85cd8ff18b0e609303b96cb68884bc2940c25511569126333a05872c95fd16185e2f3144a98b6957eec9322674d0fa1e265cb705af1cb37c704ff8b8eb23691fd169a7bf75da988920dc469fe5423ab951a7c0f10"}, @INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "12b88aa33b42fa72f519b8bfda203554643a2cc8b920aa613f82ebdec3111bf587c8e6cc53a6ae839e"}]}, 0x1288}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) (async)

[ 1561.787527][ T1181] binder: 1174:1181 ioctl 400c620e 20000400 returned -22
01:36:54 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0})

01:36:54 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x1}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:36:54 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0})

[ 1561.946704][ T1198] binder: 1189:1198 ioctl 400c620e 20000400 returned -22
[ 1562.086739][ T1218] binder: 1210:1218 ioctl 400c620e 20000400 returned -22
01:36:54 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x6800000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

01:36:54 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000000)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x1}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:36:55 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x5d3, 0xc2, 0xe0, 0x1, 0x7f, 0xff, 0x9b}, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x5d3, 0xc2, 0xe0, 0x1, 0x7f, 0xff, 0x9b}, 0xc) (async)

01:36:55 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r1, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x34}}, 0x0) (async)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x1288, 0x12, 0x400, 0x70bd28, 0x25dfdbfc, {0x11, 0x1f, 0xff, 0x20, {0x4e23, 0x4e23, [0x5, 0x2, 0x7, 0x595], [0xfff, 0x6cc, 0xffffff80, 0x200], r3, [0x5, 0x7ff]}, 0x0, 0x400}, [@INET_DIAG_REQ_BYTECODE={0xc8, 0x1, "4275eb5485f61aa6a58441f61f3dc9aa47c1284fb7ea5531ce590a5e189d072a7a719b33444f0fc84ac1da42959c6ee7d53b89208bde68193ad46f2ef59b197eb714b4623895b68909c5836667e59d9e4ef5a177cdaa2d9db88f49b61826693f1088394059b378d9f2c92d3eeabb6c34ec63188e9e7157171717871ba995c99c577685e6f0067ab583954fad659ff953229ea3c0d870213b8b300c51dc9740667aa0d9d378c4d261e8d36c6e9c07ffb5082f178d2a6f71aa8c430fb6130ea3f064c6791c"}, @INET_DIAG_REQ_BYTECODE={0x6e, 0x1, "e064840d81be901a8160a9c4c84f72e45e404700c785990b33449a0081f062fed7ad6c8dde15ab6079f7187bd4941a89b63796b9d1c79f55b9fdd1438fdd11c7fdf16f194c5105225e65cb48225803df039ab5e504cfa60e1fddd5eb1d4af99f461236696bcf07c5d951"}, @INET_DIAG_REQ_BYTECODE={0x87, 0x1, "ef44925e467d5360494a87f29a48017d538b45f4e831cbbc0ebbb2cadb13f101ed4b6e0d64966723510052980ca59c8a9bdd616f8de61aaa3c4c0e31c3e29c536a99d8c6f21379d391b3883bb5d12b9b7619ddd7690c97a6e1eb5e1ca1330a2f79fb279849517b6ce86bbef2b0b2b72b38be4828ec08ba55b431b23fc07079d3fef422"}, @INET_DIAG_REQ_BYTECODE={0x48, 