656b997eb009368db20dc1393ce645b1ba291830a62170dcbea3e17d5d2d1d8fb6409ccf934313b268d12a9424d63440a19d2a292dafa783341bafa1ae89557106d5bb6dbf7ac1b71c479982c957fd004e4a87f"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r1, &(0x7f0000000440)='./file0/file0\x00', &(0x7f00000004c0)={{r2, r3/1000+10000}, {0x0, 0x2710}}, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = openat$incfs(r1, &(0x7f0000000500)='.pending_reads\x00', 0x8800, 0x100) r5 = geteuid() fchownat(r4, &(0x7f0000000540)='./file0\x00', r5, 0xee00, 0x400) epoll_pwait2(r4, &(0x7f0000000580)=[{}, {}], 0x2, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000600)={[0x2]}, 0x8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000640)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) readlinkat(r4, &(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)=""/4096, 0x1000) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000001740)=0x7) name_to_handle_at(r4, &(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)=@xfs_parent={0x1c, 0x82, {0x1, 0xffffffff, 0x2, 0x3}}, &(0x7f0000001800), 0x1400) openat$incfs(r4, &(0x7f0000001840)='.log\x00', 0x200000, 0x20) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001880), 0x83) 20:05:45 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000000c0)={r0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000001c0)={r1}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x3f, 0x1, 0x1, 0x4, @private0, @loopback, 0x40, 0x7800, 0x3, 0xfe}}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2b934586) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000002c0)={0x2}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x800, 0x5) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000340)=0x1) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000380)=0xd80) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x4010, r2, 0x8000000) r3 = openat$incfs(r2, &(0x7f0000000400)='.log\x00', 0x2000, 0x129) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x7b8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000d, 0x30, r2, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x11, r3, 0x0) r4 = openat$incfs(r3, &(0x7f0000000440)='.log\x00', 0x200000, 0x42) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x20, 0x0, &(0x7f0000000480)=[@free_buffer, @acquire_done={0x40106309, 0x2}], 0x36, 0x0, &(0x7f00000004c0)="d657103c83ed06118bc137babcc095fcd2b26539ac06cab0c88ba4c2a1d24fac6878685dff8145746883e7fdfa14d9ec0101074aab9d"}) 20:05:45 executing program 1: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x5c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x80, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0xa}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/7, 0x7, 0x1, 0x3a}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x57, 0x0, &(0x7f0000000340)="c2b6981656b997eb009368db20dc1393ce645b1ba291830a62170dcbea3e17d5d2d1d8fb6409ccf934313b268d12a9424d63440a19d2a292dafa783341bafa1ae89557106d5bb6dbf7ac1b71c479982c957fd004e4a87f"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r1, &(0x7f0000000440)='./file0/file0\x00', &(0x7f00000004c0)={{r2, r3/1000+10000}, {0x0, 0x2710}}, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = openat$incfs(r1, &(0x7f0000000500)='.pending_reads\x00', 0x8800, 0x100) r5 = geteuid() fchownat(r4, &(0x7f0000000540)='./file0\x00', r5, 0xee00, 0x400) epoll_pwait2(r4, &(0x7f0000000580)=[{}, {}], 0x2, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000600)={[0x2]}, 0x8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000640)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) readlinkat(r4, &(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)=""/4096, 0x1000) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000001740)=0x7) name_to_handle_at(r4, &(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)=@xfs_parent={0x1c, 0x82, {0x1, 0xffffffff, 0x2, 0x3}}, &(0x7f0000001800), 0x1400) openat$incfs(r4, &(0x7f0000001840)='.log\x00', 0x200000, 0x20) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001880), 0x83) 20:05:45 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2000}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x50, 0xffffffffffffffff, 0x8000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x5, 0x8, 0x0, {0x0, r3, r4}}, 0x101) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000140)=0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_TID={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) r5 = openat$incfs(r0, &(0x7f00000002c0)='.pending_reads\x00', 0x40, 0x40) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f0000000300)={0xffffffffffffffff}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x4000, 0x8) symlinkat(&(0x7f0000000340)='./file0\x00', r6, &(0x7f00000003c0)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0x22}}, './file0\x00'}) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x24}}, 0x24000804) [ 129.099388] Unsupported ieee802154 address type: 0 20:05:45 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r0, r1/1000+10000}}) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{0x77359400}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x100, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x6000, 0x400, &(0x7f00000002c0)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) utimensat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x100) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x549c0, 0x2c) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r2, 0xc0406619, &(0x7f0000000480)={@id={0x2, 0x0, @b}}) mq_timedreceive(0xffffffffffffffff, &(0x7f00000007c0)=""/18, 0x12, 0xd5, 0x0) 20:05:45 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000000c0)={r0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000001c0)={r1}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x3f, 0x1, 0x1, 0x4, @private0, @loopback, 0x40, 0x7800, 0x3, 0xfe}}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2b934586) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000002c0)={0x2}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x800, 0x5) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000340)=0x1) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000380)=0xd80) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x4010, r2, 0x8000000) r3 = openat$incfs(r2, &(0x7f0000000400)='.log\x00', 0x2000, 0x129) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x7b8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000d, 0x30, r2, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x11, r3, 0x0) r4 = openat$incfs(r3, &(0x7f0000000440)='.log\x00', 0x200000, 0x42) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000500)={0x20, 0x0, &(0x7f0000000480)=[@free_buffer, @acquire_done={0x40106309, 0x2}], 0x36, 0x0, &(0x7f00000004c0)="d657103c83ed06118bc137babcc095fcd2b26539ac06cab0c88ba4c2a1d24fac6878685dff8145746883e7fdfa14d9ec0101074aab9d"}) 20:05:45 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2000}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x50, 0xffffffffffffffff, 0x8000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x5, 0x8, 0x0, {0x0, r3, r4}}, 0x101) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000140)=0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_TID={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) r5 = openat$incfs(r0, &(0x7f00000002c0)='.pending_reads\x00', 0x40, 0x40) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f0000000300)={0xffffffffffffffff}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x4000, 0x8) symlinkat(&(0x7f0000000340)='./file0\x00', r6, &(0x7f00000003c0)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0x22}}, './file0\x00'}) sendmsg$SMC_PNETID_GET(r7, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, 0x0, 0x20, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x24}}, 0x24000804) 20:05:45 executing program 1: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x5c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x80, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0xa}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/7, 0x7, 0x1, 0x3a}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x57, 0x0, &(0x7f0000000340)="c2b6981656b997eb009368db20dc1393ce645b1ba291830a62170dcbea3e17d5d2d1d8fb6409ccf934313b268d12a9424d63440a19d2a292dafa783341bafa1ae89557106d5bb6dbf7ac1b71c479982c957fd004e4a87f"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r1, &(0x7f0000000440)='./file0/file0\x00', &(0x7f00000004c0)={{r2, r3/1000+10000}, {0x0, 0x2710}}, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = openat$incfs(r1, &(0x7f0000000500)='.pending_reads\x00', 0x8800, 0x100) r5 = geteuid() fchownat(r4, &(0x7f0000000540)='./file0\x00', r5, 0xee00, 0x400) epoll_pwait2(r4, &(0x7f0000000580)=[{}, {}], 0x2, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000600)={[0x2]}, 0x8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000640)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) readlinkat(r4, &(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)=""/4096, 0x1000) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000001740)=0x7) name_to_handle_at(r4, &(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)=@xfs_parent={0x1c, 0x82, {0x1, 0xffffffff, 0x2, 0x3}}, &(0x7f0000001800), 0x1400) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001880), 0x83) 20:05:56 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0xc001, 0x180) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x1, 0x4, 0x8, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x80, 0x80, 0x80, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x2f, 0x5, 0x5, 0x9, 0x41, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0x81, 0x100}}) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', r2, 0x2f, 0x1, 0x3, 0x763, 0x30, @loopback, @rand_addr=' \x01\x00', 0x20, 0x8, 0xf3, 0x7}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14, 0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r5, 0x4, 0x6, 0xd3, 0x3f, 0x2c, @rand_addr=' \x01\x00', @private0, 0x1, 0x10, 0x44, 0x800}}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0xc0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000500)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r6 = epoll_create1(0x80000) epoll_pwait2(r6, &(0x7f0000000540)=[{}, {}], 0x2, &(0x7f0000000580), &(0x7f00000005c0)={[0x8]}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f0000000600)={0x9000000d}) epoll_wait(r6, &(0x7f0000000640)=[{}, {}], 0x2, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'ip6_vti0\x00', r5, 0x29, 0x93, 0x6, 0x5, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x20, 0x10, 0x1, 0x3}}) socket$packet(0x11, 0x2, 0x300) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000007c0)=0x6) 20:05:56 executing program 1: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x5c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x80, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0xa}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/7, 0x7, 0x1, 0x3a}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x57, 0x0, &(0x7f0000000340)="c2b6981656b997eb009368db20dc1393ce645b1ba291830a62170dcbea3e17d5d2d1d8fb6409ccf934313b268d12a9424d63440a19d2a292dafa783341bafa1ae89557106d5bb6dbf7ac1b71c479982c957fd004e4a87f"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r1, &(0x7f0000000440)='./file0/file0\x00', &(0x7f00000004c0)={{r2, r3/1000+10000}, {0x0, 0x2710}}, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = openat$incfs(r1, &(0x7f0000000500)='.pending_reads\x00', 0x8800, 0x100) r5 = geteuid() fchownat(r4, &(0x7f0000000540)='./file0\x00', r5, 0xee00, 0x400) epoll_pwait2(r4, &(0x7f0000000580)=[{}, {}], 0x2, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000600)={[0x2]}, 0x8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000640)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) readlinkat(r4, &(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)=""/4096, 0x1000) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000001740)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001880), 0x83) 20:05:56 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)=0x1) r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x1000000, 0x4010, r0, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x10000000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000012c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd=r4, 0x657, &(0x7f0000001280)=[{&(0x7f00000000c0)="031e0f3c2b20d4df09f49ca83108dcfdff74278ad16801380495e9df99f553e8fe3557ccf81b3a68b772d5cb5986a8894a8a1f6d140e45d2bc57bfa530522a70d99a50b02364bc64c67d549a9514c49aa84d78f0c36d7be304e8ff212d5e947db2474a6a4a0dd49d9497ff02c35446f5506679a5862b62c4a2fe9d812c54ffbcf07df86c9bf3689026c6dc066483a7893eeeaddc6341a1443e2372d7fc9972163a0a03226ebe15a4ff1d5415311024031b01871463e130a387b522249c0b8635311ad1c7ce787167030759304df3c34e96e28858b31c58ba5ae627c72e8b98c9ff590ce42dd86f246694556b7ea8557630b2d6f16b5544cf11d130fc24f8ddf5789af191b5e9f02254030e6a972d3431e4909b4172d7c9e4401844c36c527fe110f2508b6a39a8d1ecbd0d6d47d11c1e977f7ecab17c0567b5fa6dc9833a583a468462082b43510d0c38fee15e8c1cfde5be13abb9152e42f965df8e421233ba4c155d9af78fd6388df3c7b9dc1a0d8dbc0cddf5b6a835fd28f9ba4c7ed5c41cda59eefa86781d3d1464d81afa91ef6611dacbf16037b18513f074f323a60ed9e0f9a4fb6a3899ea482d500da8b3d61020fcca22c67d5124fea5dc843a29c0077a1e478b2f4ce0b1f52706c99208b6d0da55e8336b42a12fcd8195ebf9ee7400597378832eed76d450a2e9fba71f7ca004c726000ff763de552929eb5b972da4ee2550f75379f916dd3beafc4d12c02daa30549d1084a90d218368b6cfeb34f3c7e80aa7bf9d8052c646e6205a6a8be9497cd8616daa4fa9cfa6809c42145b22fec3f986350db77beb357228cb848db13e7972267834b11de4b86e0c25d18e201bf4fb3ecb8df43737950e11961e0f322e749f2e02f9c7dbcd76d260af2f030bc213d8d611f111ed70fdc413d2275e0ea6f9c60308cc4bda95d30a096c2402c801618aef561c9c7802688b0a07e840b62659ea6769e51c9dd3484f7d6b3c3188586b66152f9b1ae6bcfea79fd9801e116df4c3ceb7921183b093a8321d91c5a74dd2c28427d4d3c7f6aa87fa6ea078b2ee0750dcc5d032b5f8c37ae6951a35b6aa08e995be249b62fcaa3e5afc7f9b48a67639b4d9841d80ccff608607d448f1487bf8221581ebad157bb3b5a99339cbd65040bec41757da38ed0e14abf3338b4255610539ddcfb53d2512fe44978a8cd5d4b564dc7adcc94c1b329721a879064b300b281069560520f3230639590372b0b6366d16947234507b597a6415ff20247eff0a67abcab499dbe31a32cb4d9a8b41de8a531658c7e7ddc7484e2b61a5930801f2475ad9571294b468958921e787140c4404855f95dee2f6cd1d3aa28dcb83f3e1f73f1da9909a012b9879c9ed9435601dbd659943df764a26749e9df86a5cee4a47d5cf26e789ada3c40df8d68119c422bcd959e6b86a9daba07d7959ab9203ba155ebb7be248d0229a6b2a55b3742ab01310499a08d82f7884bd871667ee016901ba3613a8d2c9f28fbea4224731ae6365b7b1b92eab67ada41d93933e4fd46fac3aeba77d22e9b63327933852695670fc9cbc24df67116d96723c78b126cc08ded590b90536187fa9e1d62336a0cd1bacba76788888a9f3f16e4dcb5abb5df50a96e7387a369bb4e4effe489cfddf6db5b7549a5a1977262e8dee4c5e84c814980a9144fd5a0593cddbdd9f1f062f7a26f878be1081a0da3a24a93cdc8253d8d1f8bc962becf48ceb2c6dd0026bb2f6dabf1aeb1f63fbb15b9b848c006d0b710ece520940a4891d4ed3ad44f2315ff61692af65f9f2921ac7c6d5f9380c081b3f58515c4f4475a493e134a0b296fa6ca031fc8ec332c63c5ecbf383c01989594b2df70598b07708f9a2cff40a2abcb9fb123de6a65105e7845565f2f509b5d637397ea763b6a5d64d1cd0829b8e2c9940def0e36bf7087ed068de3d403bfe159598ffb8cf1dc20eed32bae2eeebdaa68dfb565cb966bd2054f1d31f9f2ec3e39d98678bf33c3e52862b39231b9b79220d62701f26894b47a7187a419efe02194a846d92c06c18bcbdb819c32113e8a48e75d4dd5f2ff1263c46e128cf2a2f40e37dfd98b13387da333e9759f313f0696d442d0d12846758a2eb4c924f02751aa1a573b3c6037d2d7da93610cddff85e8767953ae708edd748af78404df424a651f0e9c2f9ae5a28a3e9ae5d0d45500da09eee303e451192df356e0023a677f2acbddb8d29c55d5fb528b888b8213647bfe470d77ce3d7eba7969b3a50f875038ecb39257054f4c9f47c2ce70bba2c72af911f371201614654c7757c159e4841f7fc5ad32c3b19a2e9fbbe91b26aeb1125df330890fe9646cc744821d0f055db60c30eff2f83594ddef9141a504d92299a4e5296375be9e27019be7773ef0b255cf909ee420f3f7e6f3a51cdaaf46fffb606a94cfad2daae2ef931cbeaee1cc77a1e2fda1477af9a08126a17c99d45dcfa5af585215a2678488109f2145109fbff547ca743ae384c47a134e98f2f6f2ad1f63fcdcd3e29acbb6bf5959495f3906918ab9294ed9bbab3254f97477d6e4b9fc9affa439a88944d4d258be0601e22055c35191d32d2fdbf4d06716cd69c52b1c7a9fbf02576b9fb3ab4b9f5c392451511eeb17b050025be54db8d6cb0ef8c963e303217036fbc90ca7565f314d56bca01ed6f7b88a5f52789672812100ae873f38b1d05f377786edd7e7fab3bc4373f1de5cbb807078fe99b69534c8daa50ee9daab550346adda243eb09240624ca6219f6b64ddc3137ff419b59059f884c044cdd74e54a8e0fe74d789108a8090597b5be786abde0c7e1e9dc20b6c494a9c2d17be940d197038cdc3209468d81e37462e5e9c260adaca482a5248e8e73175d7074a3318ef6e065c2e2d2e89248baaf3f89003ae5fae764d52f17a87d3a81053ef60ac28514d701944e1fc276bd52c89c62612dca74bcd2e4a6199ed1c98c663369489d848a75e90cdf5673e1f03ef7247b70fe6e53f362324a8299ee221aacab4bd6ba68dd48d5379528819057417d800029e1712b13a53e2883ab44217509b8312bb48d1a852b96898bce8902b7a64e81b4e263522da1266536a0e283831caff461af90f3ae2684d5ba4bc191381c27c21a0a45fd5e59ce2bf7c45078d35b825109b7ae2286fe75bdb0f84ee080485e1f0ab0ffed780aa5de2afbf4b92fe4cabd4e770004ad3c290bad100b9ff46dd1d1aa6c9a1e75fca1f78257d8b61b31c7f81d44ac421ec662f9181499b3d010675fb6b3700d651bb68f8dc75791fec0588c83d2149329e196a01905c544b5a035180a8271201dea6cac17bc0852b7acbe2284bc5443bd3edcd7bb6ba7ccc9e0e3dbadf6d6d1d2161df56f85e20cc23437f248ae281a0e5f58c7de188c7e8b33573edfc35523906e24cfdca5f0dcf60b2c7a44c36a067960cbc908e3c96727d23fd14e5e878adad23207f5616adcb37e504971da591c4e6856e05bfa332798940a616f67afb5b2030212416a3a4d27774d5ad91d79018d28cf331e0b99bb43d548f1cc915da44a0f669ecfc002375374d37b25fd28785b5588248966bf2cf94dc99676567e90ed48a57c573aba5c8e92178721ded677c0b9e8ab1b897ca21835287d46f976e3425f61bcffb79de6b71deddc4501417ff4b293479836d15c29b47fd1f640b3dc7512bdb657dd9a6f07861b1e59db1a75acf91c75f2a43debc71992a8e5e56901e73fe300654adebe2a3a55870c3cecb73695f9f0de01cd9dbb01bd382d2da90f7fe38e6f705c530e84ca2a620064d72d2425bc4391536342a5936d8ea80f3826d95e07e467daad55ce5b3c876fd3e9fc74e6b2887bd751a9d4d8fac047e02d4d7e80b2d879491d4dd344e0e11bd845f88ae9982a93d2c17ccaa877773c4b498ca6cc5052de632d0fc5fb0673a65aace3cfe198f16c59c3badea2f5885e8850551982bbbfc56be94348a8412b4506492db7721e5fc819ccf379b655329167dc34d18fe4df6f6c024ffd9b863135f51cfce2b81c12b44e981e2e153df78c44eeb9899a91be438def0041f372ce48f74460199f1e6ac7637d8fdcd957c68af3fa90724ef09fcdcb5b591d8f12afec912788c74a39fb15fffdaecf91990b3a7c4952d2ed2586b73593cc5d138e410a42c1d3f01583a77535a008aeb9e334e57284f51790d1d40099a61aee63b6f24afd53f664b535c34f0fa77736b136ea7d46a4bc1291dc220d5ee413dd0bcb426f70fb3bacd64791f106c8a8812b82bfa471fbd666aeb875d083afb887f722bc3aa652c2ed71955936a8ca55e105cd55d22ee586b501e98e53d73577392eeb6762b7a59ebd6f6316b9f89382d7530ab193f5bcfb30b9845fca0366f36ac6102f4f0a686a5da0c203eb08284524458c53c39399670c4856ecd3b785ec92029162f5b5bd4a0e12bf1b2402b9e94d0a8ae824c78731a8be1b75a581c00b22f46079a5606bbb495bf90c29496d748f450d58a963746ae8290739b3b3e5b5ccbc6ede0c7bfb3e056534bebc8892bc80dde58481bd1e36e6aecbdb850fa4a88fcad73c10ffe831ee3406c4793e846e34810b9bd7b4fe3b3648b69b0d2eced1b18b3842266afdda520b81ba23dbfb9f159b44f87018807a1f3a46b8ed44144c73ab8e83247c9f1ffb23f24ac834c6544bf585cbcb73cc2b21f456fd33e3fe98b01e8c3d28bc2a596c68896466a580095033ee33479005231f7048dd60d64667c7b734268ad8ed46e5c9e418328c7f319be23d4c7a98970e36adf3a1671818ee412bb933ad6f766848a53ac2459772648e888af0eb450ad7cccad184870e4502918f36d0ef6ef43fa4c61ee48e717539c17726f1e081953c4a2e3a68792b996b0f1577424ec5605722053cbc874bd114ca09b4fb23fb3485d89623774cac89d3b0f2ab2d7cc51e37d50418923e029f8181e79161300a8f5b7fdfd3d38fd497a2fd4730f82cff3cc6867044cc9a0add9e634a9773be6fbdd0c7779238efb7a759b3a3dc4e3b31eb7190a3e2bbed8e4dc30556e073f6a971b7b0cdf7f2e36e4eb4b801e7cfc81e6a31e156b7a50ddb5b344ae6080a84cc783dea488a97c24ab95e151b765da343ccb1fa67023ae3287fc8924a77d99885af54f59d3eb59ce1440628be9e78f2cc5b8480cb072949316ef9f30f808c6192f62c6a31338e9a7b0eab9279efeda890e4c84730e08b7d1a901d559c41cac6ab6a25f82826e9e7f565e0ffd2a675fc49ecf2dd0d322571a171beb19c683ad5e72d6ca078f110740d3864165c6ba9b0e045439798b1487a0695d7de3bdad0f404f7c7f6f179bd14fe0ec175e16136c29cc5d9b679ecfd1dfd4826e70aa0d95ca06a24f08da9f77f7fbfa95ad229a4eebaaec236fc364ec18173273698285d0c5968d11f5c7e67cb9236dc8ddd93f072deda60ebb692713068dc8335c49cbf83c759a17998f1c5d4dcac0cc083292e7581a7ca496c02ae72bdeacef95914e67624beebeb401fef7ff874f37320cd9b5537a5ab77e7e807e9623590fbae896aecbff87c79d6c93b0d48ca1f177f4ca9488ceb6294f4959a331a855edf81ad377dadb40439900d4062c48157d58ac2cba2b3f24fefdc415975672601c23d1f210e935822a0d0ae993e898fb2e96acf15aa4c507512da3b37a7e771c6eca04c57efbbb8120d691c3856c0082766140bca3fe9439c8e15d5082f8a37d0389bd242b857d81008f0e26528b769583c5f4dee9fbdf88c2a2c4a304351938ab20fcd4c9f233f87585a7482fa4a54231ae2c6a4232b913dd538efbd6a", 0x1000}, {&(0x7f00000010c0)="c41f3fc4fb013a5a3fbf8a2245c80adaca66bcc9bfc08ddf11be648ccfb17a105758f6e79e32516e42dba4f2651a169d72d6a84f1762954e8fcefc0c7eccbb7a495393c444c7ee56796fdacc763716ee92e37d528856f1dad3307cd616687d15051f89d075c0c9d5ab1f8b58e4ec799b7a55df517a495eae6b3bcaf069e28c13a24d635b505208e7ed2e91dd3ab96d4fbf61b512ee6a18d8eda7faf8cbad8383c16af631a7a078baa74569d5b3b5920340db8ef5e7d484", 0xb7}, {&(0x7f0000001180)="f49a52e7dd5ec3a7ded175a90f3bc5b4febdfd946a37a3df11ce8ba44ab61d3a16540699751af4a49a23d5cc2a98041b3cbf3d7bb5aae71eb97d2de567d71f0aa2ee899022325ef4b3bba91bf2882f4ff604bb782c899825550260c1dbf0d42bbca8208eeff2e46a3f196a29e57e6dbab5e40c8f5ad5e280fce5a24cf4886b78296673d9414d369b34b5a97f34b4ab0e35c89fb4a94957dc4406a21f27da0c0be00a3453bb4cb22ea30119e2f86b72c5f550b2c2743d982f4efe521c8b1241adcefe15cebb73f48f3b557539354aef8a2b49e8ddd500346fe9b992f6fd7fcfd5357b3f704969fd49cba1d2e6e691", 0xee}], 0x3, 0x2, 0x1, {0x1}}, 0x3) r5 = epoll_create1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000001300)={0x0, 0x0, r5, 0x400000, 0x80000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000001400)={'ip6_vti0\x00', &(0x7f0000001380)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x7f, 0x0, 0x40, @empty, @loopback, 0x80, 0x40, 0x10000, 0xfffffff7}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000014c0)={'syztnl2\x00', &(0x7f0000001440)={'sit0\x00', 0x0, 0x4, 0x6, 0x98, 0x2, 0x0, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x40, 0x9, 0x800}}) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x88000022}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x4c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008810}, 0x400c081) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001600)={'wlan1\x00'}) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44) statx(r4, &(0x7f0000001780)='./file0\x00', 0x2000, 0x100, &(0x7f00000017c0)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001940)={'syztnl1\x00', &(0x7f00000018c0)={'sit0\x00', r8, 0x2f, 0x0, 0x2, 0xb856, 0x0, @mcast1, @remote, 0x1, 0x20, 0x5, 0xc11}}) 20:05:56 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000000c0)={r0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000001c0)={r1}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x3f, 0x1, 0x1, 0x4, @private0, @loopback, 0x40, 0x7800, 0x3, 