0x1, "4f56a86210e0d93733f677ae5e739d961fef1a05ff1d1b8b284a1faa80a45b2cf4b38b8bfe2371420730884654411bcb9cac142b5dc6f9dfbc4004bff5dff2c7344bed15"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "326259c38b294ffbd95180d0befb8cbb26e15f7429899c830e6aac8d462b41009f2a48ac4d8ea1e22cb45c3c019cdf2c05a8b96af21662a647e0d7b2b09f97825480f91d8558d53cd1e2e84e4866fb8022b92ba7b61194b1cc70809833f80d8838b7ac58907308eaa7c9daffa6e8b47b699a0757b6dd809c1efa0ea47796ff3546aec74f02f41d91f155f0a69aca6bb5f75621214b081a8114a6abf98e95e1e1c43798461ce4b516eb90684201e250e4b268fd90f3950de52a19b23aa612e9b08fbdaa5fb61be2c1adc0792867f5e1c8bf1305d5f98386266ad088956cc8f1c74472cd1e481c0564d4c6172f2fc21e9f71efc1f51aef44607e76133032687bc340bac725f67ff1a4bd98a10c38f7f25e3023c71f3da8cd2e1e08c5eab1237f993ce57179f58a33604c5ddd90ec877241c825c354df9129a1631d165b13ae096c0b1b5419e3e92fdd7adcfb6068e73651531b204ed7832918ccaef4af4c39d614cd73be4d061cdcddd424735f9bcdaef28d075eba776e49f408f2c37a45b91f1de638a1cd30079016e66f259194bb285e7cc30128994d7b0f2c39566dfa260f609e2821dd2f06bae45c2897ade7d903ee465a9ebc981d374d23912cf3dede43c0729883a7cd40a43fa80db506a540eaafa3a3367ef169a41d777feb159e80d3b832ccaaabb7e5e2a3c89edbb70f68ef891195ed3a07b4daf815877e4368ed0b478b7aaa16a94ca18320efefe72f278a04813c58546946d59a06ce787a436ced690c8f9664b65c98e7331d26e175d96e9e44bd89cda6e93dbfec4a814ed3f3b8fb881c66df1f7b3d3dccc0e30f3acfef0d2b00fa46e117351df243063b3fb87468b3addeac77267e036a4c7fb3abd8f4fcf62ce8e7d7a29feb4780b2ba8bddce4e1dd6b3ac49185076a8652ec41625e625c69fa293e393aed8f7bd22d5302c3d7cde75e187806e894cf214889ed4f5a63219c9cfd8efc3b88754dcc0caa5f4623ba6f2b32e2fa007df17fe90d3dc9259ac5a7aef39844edcc239b6b22c9ca576315d6af339720efb9573682586df0a35ca0f53edf6b3d166f6497397694cf04ab4c0aadc0a1ebdcac6887ec97f25b9d2bdaf880a9dacb731cc9cd22a96fa18d81ac12b9c0f704b08825a80f6e06f2434ad7c116490e83c8302b7bcb392a966a1b21111dcd1e9ab4e1286047ab111f29329eb4a1180ce64dcbcb3e0f11577b5932fc8f325f1c5d3bcf2b594503e323116a58c7bcc1b5444559c0c303630d62b7231e168a6dd710b03eb4924119e41fe1f9673e12b923d72bab493bec042731f91f1401ab9867d137128b5f21e8abd677d9197fec3b80aa98756fbe7c4d4d7aa0a74a6d716d5f4cca08cacc83c5b9853e7ef4304ad2a9c799410d1db78d68cfbb040e5fb4720401564c2325e4746e7c403f2f55f928c86ed1e28cfc9d61facef6bd4f231311dfd6eb5c21ee1217f4250de900f5f667427550bee57b571a75e68794455322fd8de51f7dada52d9cfd6e5c77bbef8a98d7915697f014695956042dd677927bc1b75cadf4ba09373c2fb99f0b347fe4be485c4a364990447e39e1c391ea39561bbcd70e7fdaba3c8203d02b9146c20488f389b6dc2c02d0e93aa209b223422df8378ed2c88ba3211ac0a45cab6ef6a364cc7aecaef36ca72e592f9f9a7b3d9c04a0e7bb0867476cefa12622dbdf23b609a9db230636cbb2e5d4331cf313e76ab3bde88adf1a27a9a70adcca701a08ebeee7894b7e70d5e83c73966a204c6f6b0f642edef3c7500a08ffb722076e0878f2bb4efed5c80543478732541e168d6e613fb0f3a103c5868aa155321849dc20920e0b5f60a9edeacc673a48c8483c28d96142f3422ece8884d3ab715d4bf456bb426bb1430908c7f75744d1625e5b1311c9c74aadce827