0xfe}}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2b934586) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000002c0)={0x2}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x800, 0x5) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000340)=0x1) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000380)=0xd80) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x4010, r2, 0x8000000) r3 = openat$incfs(r2, &(0x7f0000000400)='.log\x00', 0x2000, 0x129) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x7b8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000d, 0x30, r2, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x11, r3, 0x0) openat$incfs(r3, &(0x7f0000000440)='.log\x00', 0x200000, 0x42) 20:05:56 executing program 7: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xfff, &(0x7f0000ffc000/0x3000)=nil, 0x2) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0) unshare(0x6020480) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_io_uring_setup(0xad8, &(0x7f0000000100)={0x0, 0xc948, 0x14, 0x2, 0x2d9}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0xf31cd728ce4540f5, 0x20, 0x8, 0x40, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x7800, 0x10, 0x101, 0x3}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000440) unshare(0x70000500) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000400)={0x24, @none={0x0, 0x1}}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000440)={0x0, 0x1, r0, 0x8001}) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x4010, r0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) renameat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') modify_ldt$write2(0x11, &(0x7f0000000540)={0xfffffff8, 0x20000000, 0x4000, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000580)=0x1, 0x4) getdents(0xffffffffffffff9c, &(0x7f00000005c0)=""/97, 0x61) 20:05:56 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2000}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x50, 0xffffffffffffffff, 0x8000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x5, 0x8, 0x0, {0x0, r3, r4}}, 0x101) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000140)=0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_TID={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) r5 = openat$incfs(r0, &(0x7f00000002c0)='.pending_reads\x00', 0x40, 0x40) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f0000000300)={0xffffffffffffffff}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x4000, 0x8) symlinkat(&(0x7f0000000340)='./file0\x00', r6, &(0x7f00000003c0)='./file0\x00') ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r5, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0x22}}, './file0\x00'}) 20:05:56 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r0, r1/1000+10000}}) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{0x77359400}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x100, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x6000, 0x400, &(0x7f00000002c0)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) utimensat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x100) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x549c0, 0x2c) mq_timedreceive(0xffffffffffffffff, &(0x7f00000007c0)=""/18, 0x12, 0xd5, 0x0) 20:05:56 executing program 4: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x81]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x1) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) pselect6(0x40, &(0x7f0000000280)={0x2, 0x1, 0x6, 0x9987, 0x9e77, 0xfffffffffdd33fe7, 0x401, 0x38000}, &(0x7f00000002c0)={0x1, 0xa58, 0xf28e, 0x3, 0x3, 0x4, 0x3, 0x6}, &(0x7f0000000300)={0x1, 0x8, 0x1, 0x0, 0x0, 0x44, 0xf709, 0x7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x6]}, 0x8}) pselect6(0x40, &(0x7f0000000400)={0x6, 0x450, 0x6, 0x9, 0x5, 0x3, 0x6, 0x4}, &(0x7f0000000440)={0x9, 0x1, 0x9, 0x9, 0x3, 0x2, 0x4, 0x100000001}, &(0x7f0000000480)={0x81, 0x9, 0x1ff, 0x5, 0x80, 0x6, 0x3d1, 0x5}, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000540)={&(0x7f0000000500)={[0x10000]}, 0x8}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x600002, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000005c0)={0x0, 0x1}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x48}}, 0x84000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4084) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000009c0)={0xa0000009}) getuid() sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) 20:05:56 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r0, r1/1000+10000}}) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{0x77359400}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x100, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x6000, 0x400, &(0x7f00000002c0)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) utimensat(0xffffffffffffffff, &(0x7f00000003c0)='./file1\x00', &(0x7f0000000400)={{0x0, 0xea60}, {0x0, 0xea60}}, 0x100) mq_timedreceive(0xffffffffffffffff, &(0x7f00000007c0)=""/18, 0x12, 0xd5, 0x0) [ 140.008197] Unsupported ieee802154 address type: 0 20:05:56 executing program 4: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x81]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x1) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) pselect6(0x40, &(0x7f0000000280)={0x2, 0x1, 0x6, 0x9987, 0x9e77, 0xfffffffffdd33fe7, 0x401, 0x38000}, &(0x7f00000002c0)={0x1, 0xa58, 0xf28e, 0x3, 0x3, 0x4, 0x3, 0x6}, &(0x7f0000000300)={0x1, 0x8, 0x1, 0x0, 0x0, 0x44, 0xf709, 0x7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x6]}, 0x8}) pselect6(0x40, &(0x7f0000000400)={0x6, 0x450, 0x6, 0x9, 0x5, 0x3, 0x6, 0x4}, &(0x7f0000000440)={0x9, 0x1, 0x9, 0x9, 0x3, 0x2, 0x4, 0x100000001}, &(0x7f0000000480)={0x81, 0x9, 0x1ff, 0x5, 0x80, 0x6, 0x3d1, 0x5}, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000540)={&(0x7f0000000500)={[0x10000]}, 0x8}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x600002, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000005c0)={0x0, 0x1}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x48}}, 0x84000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4084) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000009c0)={0xa0000009}) getuid() sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) 20:05:56 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2000}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x50, 0xffffffffffffffff, 0x8000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x5, 0x8, 0x0, {0x0, r3, r4}}, 0x101) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000140)=0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_TID={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) r5 = openat$incfs(r0, &(0x7f00000002c0)='.pending_reads\x00', 0x40, 0x40) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f0000000300)={0xffffffffffffffff}) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x4000, 0x8) symlinkat(&(0x7f0000000340)='./file0\x00', r6, &(0x7f00000003c0)='./file0\x00') 20:05:56 executing program 1: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x5c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x80, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0xa}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/7, 0x7, 0x1, 0x3a}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x57, 0x0, &(0x7f0000000340)="c2b6981656b997eb009368db20dc1393ce645b1ba291830a62170dcbea3e17d5d2d1d8fb6409ccf934313b268d12a9424d63440a19d2a292dafa783341bafa1ae89557106d5bb6dbf7ac1b71c479982c957fd004e4a87f"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r1, &(0x7f0000000440)='./file0/file0\x00', &(0x7f00000004c0)={{r2, r3/1000+10000}, {0x0, 0x2710}}, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = openat$incfs(r1, &(0x7f0000000500)='.pending_reads\x00', 0x8800, 0x100) r5 = geteuid() fchownat(r4, &(0x7f0000000540)='./file0\x00', r5, 0xee00, 0x400) epoll_pwait2(r4, &(0x7f0000000580)=[{}, {}], 0x2, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000600)={[0x2]}, 0x8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000640)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) readlinkat(r4, &(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)=""/4096, 0x1000) ioctl$BLKSECDISCARD(r1, 0x127d, &(0x7f0000001740)=0x7) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001880), 0x83) 20:05:56 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000000c0)={r0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000001c0)={r1}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x3f, 0x1, 0x1, 0x4, @private0, @loopback, 0x40, 0x7800, 0x3, 0xfe}}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2b934586) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000002c0)={0x2}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x800, 0x5) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000340)=0x1) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000380)=0xd80) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x4010, r2, 0x8000000) r3 = openat$incfs(r2, &(0x7f0000000400)='.log\x00', 0x2000, 0x129) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x7b8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000d, 0x30, r2, 0x8000000) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x8, 0x11, r3, 0x0) 20:05:56 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r0, r1/1000+10000}}) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{0x77359400}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x100, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x6000, 0x400, &(0x7f00000002c0)) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) mq_timedreceive(0xffffffffffffffff, &(0x7f00000007c0)=""/18, 0x12, 0xd5, 0x0) 20:05:56 executing program 7: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xfff, &(0x7f0000ffc000/0x3000)=nil, 0x2) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0) unshare(0x6020480) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_io_uring_setup(0xad8, &(0x7f0000000100)={0x0, 0xc948, 0x14, 0x2, 0x2d9}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0xf31cd728ce4540f5, 0x20, 0x8, 0x40, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x7800, 0x10, 0x101, 0x3}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000440) unshare(0x70000500) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000400)={0x24, @none={0x0, 0x1}}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000440)={0x0, 0x1, r0, 0x8001}) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x4010, r0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) renameat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') modify_ldt$write2(0x11, &(0x7f0000000540)={0xfffffff8, 0x20000000, 0x4000, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000580)=0x1, 0x4) getdents(0xffffffffffffff9c, &(0x7f00000005c0)=""/97, 0x61) 20:05:56 executing program 1: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x5c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x80, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0xa}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/7, 0x7, 0x1, 0x3a}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x57, 0x0, &(0x7f0000000340)="c2b6981656b997eb009368db20dc1393ce645b1ba291830a62170dcbea3e17d5d2d1d8fb6409ccf934313b268d12a9424d63440a19d2a292dafa783341bafa1ae89557106d5bb6dbf7ac1b71c479982c957fd004e4a87f"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r1, &(0x7f0000000440)='./file0/file0\x00', &(0x7f00000004c0)={{r2, r3/1000+10000}, {0x0, 0x2710}}, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = openat$incfs(r1, &(0x7f0000000500)='.pending_reads\x00', 