cc759f960cecba671d70ecdbc029bf38fcc0b2454db05d240969a1508b2ce263846c9c71d9e8a7ae330d73ff3c84d0d539c238151d7b40082fb8da401ec842b60d7eb8dfcd173499b3c7bffbefe4456dc5bb13acf7dbc8cc3c20f716c051f3b17b84d72523e5f1c45a8faeea386367658c46afa692f5b1172d266d59a4e5f7bcfa618f59d75bac0b9200803325b922d9aa719b20fe886a466c2ff97b80000c1ffdc4c558fd15e5f189ee69fca182fb354313ae8d646191990d0c3e2517a34f9edff1dff0b6d9e02b8ef1bd826635f8012d40551fc7c75bb398feec8142a2d3db3a451a5a94cf8930ec2a0fa94006fe64be1549eaf8fad00666acc98b7e468fd8d3663977400b85783eb70aba9c7aa6be4678640b6aff1deb841adfa29edf0be0b73e1090d55c0fc49831bfac3ee3e1530be2d516b52f1ad787125f6ad917d6a9a510a7ff90db73e996a8cd44c01f0fd84b6ec19646463ff1b428919f479077b82fc054035f3fda13b0c1e49b7a5a553b941aa01044c77b528027ff96e8e3072f86c94969baff16f9a665c1db1c65130650a4812a7c0b7e8c8e0aedacbce0ec3386b5b665d7eef3a09333dec46ab6ca7f058fbebf00b0eea63c9869198316f8c92f5576dc4b569df234abbf6f89845e7dfc2223af21f54f8c676d7a6a7409af9371db0dfc2168551aa11093a369500056a373abbc5f5ac639272e18fee5b5079ef3ba886a61d88260321a9bb7e8fe9bc451468c7b59a8e26b8c39c744cbd9d30e695bcb868f07c1270c64d0d5ad3dbeb8a72be39d15591f9d5aad61f4ce2acb69a1459aebea7475868badcd739b69a3551e195dbe25768da406321d7820a947db4deb05cd8301ae5c62a10452c906c87378e206a2b3bd63e37d511170c85dbdd9a8308b7af9ec76ae60f3263c1ab8b940f2bedf66e4fb0745b181a6dfa45f1b218509844e42b1a432534e05dc91014db1ef9961ae409fba2fc08b4a9e155e684603dcb5e1a4f2754835eb83a27dea7c8410dffb09d2fc6eca19a2056354814158de8b7cfa0bce00e18ce7a19f2497e35a050cfb0c858caec14a9b8b13a47670fe1b69cca9d2454b5028902bb980e1ea4ab2a247ecccf2718f6d713fb35b379d7bb5303743543ad4715c49bc2d7ac3db004fbe7b934deabb5926f8e612778018f8fdc186776d9e890bc86a56a1fbcc8e897feb2f92e6bb7bdb3355384cba2b4277bc58919ecaaaefcb5b10edb9f3c7678d54b2f670cda1ec32774143a232d5e780b28973dcffc381fc143dfd5053a9b1c8bc7d4741a913c3fdc1c05e0053f0615e5199be6f4257e59eed7fc567ffb337678f46a0ca9581a2595ae5ed4c6c08ba7d72449cc0ed1ab36af1a526c5f86b9afc60a4ecfaa91f45f57034816b85841a024e5948b608e8f61430da7d21c8688792fd60b6f8068a5a8feb79945e7f10cb6910bc72d3fa782c42f5285ff6c96ff5758ed928cc59c0eb88e891aaaed079ab1a9f287e934269e5a63b2ce0c937b9b4999dd9e05838a3c63bdfd6b430362a574cdb5cbb9cfba3055d6ab99c4f6378d6bb6ca97ee5d134d8b13ae0683c56026b82440756906a681baef6ce0d204a55ef93be48d3eb46ac167b052255b893c6d6d1e8203885778ec8f9974717f0dff08d8eab952788351e61dca97631cc7a1e13530d566932b61f9a4faa8e33fa6af7467f78af57e3e6cffbebd10af7e610468e8452951423cb43de04fb5e38b753357b335f79e6507e51fe30bc0316ef22b645422deb1fe6e71fcea6e997719c233fc50cc02dbf2cb1102da896d7ba2180e4890c9b82aff9a9abbcaeddf1552560cdc2ba02716ab372b4a8edcd40c7755531b5f95143bbcdbecf0920736b3327994cfdbbf99a32518fb033fe484090354a791293251ad4eb27398452238076d8c719855c59d7684028aa654ff9f5cc41c5d376f1243852502a1d840042659ae91e414c1d248bf32283dcf7881f36826858e8d0a5c3f58b27251a1e73c5c150