0x8800, 0x100) r5 = geteuid() fchownat(r4, &(0x7f0000000540)='./file0\x00', r5, 0xee00, 0x400) epoll_pwait2(r4, &(0x7f0000000580)=[{}, {}], 0x2, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000600)={[0x2]}, 0x8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000640)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) readlinkat(r4, &(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)=""/4096, 0x1000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001880), 0x83) [ 140.551207] Unsupported ieee802154 address type: 0 20:06:09 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000000c0)={r0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000001c0)={r1}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x3f, 0x1, 0x1, 0x4, @private0, @loopback, 0x40, 0x7800, 0x3, 0xfe}}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2b934586) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000002c0)={0x2}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x800, 0x5) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000340)=0x1) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000380)=0xd80) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x4010, r2, 0x8000000) r3 = openat$incfs(r2, &(0x7f0000000400)='.log\x00', 0x2000, 0x129) mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r3, 0x7b8) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000d, 0x30, r2, 0x8000000) 20:06:09 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)=0x1) r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x1000000, 0x4010, r0, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x10000000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000012c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd=r4, 0x657, &(0x7f0000001280)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="c41f3fc4fb013a5a3fbf8a2245c80adaca66bcc9bfc08ddf11be648ccfb17a105758f6e79e32516e42dba4f2651a169d72d6a84f1762954e8fcefc0c7eccbb7a495393c444c7ee56796fdacc763716ee92e37d528856f1dad3307cd616687d15051f89d075c0c9d5ab1f8b58e4ec799b7a55df517a495eae6b3bcaf069e28c13a24d635b505208e7ed2e91dd3ab96d4fbf61b512ee6a18d8eda7faf8cbad8383c16af631a7a078baa74569d5b3b5920340db8ef5e7d484", 0xb7}, {&(0x7f0000001180)="f49a52e7dd5ec3a7ded175a90f3bc5b4febdfd946a37a3df11ce8ba44ab61d3a16540699751af4a49a23d5cc2a98041b3cbf3d7bb5aae71eb97d2de567d71f0aa2ee899022325ef4b3bba91bf2882f4ff604bb782c899825550260c1dbf0d42bbca8208eeff2e46a3f196a29e57e6dbab5e40c8f5ad5e280fce5a24cf4886b78296673d9414d369b34b5a97f34b4ab0e35c89fb4a94957dc4406a21f27da0c0be00a3453bb4cb22ea30119e2f86b72c5f550b2c2743d982f4efe521c8b1241adcefe15cebb73f48f3b557539354aef8a2b49e8ddd500346fe9b992f6fd7fcfd5357b3f704969fd49cba1d2e6e691", 0xee}], 0x3, 0x2, 0x1, {0x1}}, 0x3) r5 = epoll_create1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000001300)={0x0, 0x0, r5, 0x400000, 0x80000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000001400)={'ip6_vti0\x00', &(0x7f0000001380)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x7f, 0x0, 0x40, @empty, @loopback, 0x80, 0x40, 0x10000, 0xfffffff7}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000014c0)={'syztnl2\x00', &(0x7f0000001440)={'sit0\x00', 0x0, 0x4, 0x6, 0x98, 0x2, 0x0, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x40, 0x9, 0x800}}) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x88000022}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x4c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008810}, 0x400c081) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001600)={'wlan1\x00'}) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44) statx(r4, &(0x7f0000001780)='./file0\x00', 0x2000, 0x100, &(0x7f00000017c0)) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000001940)={'syztnl1\x00', &(0x7f00000018c0)={'sit0\x00', r8, 0x2f, 0x0, 0x2, 0xb856, 0x0, @mcast1, @remote, 0x1, 0x20, 0x5, 0xc11}}) 20:06:09 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r0, r1/1000+10000}}) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{0x77359400}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x100, 0x1) statx(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x6000, 0x400, &(0x7f00000002c0)) mq_timedreceive(0xffffffffffffffff, &(0x7f00000007c0)=""/18, 0x12, 0xd5, 0x0) 20:06:09 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2000}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x50, 0xffffffffffffffff, 0x8000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x5, 0x8, 0x0, {0x0, r3, r4}}, 0x101) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000140)=0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_TID={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) r5 = openat$incfs(r0, &(0x7f00000002c0)='.pending_reads\x00', 0x40, 0x40) ioctl$BINDER_GET_FROZEN_INFO(r5, 0xc00c620f, &(0x7f0000000300)={0xffffffffffffffff}) symlinkat(&(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') 20:06:09 executing program 4: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x81]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x1) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) pselect6(0x40, &(0x7f0000000280)={0x2, 0x1, 0x6, 0x9987, 0x9e77, 0xfffffffffdd33fe7, 0x401, 0x38000}, &(0x7f00000002c0)={0x1, 0xa58, 0xf28e, 0x3, 0x3, 0x4, 0x3, 0x6}, &(0x7f0000000300)={0x1, 0x8, 0x1, 0x0, 0x0, 0x44, 0xf709, 0x7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x6]}, 0x8}) pselect6(0x40, &(0x7f0000000400)={0x6, 0x450, 0x6, 0x9, 0x5, 0x3, 0x6, 0x4}, &(0x7f0000000440)={0x9, 0x1, 0x9, 0x9, 0x3, 0x2, 0x4, 0x100000001}, &(0x7f0000000480)={0x81, 0x9, 0x1ff, 0x5, 0x80, 0x6, 0x3d1, 0x5}, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000540)={&(0x7f0000000500)={[0x10000]}, 0x8}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x600002, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000005c0)={0x0, 0x1}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x48}}, 0x84000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4084) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000009c0)={0xa0000009}) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) 20:06:09 executing program 7: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xfff, &(0x7f0000ffc000/0x3000)=nil, 0x2) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0) unshare(0x6020480) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_io_uring_setup(0xad8, &(0x7f0000000100)={0x0, 0xc948, 0x14, 0x2, 0x2d9}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0xf31cd728ce4540f5, 0x20, 0x8, 0x40, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x7800, 0x10, 0x101, 0x3}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000440) unshare(0x70000500) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000400)={0x24, @none={0x0, 0x1}}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000440)={0x0, 0x1, r0, 0x8001}) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x4010, r0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) renameat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') modify_ldt$write2(0x11, &(0x7f0000000540)={0xfffffff8, 0x20000000, 0x4000, 0x0, 0x2, 0x1, 0x0, 0x1, 0x1, 0x1}, 0x10) getdents(0xffffffffffffff9c, &(0x7f00000005c0)=""/97, 0x61) 20:06:09 executing program 1: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x5c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x80, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0xa}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/7, 0x7, 0x1, 0x3a}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x57, 0x0, &(0x7f0000000340)="c2b6981656b997eb009368db20dc1393ce645b1ba291830a62170dcbea3e17d5d2d1d8fb6409ccf934313b268d12a9424d63440a19d2a292dafa783341bafa1ae89557106d5bb6dbf7ac1b71c479982c957fd004e4a87f"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r1, &(0x7f0000000440)='./file0/file0\x00', &(0x7f00000004c0)={{r2, r3/1000+10000}, {0x0, 0x2710}}, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = openat$incfs(r1, &(0x7f0000000500)='.pending_reads\x00', 0x8800, 0x100) r5 = geteuid() fchownat(r4, &(0x7f0000000540)='./file0\x00', r5, 0xee00, 0x400) epoll_pwait2(r4, &(0x7f0000000580)=[{}, {}], 0x2, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000600)={[0x2]}, 0x8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000640)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) readlinkat(r4, &(0x7f0000000700)='./file0/file0\x00', &(0x7f0000000740)=""/4096, 0x1000) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001880), 0x83) 20:06:09 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0xc001, 0x180) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x1, 0x4, 0x8, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x80, 0x80, 0x80, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x2f, 0x5, 0x5, 0x9, 0x41, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0x81, 0x100}}) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', r2, 0x2f, 0x1, 0x3, 0x763, 0x30, @loopback, @rand_addr=' \x01\x00', 0x20, 0x8, 0xf3, 0x7}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14, 0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r5, 0x4, 0x6, 0xd3, 0x3f, 0x2c, @rand_addr=' \x01\x00', @private0, 0x1, 0x10, 0x44, 0x800}}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0xc0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000500)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r6 = epoll_create1(0x80000) epoll_pwait2(r6, &(0x7f0000000540)=[{}, {}], 0x2, &(0x7f0000000580), &(0x7f00000005c0)={[0x8]}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f0000000600)={0x9000000d}) epoll_wait(r6, &(0x7f0000000640)=[{}, {}], 0x2, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'ip6_vti0\x00', r5, 0x29, 0x93, 0x6, 0x5, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x20, 0x10, 0x1, 0x3}}) socket$packet(0x11, 0x2, 0x300) ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000007c0)=0x6) 20:06:09 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2000}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x50, 0xffffffffffffffff, 0x8000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x5, 0x8, 0x0, {0x0, r3, r4}}, 0x101) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000140)=0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_TID={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) openat$incfs(r0, &(0x7f00000002c0)='.pending_reads\x00', 0x40, 0x40) symlinkat(&(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') 20:06:09 executing program 1: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x5c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x80, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0xa}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/7, 0x7, 0x1, 0x3a}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x57, 0x0, &(0x7f0000000340)="c2b6981656b997eb009368db20dc1393ce645b1ba291830a62170dcbea3e17d5d2d1d8fb6409ccf934313b268d12a9424d63440a19d2a292dafa783341bafa1ae89557106d5bb6dbf7ac1b71c479982c957fd004e4a87f"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r1, &(0x7f0000000440)='./file0/file0\x00', &(0x7f00000004c0)={{r2, r3/1000+10000}, {0x0, 0x2710}}, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = openat$incfs(r1, &(0x7f0000000500)='.pending_reads\x00', 0x8800, 0x100) r5 = geteuid() fchownat(r4, &(0x7f0000000540)='./file0\x00', r5, 0xee00, 0x400) epoll_pwait2(r4, &(0x7f0000000580)=[{}, {}], 0x2, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000600)={[0x2]}, 0x8) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r4, 0xc0506617, &(0x7f0000000640)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @a}) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001880), 0x83) [ 152.594982] Unsupported ieee802154 address type: 0 20:06:24 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000000c0)={r0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000001c0)={r1}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x3f, 0x1, 0x1, 0x4, @private0, @loopback, 0x40, 0x7800, 0x3, 0xfe}}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2b934586) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000002c0)={0x2}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x800, 0x5) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000340)=0x1) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000380)=0xd80) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x4010, r2, 0x8000000) openat$incfs(r2, &(0x7f0000000400)='.log\x00', 0x2000, 0x129) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000d, 0x30, r2, 0x8000000) 20:06:24 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0xc001, 0x180) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x1, 0x4, 0x8, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x80, 0x80, 0x80, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x2f, 0x5, 0x5, 0x9, 0x41, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0x81, 0x100}}) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', r2, 0x2f, 0x1, 0x3, 0x763, 0x30, @loopback, @rand_addr=' \x01\x00', 0x20, 0x8, 0xf3, 0x7}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14, 0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r5, 0x4, 0x6, 0xd3, 0x3f, 0x2c, @rand_addr=' \x01\x00', @private0, 0x1, 0x10, 0x44, 0x800}}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0xc0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000500)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r6 = epoll_create1(0x80000) epoll_pwait2(r6, &(0x7f0000000540)=[{}, {}], 0x2, &(0x7f0000000580), &(0x7f00000005c0)={[0x8]}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f0000000600)={0x9000000d}) epoll_wait(r6, &(0x7f0000000640)=[{}, {}], 0x2, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'ip6_vti0\x00', r5, 0x29, 0x93, 0x6, 0x5, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x20, 0x10, 0x1, 0x3}}) socket$packet(0x11, 0x2, 0x300) 20:06:24 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)=0x1) r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x1000000, 0x4010, r0, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x10000000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000012c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd=r4, 0x657, &(0x7f0000001280)=[{&(0x7f00000000c0)="031e0f3c2b20d4df09f49ca83108dcfdff74278ad16801380495e9df99f553e8fe3557ccf81b3a68b772d5cb5986a8894a8a1f6d140e45d2bc57bfa530522a70d99a50b02364bc64c67d549a9514c49aa84d78f0c36d7be304e8ff212d5e947db2474a6a4a0dd49d9497ff02c35446f5506679a5862b62c4a2fe9d812c54ffbcf07df86c9bf3689026c6dc066483a7893eeeaddc6341a1443e2372d7fc9972163a0a03226ebe15a4ff1d5415311024031b01871463e130a387b522249c0b8635311ad1c7ce787167030759304df3c34e96e28858b31c58ba5ae627c72e8b98c9ff590ce42dd86f246694556b7ea8557630b2d6f16b5544cf11d130fc24f8ddf5789af191b5e9f02254030e6a972d3431e4909b4172d7c9e4401844c36c527fe110f2508b6a39a8d1ecbd0d6d47d11c1e977f7ecab17c0567b5fa6dc9833a583a468462082b43510d0c38fee15e8c1cfde5be13abb9152e42f965df8e421233ba4c155d9af78fd6388df3c7b9dc1a0d8dbc0cddf5b6a835fd28f9ba4c7ed5c41cda59eefa86781d3d1464d81afa91ef6611dacbf16037b18513f074f323a60ed9e0f9a4fb6a3899ea482d500da8b3d61020fcca22c67d5124fea5dc843a29c0077a1e478b2f4ce0b1f52706c99208b6d0da55e8336b42a12fcd8195ebf9ee7400597378832eed76d450a2e9fba71f7ca004c726000ff763de552929eb5b972da4ee2550f75379f916dd3beafc4d12c02daa30549d1084a90d218368b6cfeb34f3c7e80aa7bf9d8052c646e6205a6a8be9497cd8616daa4fa9cfa6809c42145b22fec3f986350db77beb357228cb848db13e7972267834b11de4b86e0c25d18e201bf4fb3ecb8df43737950e11961e0f322e749f2e02f9c7dbcd76d260af2f030bc213d8d611f111ed70fdc413d2275e0ea6f9c60308cc4bda95d30a096c2402c801618aef561c9c7802688b0a07e840b62659ea6769e51c9dd3484f7d6b3c3188586b66152f9b1ae6bcfea79fd9801e116df4c3ceb7921183b093a8321d91c5a74dd2c28427d4d3c7f6aa87fa6ea078b2ee0750dcc5d032b5f8c37ae6951a35b6aa08e995be249b62fcaa3e5afc7f9b48a67639b4d9841d80ccff608607d448f1487bf8221581ebad157bb3b5a99339cbd65040bec41757da38ed0e14abf3338b4255610539ddcfb53d2512fe44978a8cd5d4b564dc7adcc94c1b329721a879064b300b281069560520f3230639590372b0b6366d16947234507b597a6415ff20247eff0a67abcab499dbe31a32cb4d9a8b41de8a531658c7e7ddc7484e2b61a5930801f2475ad9571294b468958921e787140c4404855f95dee2f6cd1d3aa28dcb83f3e1f73f1da9909a012b9879c9ed9435601dbd659943df764a26749e9df86a5cee4a47d5cf26e789ada3c40df8d68119c422bcd959e6b86a9daba07d7959ab9203ba155ebb7be248d0229a6b2a55b3742ab01310499a08d82f7884bd871667ee016901ba3613a8d2c9f28fbea4224731ae6365b7b1b92eab67ada41d93933e4fd46fac3aeba77d22e9b63327933852695670fc9cbc24df67116d96723c78b126cc08ded590b90536187fa9e1d62336a0cd1bacba76788888a9f3f16e4dcb5abb5df50a96e7387a369bb4e4effe489cfddf6db5b7549a5a1977262e8dee4c5e84c814980a9144fd5a0593cddbdd9f1f062f7a26f878be1081a0da3a24a93cdc8253d8d1f8bc962becf48ceb2c6dd0026bb2f6dabf1aeb1f63fbb15b9b848c006d0b710ece520940a4891d4ed3ad44f2315ff61692af65f9f2921ac7c6d5f9380c081b3f58515c4f4475a493e134a0b296fa6ca031fc8ec332c63c5ecbf383c01989594b2df70598b07708f9a2cff40a2abcb9fb123de6a65105e7845565f2f509b5d637397ea763b6a5d64d1cd0829b8e2c9940def0e36bf7087ed068de3d403bfe159598ffb8cf1dc20eed32bae2eeebdaa68dfb565cb966bd2054f1d31f9f2ec3e39d98678bf33c3e52862b39231b9b79220d62701f26894b47a7187a419efe02194a846d92c06c18bcbdb819c32113e8a48e75d4dd5f2ff1263c46e128cf2a2f40e37dfd98b13387da333e9759f313f0696d442d0d12846758a2eb4c924f02751aa1a573b3c6037d2d7da93610cddff85e8767953ae708edd748af78404df424a651f0e9c2f9ae5a28a3e9ae5d0d45500da09eee303e451192df356e0023a677f2acbddb8d29c55d5fb528b888b8213647bfe470d77ce3d7eba7969b3a50f875038ecb39257054f4c9f47c2ce70bba2c72af911f371201614654c7757c159e4841f7fc5ad32c3b19a2e9fbbe91b26aeb1125df330890fe9646cc744821d0f055db60c30eff2f83594ddef9141a504d92299a4e5296375be9e27019be7773ef0b255cf909ee420f3f7e6f3a51cdaaf46fffb606a94cfad2daae2ef931cbeaee1cc77a1e2fda1477af9a08126a17c99d45dcfa5af585215a2678488109f2145109fbff547ca743ae384c47a134e98f2f6f2ad1f63fcdcd3e29acbb6bf5959495f3906918ab9294ed9bbab3254f97477d6e4b9fc9affa439a88944d4d258be0601e22055c35191d32d2fdbf4d06716cd69c52b1c7a9fbf02576b9fb3ab4b9f5c392451511eeb17b050025be54db8d6cb0ef8c963e303217036fbc90ca7565f314d56bca01ed6f7b88a5f52789672812100ae873f38b1d05f377786edd7e7fab3bc4373f1de5cbb807078fe99b69534c8daa50ee9daab550346adda243eb09240624ca6219f6b64ddc3137ff419b59059f884c044cdd74e54a8e0fe74d789108a8090597b5be786abde0c7e1e9dc20b6c494a9c2d17be940d197038cdc3209468d81e37462e5e9c260adaca482a5248e8e73175d7074a3318ef6e065c2e2d2e89248baaf3f89003ae5fae764d52f17a87d3a81053ef60ac28514d701944e1fc276bd52c89c62612dca74bcd2e4a6199ed1c98c663369489d848a75e90cdf5673e1f03ef7247b70fe6e53f362324a8299ee221aacab4bd6ba68dd48d5379528819057417d800029e1712b13a53e2883ab44217509b8312bb48d1a852b96898bce8902b7a64e81b4e263522da1266536a0e283831caff461af90f3ae2684d5ba4bc191381c27c21a0a45fd5e59ce2bf7c45078d35b825109b7ae2286fe75bdb0f84ee080485e1f0ab0ffed780aa5de2afbf4b92fe4cabd4e770004ad3c290bad100b9ff46dd1d1aa6c9a1e75fca1f78257d8b61b31c7f81d44ac421ec662f9181499b3d010675fb6b3700d651bb68f8dc75791fec0588c83d2149329e196a01905c544b5a035180a8271201dea6cac17bc0852b7acbe2284bc5443bd3edcd7bb6ba7ccc9e0e3dbadf6d6d1d2161df56f85e20cc23437f248ae281a0e5f58c7de188c7e8b33573edfc35523906e24cfdca5f0dcf60b2c7a44c36a067960cbc908e3c96727d23fd14e5e878adad23207f5616adcb37e504971da591c4e6856e05bfa332798940a616f67afb5b2030212416a3a4d27774d5ad91d79018d28cf331e0b99bb43d548f1cc915da44a0f669ecfc002375374d37b25fd28785b5588248966bf2cf94dc99676567e90ed48a57c573aba5c8e92178721ded677c0b9e8ab1b897ca21835287d46f976e3425f61bcffb79de6b71deddc4501417ff4b293479836d15c29b47fd1f640b3dc7512bdb657dd9a6f07861b1e59db1a75acf91c75f2a43debc71992a8e5e56901e73fe300654adebe2a3a55870c3cecb73695f9f0de01cd9dbb01bd382d2da90f7fe38e6f705c530e84ca2a620064d72d2425bc4391536342a5936d8ea80f3826d95e07e467daad55ce5b3c876fd3e9fc74e6b2887bd751a9d4d8fac047e02d4d7e80b2d879491d4dd344e0e11bd845f88ae9982a93d2c17ccaa877773c4b498ca6cc5052de632d0fc5fb0673a65aace3cfe198f16c59c3badea2f5885e8850551982bbbfc56be94348a8412b4506492db7721e5fc819ccf379b655329167dc34d18fe4df6f6c024ffd9b863135f51cfce2b81c12b44e981e2e153df78c44eeb9899a91be438def0041f372ce48f74460199f1e6ac7637d8fdcd957c68af3fa90724ef09fcdcb5b591d8f12afec912788c74a39fb15fffdaecf91990b3a7c4952d2ed2586b73593cc5d138e410a42c1d3f01583a77535a008aeb9e334e57284f51790d1d40099a61aee63b6f24afd53f664b535c34f0fa77736b136ea7d46a4bc1291dc220d5ee413dd0bcb426f70fb3bacd64791f106c8a8812b82bfa471fbd666aeb875d083afb887f722bc3aa652c2ed71955936a8ca55e105cd55d22ee586b501e98e53d73577392eeb6762b7a59ebd6f6316b9f89382d7530ab193f5bcfb30b9845fca0366f36ac6102f4f0a686a5da0c203eb08284524458c53c39399670c4856ecd3b785ec92029162f5b5bd4a0e12bf1b2402b9e94d0a8ae824c78731a8be1b75a581c00b22f46079a5606bbb495bf90c29496d748f450d58a963746ae8290739b3b3e5b5ccbc6ede0c7bfb3e056534bebc8892bc80dde58481bd1e36e6aecbdb850fa4a88fcad73c10ffe831ee3406c4793e846e34810b9bd7b4fe3b3648b69b0d2eced1b18b3842266afdda520b81ba23dbfb9f159b44f87018807a1f3a46b8ed44144c73ab8e83247c9f1ffb23f24ac834c6544bf585cbcb73cc2b21f456fd33e3fe98b01e8c3d28bc2a596c68896466a580095033ee33479005231f7048dd60d64667c7b734268ad8ed46e5c9e418328c7f319be23d4c7a98970e36adf3a1671818ee412bb933ad6f766848a53ac2459772648e888af0eb450ad7cccad184870e4502918f36d0ef6ef43fa4c61ee48e717539c17726f1e081953c4a2e3a68792b996b0f1577424ec5605722053cbc874bd114ca09b4fb23fb3485d89623774cac89d3b0f2ab2d7cc51e37d50418923e029f8181e79161300a8f5b7fdfd3d38fd497a2fd4730f82cff3cc6867044cc9a0add9e634a9773be6fbdd0c7779238efb7a759b3a3dc4e3b31eb7190a3e2bbed8e4dc30556e073f6a971b7b0cdf7f2e36e4eb4b801e7cfc81e6a31e156b7a50ddb5b344ae6080a84cc783dea488a97c24ab95e151b765da343ccb1fa67023ae3287fc8924a77d99885af54f59d3eb59ce1440628be9e78f2cc5b8480cb072949316ef9f30f808c6192f62c6a31338e9a7b0eab9279efeda890e4c84730e08b7d1a901d559c41cac6ab6a25f82826e9e7f565e0ffd2a675fc49ecf2dd0d322571a171beb19c683ad5e72d6ca078f110740d3864165c6ba9b0e045439798b1487a0695d7de3bdad0f404f7c7f6f179bd14fe0ec175e16136c29cc5d9b679ecfd1dfd4826e70aa0d95ca06a24f08da9f77f7fbfa95ad229a4eebaaec236fc364ec18173273698285d0c5968d11f5c7e67cb9236dc8ddd93f072deda60ebb692713068dc8335c49cbf83c759a17998f1c5d4dcac0cc083292e7581a7ca496c02ae72bdeacef95914e67624beebeb401fef7ff874f37320cd9b5537a5ab77e7e807e9623590fbae896aecbff87c79d6c93b0d48ca1f177f4ca9488ceb6294f4959a331a855edf81ad377dadb40439900d4062c48157d58ac2cba2b3f24fefdc415975672601c23d1f210e935822a0d0ae993e898fb2e96acf15aa4c507512da3b37a7e771c6eca04c57efbbb8120d691c3856c0082766140bca3fe9439c8e15d5082f8a37d0389bd242b857d81008f0e26528b769583c5f4dee9fbdf88c2a2c4a304351938ab20fcd4c9f233f87585a7482fa4a54231ae2c6a4232b913dd538efbd6a", 0x1000}, {&(0x7f00000010c0)="c41f3fc4fb013a5a3fbf8a2245c80adaca66bcc9bfc08ddf11be648ccfb17a105758f6e79e32516e42dba4f2651a169d72d6a84f1762954e8fcefc0c7eccbb7a495393c444c7ee56796fdacc763716ee92e37d528856f1dad3307cd616687d15051f89d075c0c9d5ab1f8b58e4ec799b7a55df517a495eae6b3bcaf069e28c13a24d635b505208e7ed2e91dd3ab96d4fbf61b512ee6a18d8eda7faf8cbad8383c16af631a7a078baa74569d5b3b5920340db8ef5e7d484", 