cf7c6ec6258f64b3867033e8eef27d5a8e71f8e98a50310c9427bf2a2a4600172c9909a8923f3de94fed31facda4e3daee25ac6e02d70a4d218ed59b57fbbec4eaae78d4e3374905e1c4b87655463f016a8c3ab52ebdd355e614004d136db9536999d37e01c0742cc9f9aa1c8f664797c48d849e16a67e9d018496ae1b275c3fbad4b84b19533b4d457b4c051794cb3ec22e1a4a34fe9e3258cd251f9993f405bfe1ef2e159d3e3e64ed03c47955f5d7b9abb44e4b1442503a3985c564d8c562599dd10b10f3dc12da7681c870ccb8def5e993829518ccaa63b855ec5b7759ec96b0bb4804ca4d05ac1116a66d92ec146a62c95ceb45a31e358c688233b500ffba220d816e7ea44ec3caec55fd4a79f286f9d3bba2824b00af2a769153a78ecdbd0747b35534cf17dec80070640bae3d6e2f048bec9a95cd53b709dff19cb2042544153f2d4babf593cea551a07a507758b18449bc0370cf7d708db10d9c5d2fe15a1ac961c3e45b8b0475dcf7899f86ce88ac278c5829a7e2e894fac71e9a4201bbd30417c6fd6283d180817f261f424f00633d9eae675f198959500076cc8292f8aa4daaade5efb0a9cb56dc9da9e3277626315c01bd242584bca9ad10c791faf971c00f79d36e024a672e5b3b93e7e33d27dea792a3d5bc863230a66221dd3fc3ab4d8506827f1d186143b99b3ece41c865b49948861bc37b1a3719d8c614aeb76084558677f4aee6c066cb734535493335a0a688538f75fd4f3f797ec052baa07e301579eb8b295a8fc58a4874d093907d39d88e861f41fc4d00b3caa5985bb07b21b0788db85030af92ff271e1a5c0d15bb0322d6d21aadec181762ca20f4c777aad920b7f640b0597ca38bf7eca1d944a51993d079834a2f9f22f7a1cc1fd7303f66c941789414e2629faaf98868ad2ad6dc21131ff1596dd77d3deb0af1c8d44774e7b34823d1ffaf973f77360fccaed80b7d03cb03b0f6dfc495f0127cfbf428f1d02e861ed0a04b10f5a88b1f7f9887678e16d5f398f88355b87a4dbc9b894032e2e0e851098b49c471a0e40c590ee04c2438db4c4237fad6aea0feaf31f67b52d886eb08c73f948d0faf80bf6206ac9898d7b22e34ab243f91d69ed31b3e4694839b2e05f7c6c00b315cb63b4d231348e1244e437f46eb3ce3350a804ed882042693323157a2ba939fde10fa240c67675397c344b9b3e247ff26d93d698f8439a7709a9d0703ea6290545119c8821a2d24216720b642ac233258b4f3e88d99d9e8aaaf4183bb93aad1350ffb23631dd9fb9795309ef4d4fe51af1fcc7ded57218716a7ee96ab0e52ceb543bb7612914be4b730b9b1830c4cf46f589129950f9befd98ed0788dee68641bbf9a292281801b77116eb2ca676aaa38aa47f383af4e65f099a7731a78a974fbca4e20d827ee9941f971ab5a8bbf90f432ddb6a7b88e3113e984189913987f91c874d662527d0ffcac6fc470eda554a1aa79312315256c06d9fc9562075fd278b9dbfafae6d9375858b438276c222d0f9c79e79aa81acb614166a4c200867bb276d2e60372ca8a4157ae4b8fbc9359b38cc85aa862eedf4846aa041f7e568d34700c720a360d8d37e697ed467c6823e30ff298f8989318af4bc1b07cccf59802eb44712166285f08ecac8f836e5d506990c07745149567b4e8c6df31f3fb1d6c0c2ce238f17af8593155dbaec2701deea90a3320ecb203dbf7e1122d279743e11032d5ceafa36c685cd8ff18b0e609303b96cb68884bc2940c25511569126333a05872c95fd16185e2f3144a98b6957eec9322674d0fa1e265cb705af1cb37c704ff8b8eb23691fd169a7bf75da988920dc469fe5423ab951a7c0f10"}, @INET_DIAG_REQ_BYTECODE={0x2d, 0x1, "12b88aa33b42fa72f519b8bfda203554643a2cc8b920aa613f82ebdec3111bf587c8e6cc53a6ae839e"}]}, 0x1288}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)