0xb7}, {&(0x7f0000001180)="f49a52e7dd5ec3a7ded175a90f3bc5b4febdfd946a37a3df11ce8ba44ab61d3a16540699751af4a49a23d5cc2a98041b3cbf3d7bb5aae71eb97d2de567d71f0aa2ee899022325ef4b3bba91bf2882f4ff604bb782c899825550260c1dbf0d42bbca8208eeff2e46a3f196a29e57e6dbab5e40c8f5ad5e280fce5a24cf4886b78296673d9414d369b34b5a97f34b4ab0e35c89fb4a94957dc4406a21f27da0c0be00a3453bb4cb22ea30119e2f86b72c5f550b2c2743d982f4efe521c8b1241adcefe15cebb73f48f3b557539354aef8a2b49e8ddd500346fe9b992f6fd7fcfd5357b3f704969fd49cba1d2e6e691", 0xee}], 0x3, 0x2, 0x1, {0x1}}, 0x3) r5 = epoll_create1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000001300)={0x0, 0x0, r5, 0x400000, 0x80000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000001400)={'ip6_vti0\x00', &(0x7f0000001380)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x7f, 0x0, 0x40, @empty, @loopback, 0x80, 0x40, 0x10000, 0xfffffff7}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000014c0)={'syztnl2\x00', &(0x7f0000001440)={'sit0\x00', 0x0, 0x4, 0x6, 0x98, 0x2, 0x0, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x40, 0x9, 0x800}}) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x88000022}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x4c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008810}, 0x400c081) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001600)={'wlan1\x00'}) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44) statx(r4, &(0x7f0000001780)='./file0\x00', 0x2000, 0x100, &(0x7f00000017c0)) socket$nl_generic(0x10, 0x3, 0x10) 20:06:24 executing program 4: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x81]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x1) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) pselect6(0x40, &(0x7f0000000280)={0x2, 0x1, 0x6, 0x9987, 0x9e77, 0xfffffffffdd33fe7, 0x401, 0x38000}, &(0x7f00000002c0)={0x1, 0xa58, 0xf28e, 0x3, 0x3, 0x4, 0x3, 0x6}, &(0x7f0000000300)={0x1, 0x8, 0x1, 0x0, 0x0, 0x44, 0xf709, 0x7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x6]}, 0x8}) pselect6(0x40, &(0x7f0000000400)={0x6, 0x450, 0x6, 0x9, 0x5, 0x3, 0x6, 0x4}, &(0x7f0000000440)={0x9, 0x1, 0x9, 0x9, 0x3, 0x2, 0x4, 0x100000001}, &(0x7f0000000480)={0x81, 0x9, 0x1ff, 0x5, 0x80, 0x6, 0x3d1, 0x5}, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000540)={&(0x7f0000000500)={[0x10000]}, 0x8}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x600002, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000005c0)={0x0, 0x1}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x48}}, 0x84000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4084) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000980), r4) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) 20:06:24 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2000}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x50, 0xffffffffffffffff, 0x8000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x5, 0x8, 0x0, {0x0, r3, r4}}, 0x101) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000140)=0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_TID={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r2) symlinkat(&(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') 20:06:24 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r0, r1/1000+10000}}) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{0x77359400}}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x100, 0x1) mq_timedreceive(0xffffffffffffffff, &(0x7f00000007c0)=""/18, 0x12, 0xd5, 0x0) 20:06:24 executing program 1: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x5c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x80, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0xa}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/7, 0x7, 0x1, 0x3a}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x57, 0x0, &(0x7f0000000340)="c2b6981656b997eb009368db20dc1393ce645b1ba291830a62170dcbea3e17d5d2d1d8fb6409ccf934313b268d12a9424d63440a19d2a292dafa783341bafa1ae89557106d5bb6dbf7ac1b71c479982c957fd004e4a87f"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r1, &(0x7f0000000440)='./file0/file0\x00', &(0x7f00000004c0)={{r2, r3/1000+10000}, {0x0, 0x2710}}, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = openat$incfs(r1, &(0x7f0000000500)='.pending_reads\x00', 0x8800, 0x100) r5 = geteuid() fchownat(r4, &(0x7f0000000540)='./file0\x00', r5, 0xee00, 0x400) epoll_pwait2(r4, &(0x7f0000000580)=[{}, {}], 0x2, &(0x7f00000005c0)={0x0, 0x989680}, &(0x7f0000000600)={[0x2]}, 0x8) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001880), 0x83) 20:06:24 executing program 7: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xfff, &(0x7f0000ffc000/0x3000)=nil, 0x2) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0) unshare(0x6020480) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_io_uring_setup(0xad8, &(0x7f0000000100)={0x0, 0xc948, 0x14, 0x2, 0x2d9}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0xf31cd728ce4540f5, 0x20, 0x8, 0x40, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x7800, 0x10, 0x101, 0x3}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000440) unshare(0x70000500) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000400)={0x24, @none={0x0, 0x1}}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000440)={0x0, 0x1, r0, 0x8001}) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x4010, r0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) renameat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00') getdents(0xffffffffffffff9c, &(0x7f00000005c0)=""/97, 0x61) 20:06:24 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000000c0)={r0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000001c0)={r1}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x3f, 0x1, 0x1, 0x4, @private0, @loopback, 0x40, 0x7800, 0x3, 0xfe}}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2b934586) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000002c0)={0x2}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x800, 0x5) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000340)=0x1) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000380)=0xd80) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x4010, r2, 0x8000000) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000d, 0x30, r2, 0x8000000) [ 167.990277] Unsupported ieee802154 address type: 0 [ 179.592565] Bluetooth: hci0: command 0x0406 tx timeout [ 179.593124] Bluetooth: hci2: command 0x0406 tx timeout [ 179.593691] Bluetooth: hci7: command 0x0406 tx timeout [ 179.594219] Bluetooth: hci1: command 0x0406 tx timeout [ 179.594745] Bluetooth: hci5: command 0x0406 tx timeout [ 179.595252] Bluetooth: hci6: command 0x0406 tx timeout [ 179.595782] Bluetooth: hci4: command 0x0406 tx timeout 20:06:36 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0xc001, 0x180) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x0, 0x1, 0x4, 0x8, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x80, 0x80, 0x80, 0x7}}) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'ip6gre0\x00', r1, 0x2f, 0x5, 0x5, 0x9, 0x41, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x20, 0x1, 0x81, 0x100}}) prctl$PR_GET_TSC(0x19, &(0x7f00000001c0)) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000280)={'syztnl1\x00', &(0x7f0000000200)={'ip6_vti0\x00', r2, 0x2f, 0x1, 0x3, 0x763, 0x30, @loopback, @rand_addr=' \x01\x00', 0x20, 0x8, 0xf3, 0x7}}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) accept4$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000300)=0x14, 0x80000) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f00000003c0)={'syztnl0\x00', &(0x7f0000000340)={'syztnl2\x00', r5, 0x4, 0x6, 0xd3, 0x3f, 0x2c, @rand_addr=' \x01\x00', @private0, 0x1, 0x10, 0x44, 0x800}}) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x2c, 0x0, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0xc0) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000500)={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0102}}}, 0x14) ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) r6 = epoll_create1(0x80000) epoll_pwait2(r6, &(0x7f0000000540)=[{}, {}], 0x2, &(0x7f0000000580), &(0x7f00000005c0)={[0x8]}, 0x8) epoll_ctl$EPOLL_CTL_MOD(r6, 0x3, r3, &(0x7f0000000600)={0x9000000d}) epoll_wait(r6, &(0x7f0000000640)=[{}, {}], 0x2, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r4, 0x89f6, &(0x7f0000000740)={'syztnl1\x00', &(0x7f00000006c0)={'ip6_vti0\x00', r5, 0x29, 0x93, 0x6, 0x5, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x20, 0x10, 0x1, 0x3}}) socket$packet(0x11, 0x2, 0x300) 20:06:36 executing program 6: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r0, 0x40046210, &(0x7f0000000040)=0x1) r1 = ioctl$NS_GET_PARENT(r0, 0xb702, 0x0) ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) r2 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffa000/0x5000)=nil, 0x5000, 0x1000000, 0x4010, r0, 0x8000000) r3 = mmap$IORING_OFF_SQES(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x100010, r0, 0x10000000) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0) syz_io_uring_submit(r2, r3, &(0x7f00000012c0)=@IORING_OP_WRITEV={0x2, 0x1, 0x0, @fd=r4, 0x657, &(0x7f0000001280)=[{&(0x7f00000000c0)="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", 0x1000}, {&(0x7f00000010c0)="c41f3fc4fb013a5a3fbf8a2245c80adaca66bcc9bfc08ddf11be648ccfb17a105758f6e79e32516e42dba4f2651a169d72d6a84f1762954e8fcefc0c7eccbb7a495393c444c7ee56796fdacc763716ee92e37d528856f1dad3307cd616687d15051f89d075c0c9d5ab1f8b58e4ec799b7a55df517a495eae6b3bcaf069e28c13a24d635b505208e7ed2e91dd3ab96d4fbf61b512ee6a18d8eda7faf8cbad8383c16af631a7a078baa74569d5b3b5920340db8ef5e7d484", 0xb7}, {&(0x7f0000001180)="f49a52e7dd5ec3a7ded175a90f3bc5b4febdfd946a37a3df11ce8ba44ab61d3a16540699751af4a49a23d5cc2a98041b3cbf3d7bb5aae71eb97d2de567d71f0aa2ee899022325ef4b3bba91bf2882f4ff604bb782c899825550260c1dbf0d42bbca8208eeff2e46a3f196a29e57e6dbab5e40c8f5ad5e280fce5a24cf4886b78296673d9414d369b34b5a97f34b4ab0e35c89fb4a94957dc4406a21f27da0c0be00a3453bb4cb22ea30119e2f86b72c5f550b2c2743d982f4efe521c8b1241adcefe15cebb73f48f3b557539354aef8a2b49e8ddd500346fe9b992f6fd7fcfd5357b3f704969fd49cba1d2e6e691", 0xee}], 0x3, 0x2, 0x1, {0x1}}, 0x3) r5 = epoll_create1(0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000001300)={0x0, 0x0, r5, 0x400000, 0x80000}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r0, 0x89f6, &(0x7f0000001400)={'ip6_vti0\x00', &(0x7f0000001380)={'syztnl2\x00', 0x0, 0x29, 0x9, 0x7f, 0x0, 0x40, @empty, @loopback, 0x80, 0x40, 0x10000, 0xfffffff7}}) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r0, 0x89fb, &(0x7f00000014c0)={'syztnl2\x00', &(0x7f0000001440)={'sit0\x00', 0x0, 0x4, 0x6, 0x98, 0x2, 0x0, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x40, 0x9, 0x800}}) sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f00000015c0)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x88000022}, 0xc, &(0x7f0000001580)={&(0x7f0000001500)={0x4c, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_LINK={0x8, 0x1, r7}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_LINK={0x8, 0x1, r8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008810}, 0x400c081) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001600)={'wlan1\x00'}) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)={0x4c, 0x0, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x44) statx(r4, &(0x7f0000001780)='./file0\x00', 0x2000, 0x100, &(0x7f00000017c0)) 20:06:36 executing program 4: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x81]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x1) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) pselect6(0x40, &(0x7f0000000280)={0x2, 0x1, 0x6, 0x9987, 0x9e77, 0xfffffffffdd33fe7, 0x401, 0x38000}, &(0x7f00000002c0)={0x1, 0xa58, 0xf28e, 0x3, 0x3, 0x4, 0x3, 0x6}, &(0x7f0000000300)={0x1, 0x8, 0x1, 0x0, 0x0, 0x44, 0xf709, 0x7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x6]}, 0x8}) pselect6(0x40, &(0x7f0000000400)={0x6, 0x450, 0x6, 0x9, 0x5, 0x3, 0x6, 0x4}, &(0x7f0000000440)={0x9, 0x1, 0x9, 0x9, 0x3, 0x2, 0x4, 0x100000001}, &(0x7f0000000480)={0x81, 0x9, 0x1ff, 0x5, 0x80, 0x6, 0x3d1, 0x5}, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000540)={&(0x7f0000000500)={[0x10000]}, 0x8}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x600002, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000005c0)={0x0, 0x1}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x48}}, 0x84000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4084) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r4, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x40001}, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) 20:06:36 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2000}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x50, 0xffffffffffffffff, 0x8000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x5, 0x8, 0x0, {0x0, r3, r4}}, 0x101) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000140)=0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, 0x0, 0x300, 0x70bd28, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_TID={0xc}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) symlinkat(&(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') 20:06:36 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r0, r1/1000+10000}}) futimesat(0xffffffffffffffff, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)={{0x77359400}}) mq_timedreceive(0xffffffffffffffff, &(0x7f00000007c0)=""/18, 0x12, 0xd5, 0x0) 20:06:36 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000000c0)={r0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000001c0)={r1}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x3f, 0x1, 0x1, 0x4, @private0, @loopback, 0x40, 0x7800, 0x3, 0xfe}}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2b934586) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000002c0)={0x2}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x800, 0x5) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000340)=0x1) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000380)=0xd80) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r2, 0x80045400, &(0x7f00000003c0)) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000d, 0x30, r2, 0x8000000) 20:06:36 executing program 7: get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xfff, &(0x7f0000ffc000/0x3000)=nil, 0x2) shmget$private(0x0, 0x3000, 0x1000, &(0x7f0000ffc000/0x3000)=nil) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom0\x00', 0x2, 0x0) unshare(0x6020480) syz_genetlink_get_family_id$smc(&(0x7f00000000c0), 0xffffffffffffffff) r0 = syz_io_uring_setup(0xad8, &(0x7f0000000100)={0x0, 0xc948, 0x14, 0x2, 0x2d9}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000300)={'ip6tnl0\x00', &(0x7f0000000280)={'ip6gre0\x00', 0x0, 0xf31cd728ce4540f5, 0x20, 0x8, 0x40, 0x28, @private1={0xfc, 0x1, '\x00', 0x1}, @loopback, 0x7800, 0x10, 0x101, 0x3}}) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r1, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_LINK={0x8, 0x1, r2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000440) unshare(0x70000500) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000400)={0x24, @none={0x0, 0x1}}, 0x14) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000440)={0x0, 0x1, r0, 0x8001}) socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000004, 0x4010, r0, 0x0) modify_ldt$write2(0x11, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}, 0x10) getdents(0xffffffffffffff9c, &(0x7f00000005c0)=""/97, 0x61) 20:06:36 executing program 1: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x5c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x80, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0xa}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/7, 0x7, 0x1, 0x3a}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x57, 0x0, &(0x7f0000000340)="c2b6981656b997eb009368db20dc1393ce645b1ba291830a62170dcbea3e17d5d2d1d8fb6409ccf934313b268d12a9424d63440a19d2a292dafa783341bafa1ae89557106d5bb6dbf7ac1b71c479982c957fd004e4a87f"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r1, &(0x7f0000000440)='./file0/file0\x00', &(0x7f00000004c0)={{r2, r3/1000+10000}, {0x0, 0x2710}}, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) r4 = openat$incfs(r1, &(0x7f0000000500)='.pending_reads\x00', 0x8800, 0x100) r5 = geteuid() fchownat(r4, &(0x7f0000000540)='./file0\x00', r5, 0xee00, 0x400) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001880), 0x83) 20:06:36 executing program 2: openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000040)={0x0, 0x0}) ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f00000000c0)={r0, 0x1}) ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000100)) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000140)={0x0, 0x0}) ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f00000001c0)={r1}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(0xffffffffffffffff, 0x89f5, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'ip6_vti0\x00', 0x0, 0x4, 0x3f, 0x1, 0x1, 0x4, @private0, @loopback, 0x40, 0x7800, 0x3, 0xfe}}) mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x2b934586) ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f00000002c0)={0x2}) r2 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000300)='.log\x00', 0x800, 0x5) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r2, 0x40046210, &(0x7f0000000340)=0x1) ioctl$BINDER_SET_MAX_THREADS(r2, 0x40046205, &(0x7f0000000380)=0xd80) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x300000d, 0x30, r2, 0x8000000) 20:06:37 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2000}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x50, 0xffffffffffffffff, 0x8000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x5, 0x8, 0x0, {0x0, r3, r4}}, 0x101) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000140)=0x1) prctl$PR_SET_THP_DISABLE(0x29, 0x1) symlinkat(&(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') 20:06:37 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) futimesat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', &(0x7f0000000180)={{0x0, 0x2710}, {r0, r1/1000+10000}}) mq_timedreceive(0xffffffffffffffff, &(0x7f00000007c0)=""/18, 0x12, 0xd5, 0x0) 20:06:37 executing program 1: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x5c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x80, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0xa}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/7, 0x7, 0x1, 0x3a}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x57, 0x0, &(0x7f0000000340)="c2b6981656b997eb009368db20dc1393ce645b1ba291830a62170dcbea3e17d5d2d1d8fb6409ccf934313b268d12a9424d63440a19d2a292dafa783341bafa1ae89557106d5bb6dbf7ac1b71c479982c957fd004e4a87f"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r1, &(0x7f0000000440)='./file0/file0\x00', &(0x7f00000004c0)={{r2, r3/1000+10000}, {0x0, 0x2710}}, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) openat$incfs(r1, &(0x7f0000000500)='.pending_reads\x00', 0x8800, 0x100) geteuid() openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001880), 0x83) [ 180.455673] Unsupported ieee802154 address type: 0 20:06:37 executing program 0: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2000}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000040)) r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_NSTYPE(r0, 0xb703, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xa, 0x2}) r1 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9, 0x50, 0xffffffffffffffff, 0x8000000) r2 = socket$packet(0x11, 0x3, 0x300) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs2/binder1\x00', 0x2, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000100)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r2, 0x0, 0x0, 0x5, 0x8, 0x0, {0x0, r3, r4}}, 0x101) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000140)=0x1) symlinkat(&(0x7f0000000340)='./file0\x00', 0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00') 20:06:37 executing program 4: epoll_pwait2(0xffffffffffffffff, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)={[0x81]}, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x58, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x1) r0 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, 0xffffffffffffffff, &(0x7f0000000240)={0x8}) pselect6(0x40, &(0x7f0000000280)={0x2, 0x1, 0x6, 0x9987, 0x9e77, 0xfffffffffdd33fe7, 0x401, 0x38000}, &(0x7f00000002c0)={0x1, 0xa58, 0xf28e, 0x3, 0x3, 0x4, 0x3, 0x6}, &(0x7f0000000300)={0x1, 0x8, 0x1, 0x0, 0x0, 0x44, 0xf709, 0x7}, &(0x7f0000000340)={0x77359400}, &(0x7f00000003c0)={&(0x7f0000000380)={[0x6]}, 0x8}) pselect6(0x40, &(0x7f0000000400)={0x6, 0x450, 0x6, 0x9, 0x5, 0x3, 0x6, 0x4}, &(0x7f0000000440)={0x9, 0x1, 0x9, 0x9, 0x3, 0x2, 0x4, 0x100000001}, &(0x7f0000000480)={0x81, 0x9, 0x1ff, 0x5, 0x80, 0x6, 0x3d1, 0x5}, &(0x7f00000004c0)={0x0, 0x3938700}, &(0x7f0000000540)={&(0x7f0000000500)={[0x10000]}, 0x8}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000580), 0x600002, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r2) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000005c0)={0x0, 0x1}) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000640), r1) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x48, r3, 0x800, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x48}}, 0x84000) sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r3, 0x800, 0x70bd29, 0x25dfdbff, {}, [@GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4084) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, 0x0, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_I_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040000}, 0x80) 20:06:37 executing program 1: ioctl$BINDER_GET_NODE_INFO_FOR_REF(0xffffffffffffffff, 0xc018620c, &(0x7f0000000000)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000080)=0x5c) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f00000000c0)={0x1}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x80, 0x0, &(0x7f00000002c0)=[@increfs_done={0x40106308, 0x1}, @acquire_done={0x40106309, 0x2}, @increfs_done={0x40106308, 0x3}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000200)={@ptr={0x70742a85, 0x0, &(0x7f0000000100)=""/161, 0xa1, 0x0, 0xa}, @fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f00000001c0)=""/7, 0x7, 0x1, 0x3a}}, &(0x7f0000000280)={0x0, 0x28, 0x40}}}], 0x57, 0x0, &(0x7f0000000340)="c2b6981656b997eb009368db20dc1393ce645b1ba291830a62170dcbea3e17d5d2d1d8fb6409ccf934313b268d12a9424d63440a19d2a292dafa783341bafa1ae89557106d5bb6dbf7ac1b71c479982c957fd004e4a87f"}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000400)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x80000001}}, './file0\x00'}) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) utimensat(r1, &(0x7f0000000440)='./file0/file0\x00', &(0x7f00000004c0)={{r2, r3/1000+10000}, {0x0, 0x2710}}, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) openat$incfs(r1, &(0x7f0000000500)='.pending_reads\x00', 0x8800, 0x100) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001880), 0x83) 20:06:37 executing program 5: mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x400, 