[ 1562.095551][ T1220] binder: 1212:1220 ioctl 40046205 0 returned -22
[ 1562.202549][ T1234] binder: 1229:1234 ioctl 400c620e 20000400 returned -22
01:36:55 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0})

01:36:55 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0})

01:36:55 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x6c00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1562.203466][ T1235] binder: 1233:1235 ioctl 40046205 0 returned -22
[ 1562.241240][ T1238] binder: 1233:1238 ioctl 40046205 0 returned -22
01:36:55 executing program 4:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x82800)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0xffffffe0, 0x0, 0x2, 0x0, "b0478482e4cc70486aa9342704f42188232ba9894d6d25079c58e629f0243a63313e8fd75d39271d3fbc02823b9f2e8ecdbbc6fd4935b0e0e0e271939d0932d1", "9c255d36bf59f66ee174970f834649614573bc7f8bdaebbd93d94b0ae131104e", [0x0, 0x4329]})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x2c, 0x0, &(0x7f00000002c0)=[@request_death, @enter_looper, @release={0x40046306, 0x2}, @request_death={0x400c630e, 0x7}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:36:55 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0})

[ 1562.343728][ T1252] binder: 1249:1252 ioctl 400c620e 20000400 returned -22
[ 1562.394632][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:55 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0})

01:36:55 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x5d3, 0xc2, 0xe0, 0x1, 0x7f, 0xff, 0x9b}, 0xc)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000000)={0x5d3, 0xc2, 0xe0, 0x1, 0x7f, 0xff, 0x9b}, 0xc) (async)

01:36:55 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000000))
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)

[ 1562.394729][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:55 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x7400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

01:36:55 executing program 4:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x82800)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0xffffffe0, 0x0, 0x2, 0x0, "b0478482e4cc70486aa9342704f42188232ba9894d6d25079c58e629f0243a63313e8fd75d39271d3fbc02823b9f2e8ecdbbc6fd4935b0e0e0e271939d0932d1", "9c255d36bf59f66ee174970f834649614573bc7f8bdaebbd93d94b0ae131104e", [0x0, 0x4329]})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x2c, 0x0, &(0x7f00000002c0)=[@request_death, @enter_looper, @release={0x40046306, 0x2}, @request_death={0x400c630e, 0x7}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})
syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x82800) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) (async)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0xffffffe0, 0x0, 0x2, 0x0, "b0478482e4cc70486aa9342704f42188232ba9894d6d25079c58e629f0243a63313e8fd75d39271d3fbc02823b9f2e8ecdbbc6fd4935b0e0e0e271939d0932d1", "9c255d36bf59f66ee174970f834649614573bc7f8bdaebbd93d94b0ae131104e", [0x0, 0x4329]}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x2c, 0x0, &(0x7f00000002c0)=[@request_death, @enter_looper, @release={0x40046306, 0x2}, @request_death={0x400c630e, 0x7}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"}) (async)

[ 1562.394908][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.395000][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:55 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0})

01:36:55 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0})

01:36:55 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x7a00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

01:36:55 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2, &(0x7f0000000080)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000000c0)='syzkaller\x00', 0x80000000, 0xc1, &(0x7f0000000140)=""/193, 0x41100, 0x2, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x1, 0x38f2, 0x28a4}, 0x10}, 0x80)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000040)=0x1)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)

[ 1562.395106][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.395203][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:55 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000000))
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000000)) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) (async)

01:36:55 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0})

[ 1562.395302][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.395395][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:55 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x877e000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

01:36:55 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0})

01:36:55 executing program 4:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x82800)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async, rerun: 32)
ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000040)={0x0, {}, 0x0, {}, 0xffffffe0, 0x0, 0x2, 0x0, "b0478482e4cc70486aa9342704f42188232ba9894d6d25079c58e629f0243a63313e8fd75d39271d3fbc02823b9f2e8ecdbbc6fd4935b0e0e0e271939d0932d1", "9c255d36bf59f66ee174970f834649614573bc7f8bdaebbd93d94b0ae131104e", [0x0, 0x4329]}) (rerun: 32)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000000)={0x1}) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x2c, 0x0, &(0x7f00000002c0)=[@request_death, @enter_looper, @release={0x40046306, 0x2}, @request_death={0x400c630e, 0x7}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