0x103) symlinkat(&(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') faccessat(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x1) clock_gettime(0x0, &(0x7f0000000140)) mq_timedreceive(0xffffffffffffffff, &(0x7f00000007c0)=""/18, 0x12, 0xd5, 0x0) [ 181.640868] INFO: task rcu_gp:3 blocked for more than 143 seconds. [ 181.641971] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.642756] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.643812] task:rcu_gp state:I stack:30328 pid:3 ppid:2 flags:0x00004000 [ 181.645089] Call Trace: [ 181.645854] [ 181.646165] __schedule+0x893/0x2470 [ 181.647033] ? io_schedule_timeout+0x150/0x150 [ 181.647659] ? do_raw_spin_lock+0x121/0x260 [ 181.648232] ? rwlock_bug.part.0+0x90/0x90 [ 181.648857] schedule+0xda/0x1b0 [ 181.649315] rescuer_thread+0x851/0xdb0 [ 181.649881] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.650559] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.651208] ? lockdep_hardirqs_on+0x79/0x100 [ 181.651826] ? worker_thread+0x1260/0x1260 [ 181.652419] kthread+0x2ed/0x3a0 [ 181.652881] ? kthread_complete_and_exit+0x40/0x40 [ 181.653557] ret_from_fork+0x22/0x30 [ 181.654070] [ 181.654410] INFO: task rcu_par_gp:4 blocked for more than 143 seconds. [ 181.655213] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.655903] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.656888] task:rcu_par_gp state:I stack:30944 pid:4 ppid:2 flags:0x00004000 [ 181.657961] Call Trace: [ 181.658294] [ 181.658635] __schedule+0x893/0x2470 [ 181.659141] ? io_schedule_timeout+0x150/0x150 [ 181.659764] ? do_raw_spin_lock+0x121/0x260 [ 181.660366] ? rwlock_bug.part.0+0x90/0x90 [ 181.660979] schedule+0xda/0x1b0 [ 181.661479] rescuer_thread+0x851/0xdb0 [ 181.662006] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.662684] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.663327] ? lockdep_hardirqs_on+0x79/0x100 [ 181.663948] ? worker_thread+0x1260/0x1260 [ 181.664541] kthread+0x2ed/0x3a0 [ 181.665001] ? kthread_complete_and_exit+0x40/0x40 [ 181.665668] ret_from_fork+0x22/0x30 [ 181.666179] [ 181.666535] INFO: task slub_flushwq:5 blocked for more than 143 seconds. [ 181.667407] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.668072] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.669088] task:slub_flushwq state:I stack:30944 pid:5 ppid:2 flags:0x00004000 [ 181.670298] Call Trace: [ 181.670797] [ 181.671235] __schedule+0x893/0x2470 [ 181.671991] ? io_schedule_timeout+0x150/0x150 [ 181.672901] ? do_raw_spin_lock+0x121/0x260 [ 181.673750] ? rwlock_bug.part.0+0x90/0x90 [ 181.674595] schedule+0xda/0x1b0 [ 181.675248] rescuer_thread+0x851/0xdb0 [ 181.676048] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.677050] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.678045] ? lockdep_hardirqs_on+0x79/0x100 [ 181.678928] ? worker_thread+0x1260/0x1260 [ 181.679763] kthread+0x2ed/0x3a0 [ 181.680418] ? kthread_complete_and_exit+0x40/0x40 [ 181.681311] ret_from_fork+0x22/0x30 [ 181.682079] [ 181.682556] INFO: task netns:6 blocked for more than 143 seconds. [ 181.683643] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.684642] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.686093] task:netns state:I stack:30944 pid:6 ppid:2 flags:0x00004000 [ 181.687659] Call Trace: [ 181.688130] [ 181.688599] __schedule+0x893/0x2470 [ 181.689381] ? io_schedule_timeout+0x150/0x150 [ 181.690229] ? do_raw_spin_lock+0x121/0x260 [ 181.691072] ? rwlock_bug.part.0+0x90/0x90 [ 181.691905] schedule+0xda/0x1b0 [ 181.692584] rescuer_thread+0x851/0xdb0 [ 181.693325] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.694289] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.695270] ? lockdep_hardirqs_on+0x79/0x100 [ 181.696149] ? worker_thread+0x1260/0x1260 [ 181.696989] kthread+0x2ed/0x3a0 [ 181.697674] ? kthread_complete_and_exit+0x40/0x40 [ 181.698616] ret_from_fork+0x22/0x30 [ 181.699324] [ 181.699818] INFO: task kworker/0:0:7 blocked for more than 143 seconds. [ 181.701080] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.702117] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.703566] task:kworker/0:0 state:I stack:28976 pid:7 ppid:2 flags:0x00004000 [ 181.705130] Workqueue: 0x0 (events) [ 181.705872] Call Trace: [ 181.706379] [ 181.706800] __schedule+0x893/0x2470 [ 181.707567] ? io_schedule_timeout+0x150/0x150 [ 181.708463] schedule+0xda/0x1b0 [ 181.709110] worker_thread+0x15f/0x1260 [ 181.709940] ? process_one_work+0x16a0/0x16a0 [ 181.710844] kthread+0x2ed/0x3a0 [ 181.711531] ? kthread_complete_and_exit+0x40/0x40 [ 181.712498] ret_from_fork+0x22/0x30 [ 181.713212] [ 181.713700] INFO: task kworker/0:0H:8 blocked for more than 143 seconds. [ 181.714957] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.715970] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.717448] task:kworker/0:0H state:I stack:29464 pid:8 ppid:2 flags:0x00004000 [ 181.718974] Workqueue: 0x0 (kblockd) [ 181.719726] Call Trace: [ 181.720188] [ 181.720658] __schedule+0x893/0x2470 [ 181.721411] ? io_schedule_timeout+0x150/0x150 [ 181.722273] schedule+0xda/0x1b0 [ 181.722965] worker_thread+0x15f/0x1260 [ 181.723767] ? process_one_work+0x16a0/0x16a0 [ 181.724551] kthread+0x2ed/0x3a0 [ 181.725058] ? kthread_complete_and_exit+0x40/0x40 [ 181.725813] ret_from_fork+0x22/0x30 [ 181.726413] [ 181.726751] INFO: task mm_percpu_wq:10 blocked for more than 143 seconds. [ 181.727741] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.728529] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.729663] task:mm_percpu_wq state:I stack:30944 pid:10 ppid:2 flags:0x00004000 [ 181.730880] Call Trace: [ 181.731239] [ 181.731612] __schedule+0x893/0x2470 [ 181.732150] ? io_schedule_timeout+0x150/0x150 [ 181.732874] ? do_raw_spin_lock+0x121/0x260 [ 181.733546] ? rwlock_bug.part.0+0x90/0x90 [ 181.734173] schedule+0xda/0x1b0 [ 181.734727] rescuer_thread+0x851/0xdb0 [ 181.735311] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.736062] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.736839] ? lockdep_hardirqs_on+0x79/0x100 [ 181.737531] ? worker_thread+0x1260/0x1260 [ 181.738158] kthread+0x2ed/0x3a0 [ 181.738689] ? kthread_complete_and_exit+0x40/0x40 [ 181.739436] ret_from_fork+0x22/0x30 [ 181.740010] [ 181.740382] INFO: task rcu_tasks_kthre:11 blocked for more than 143 seconds. [ 181.741411] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.742155] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.743263] task:rcu_tasks_kthre state:I stack:29272 pid:11 ppid:2 flags:0x00004000 [ 181.744453] Call Trace: [ 181.744834] [ 181.745168] __schedule+0x893/0x2470 [ 181.745766] ? io_schedule_timeout+0x150/0x150 [ 181.746453] ? mark_held_locks+0x9e/0xe0 [ 181.747057] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.747827] schedule+0xda/0x1b0 [ 181.748331] rcu_tasks_one_gp+0x3db/0xc10 [ 181.749002] rcu_tasks_kthread+0x80/0xa0 [ 181.749610] ? rcu_tasks_postscan+0x10/0x10 [ 181.750236] kthread+0x2ed/0x3a0 [ 181.750771] ? kthread_complete_and_exit+0x40/0x40 [ 181.751509] ret_from_fork+0x22/0x30 [ 181.752072] [ 181.814437] INFO: task kworker/1:0H:21 blocked for more than 143 seconds. [ 181.815677] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.816725] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.818133] task:kworker/1:0H state:I stack:29760 pid:21 ppid:2 flags:0x00004000 [ 181.819602] Workqueue: 0x0 (events_highpri) [ 181.820462] Call Trace: [ 181.820944] [ 181.821421] __schedule+0x893/0x2470 [ 181.822147] ? io_schedule_timeout+0x150/0x150 [ 181.823062] schedule+0xda/0x1b0 [ 181.823743] worker_thread+0x15f/0x1260 [ 181.824555] ? process_one_work+0x16a0/0x16a0 [ 181.825443] kthread+0x2ed/0x3a0 [ 181.826057] ? kthread_complete_and_exit+0x40/0x40 [ 181.827037] ret_from_fork+0x22/0x30 [ 181.827805] [ 181.828232] INFO: task inet_frag_wq:23 blocked for more than 143 seconds. [ 181.829503] Not tainted 6.0.0-rc7-next-20220930 #1 [ 181.830469] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 181.831903] task:inet_frag_wq state:I stack:30704 pid:23 ppid:2 flags:0x00004000 [ 181.833478] Call Trace: [ 181.833960] [ 181.834438] __schedule+0x893/0x2470 [ 181.835151] ? io_schedule_timeout+0x150/0x150 [ 181.836066] ? do_raw_spin_lock+0x121/0x260 [ 181.836940] ? rwlock_bug.part.0+0x90/0x90 [ 181.837749] schedule+0xda/0x1b0 [ 181.838402] rescuer_thread+0x851/0xdb0 [ 181.839148] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.840143] ? _raw_spin_unlock_irqrestore+0x28/0x60 [ 181.841000] ? lockdep_hardirqs_on+0x79/0x100 [ 181.841705] ? worker_thread+0x1260/0x1260 [ 181.842327] kthread+0x2ed/0x3a0 [ 181.842868] ? kthread_complete_and_exit+0x40/0x40 [ 181.843612] ret_from_fork+0x22/0x30 [ 181.844179] [ 181.844610] [ 181.844610] Showing all locks held in the system: [ 181.845533] 1 lock held by rcu_tasks_kthre/11: [ 181.846175] #0: ffffffff85406850 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x26/0xc10 [ 181.847604] 1 lock held by khungtaskd/25: [ 181.848172] #0: ffffffff85407320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 181.849523] 2 locks held by in:imklog/188: [ 181.850104] #0: ffff88800ecb1c68 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe7/0x100 [ 181.851356] #1: ffffffff853fa968 (syslog_lock){+.+.}-{3:3}, at: __schedule+0x1cf/0x2470 [ 181.852575] 2 locks held by syz-executor/4236: [ 181.853229] [ 181.853526] ============================================= [ 181.853526] VM DIAGNOSIS: 20:06:38 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=1ffff110030e9f1b RCX=ffffffff812a241f RDX=dffffc0000000000 RSI=0000000000000008 RDI=ffffffff85b06ed0 RBP=0000000000000001 RSP=ffff88801874f8b0 R8 =0000000000000000 R9 =ffffffff85b06ed7 R10=fffffbfff0b60dda R11=0000000000000001 R12=0000000000000001 R13=0000000000000000 R14=ffffffff854cf658 R15=0000000000000000 RIP=ffffffff84253653 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f798022e900 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 ffff888000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f797f61ff30 CR3=000000000ee0c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM01=0000000000000000 0000000000000000 3030623438613630 3638616663356134 YMM02=0000000000000000 0000000000000000 3830306234386136 3036386166633561 YMM03=0000000000000000 0000000000000000 2f6c616e72756f6a 2f676f6c2f6e7572 YMM04=0000000000000000 0000000000000000 3158b100ae94d3e7 0000000000137660 YMM05=0000000000000000 0000000000000000 d3fdd5f48436fbd7 00000000000aead0 YMM06=0000000000000000 0000000000000000 3b0d35b0998aecd8 00000000000ae988 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 44495f474f4c5359 530069253d595449 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0020000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=dffffc0000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff823bb06c RDI=ffffffff8765a9a0 RBP=ffffffff8765a960 RSP=ffff88800902f8a0 R8 =0000000000000001 R9 =ffff88800902f82b R10=ffffed1001205f05 R11=0000000000000001 R12=0000000000000028 R13=ffffffff8765a960 R14=ffffffff8765a9b0 R15=ffffffff8765ac10 RIP=ffffffff823bb0c1 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055b09425d088 CR3=00000000177c6000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 416772e700000000 YMM03=0000000000000000 0000000000000000 0000ff0000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 732f6c61636f6c2f 7273752f3d485441 YMM05=0000000000000000 0000000000000000 622f6c61636f6c2f 7273752f3a6e6962 YMM06=0000000000000000 0000000000000000 73752f3a6e696273 2f7273752f3a6e69 YMM07=0000000000000000 0000000000000000 6e69622f3a6e6962 732f3a6e69622f72 YMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000