[ 1562.395484][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.395577][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:55 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2, &(0x7f0000000080)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000000c0)='syzkaller\x00', 0x80000000, 0xc1, &(0x7f0000000140)=""/193, 0x41100, 0x2, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x1, 0x38f2, 0x28a4}, 0x10}, 0x80)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000040)=0x1)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2, &(0x7f0000000080)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000000c0)='syzkaller\x00', 0x80000000, 0xc1, &(0x7f0000000140)=""/193, 0x41100, 0x2, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x1, 0x38f2, 0x28a4}, 0x10}, 0x80) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) (async)
ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000040)=0x1) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)

01:36:55 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0xff00000000000000, 0x0, 0x0, 0x0, 0x0})

01:36:55 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) (async)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000000)) (async, rerun: 32)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (rerun: 32)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)

01:36:55 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0})

[ 1562.395667][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.395756][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:55 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x8f7e000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1562.395847][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.396019][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:55 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0})

[ 1562.396114][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:55 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x1802, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x8000000000000000, 0x204000)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x8000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3})
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f00000000c0)=0x80)

01:36:55 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2, &(0x7f0000000080)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000000c0)='syzkaller\x00', 0x80000000, 0xc1, &(0x7f0000000140)=""/193, 0x41100, 0x2, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x1, 0x38f2, 0x28a4}, 0x10}, 0x80)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0)
ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000040)=0x1)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x2, &(0x7f0000000080)=@raw=[@map_idx_val={0x18, 0x2, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8}], &(0x7f00000000c0)='syzkaller\x00', 0x80000000, 0xc1, &(0x7f0000000140)=""/193, 0x41100, 0x2, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x1, 0x38f2, 0x28a4}, 0x10}, 0x80) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x28000, 0x0) (async)
ioctl$RNDADDTOENTCNT(r3, 0x40045201, &(0x7f0000000040)=0x1) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async)

01:36:55 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0})

01:36:55 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x907e000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1562.396202][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.396291][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:55 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

01:36:55 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0})

01:36:55 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x1802, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x8000000000000000, 0x204000)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x8000) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"}) (async)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3}) (async)
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f00000000c0)=0x80)

[ 1562.396388][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.396479][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:55 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0xff00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

01:36:55 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0})

[ 1562.396570][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.396658][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:55 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:36:55 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

01:36:55 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0})

[ 1562.396745][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.396837][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:55 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0})

01:36:55 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x1802, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000040), 0x8000000000000000, 0x204000)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x8000)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3})
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f00000000c0)=0x80)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x1802, 0x0) (async)
syz_open_dev$mouse(&(0x7f0000000040), 0x8000000000000000, 0x204000) (async)
ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000080)=0x8000) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"}) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3}) (async)
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f00000000c0)=0x80) (async)

01:36:55 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)

01:36:56 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x2, 0x0, 0x0, 0x0, 0x0})

01:36:56 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)

[ 1562.396926][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.433217][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:56 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0})

[ 1562.433322][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.433410][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:56 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:36:56 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0})

[ 1562.433497][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.433585][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:56 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0})

01:36:56 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x0, 0x0, 0x0})

[ 1562.433675][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:56 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x802, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x18080, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000000ff0300"/40])

01:36:56 executing program 0:
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001240)={&(0x7f0000001200)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001280)={&(0x7f0000000000)="c953259553820ad8a8685f5ed3578dc62faccd04d15dbb86a341bec3bee1e4e435f7c850d7c51b210f5034ed4e45ec6428a5081a1e9cd24703e5f98fcaf71860bebea0f3e7e569390e52003356d232c0fe5a96c2ff59c5b5f61e893dc15a71569dd2d2b6b6697bee2b44fe4e434e593cbfe4842951748b6051df58a97a38f35b2e63606f856d5ed52c5343c9a807403c797b0c6cdb019affe4", &(0x7f00000000c0)=""/55, &(0x7f0000000140)="87c46791dbc642a84cfeb5bf497216c9516959d55baf24076345037036c210ddd2d1cbc5f6f68941498883995da82449ae02af7933c0f49833656b31c58deba4115cc5cd69c4e09a54f4d949ef4dcb9b1c8a2d7e984af33ae9c14c4cf456ce9fd4818d6bda84b6fd4db7f3b7e66b00315ab2c60cf01ed0b1a0d74d7de940deaff6c67e225955a08dbb6fd8fa2d5d0bd5a4a1717c35424c173b035c54fa6a29af0f0f5ea8944ea6b7b4aad2b9edb6ebeb4354", &(0x7f0000000200)="1f8bc8ebdcc6afe14699abf3fdcc01cf9dcc2862526b6a77eca9dc6adbee62ae0db0e3076f11bd76d7bf1f95be81b0edd6b201106c319b3696a19fde786cf425541945d0d4983624f617c0e80cfa36c3ac6d12fb832b7b58f98fc141ec437e752788ee326cff891109e463d2fce8c5e4fa0423b82a893ccb1ee74dda80c545678ca0cb7480ecef6cadde6750b14d5a277fd15b539d80d5e68804abcdc86de2d5834682d61c7996a6044b4e9a3cecd616f532ac983c1f06c09f502932734080806ec3631cedd1a4a9f55359c7d465356a2d90efbc376db195e04c3b0decff1a7c3eec3ca6661fa55cc8e4dbbdbca259c458c2b3ae93f6807b499f11b57cf8860a28ee59fcc0453442af2585b49779736877296471533b248238d460daa0cbd1d32c5853cca3102e2958d18d1262a33f397429d1f357a3fe0bbcc424483ac79cce89a8fa04f665c0652dae015e9c1860db0bbe535423d5cc8cf628d7be42a3bc361c712209190c693db26ae65e13bef935dea37719766b4ecd60632023b780111659866575988333b60412427b3ee134cbd5eb75f7c7c3b59773ee1ae1ccbeb935281ad140e05eb865c53a8c6f345949a9172b92818cdcc209bdce9cb7f31247853bfc96f29bad55c8d17d23fbfe38377709b00deca0872e4dce3f015c764e98f65fc6c3542768323f80855d98d3b969df5dd941307fb00ff228630065eb3b3aa3b793ab74fadfebd749e9739242e7d20ac0263b11ef772ba042e07f387ba46a913928ca3bbed1246561e8ca2659c3252673ba14c3a59e3d8c342d752e83ded982868b65d54fac9e69356cd433a6e25ceb75405da5d7b052775119f2563db10e7f67d4a92f1ad3b61226a21cd58b44725a0245d47474848356e68ed4c14d756d07e5c2aae62b34e1268d7ff8dfa5676de7c95a96d1a634b9ca58a4f0bae8320789e51bbb4a90fde8acae33d627db038166a33b15546c5cb6b1f5867c78b2b2ce7132065eff8116edcced21a1989fb8f7428a5eb5c07cd87973af1f58a4c044a0c317d5248dd990f3dc2b3690b3a9d07518c8bb1a61d5fd4eba442b522506b68fec26e0b05daa1657133e76fe3d51c1522fd6642be893009f8a27731ce6d2c36741ce244329e2942121f39ca7549db10f982228e401a96f6605b19df6b626733f6313b0607ae24afa06700feb32d0dda232453a3af8cbcf27e8084622502c2cec85d9ce3d1deb0cf2019cd6cd8ad0b11a85a8cc45fd6a3f56efe7867dbda05c189fb256127785a3addc2774a036658cafe130b6b5018a293f9eeab1c832a74136f790c45f8d376699e7785a038dd3480e1247386fdf1f5c8adfd586f219cb98399ed8c6452e61d599691bdbe48f36ace8ac14a920d46bcfe34d2f0e445819b1cf50c8efd34e44af8e7d85f29b9685f50f75ae8dcceb518f2767ca46175c7163069e3299fbfabf8e6314f5d09b877f4f5fa618b9613c396c1f14e2da2ef15099478d2c6c56c796e8c971074a6f1a1f0a3b71f1db10e4b011e1ef60f4f81ea236a76e5ee67d0c6adbafe68a0f35c9708f539d3d54e0e02af13d226a7175d66e0b8159c5f0ae35d7b6a771d27cd86437ff37adab15e02d9416ac35e21c0e492e3a4253ae720703ce8fa4b7d8b1add680c5838b59c719b716c32fe10a9da324143f0f356d958c05ae2893740abee56e15032cab38ed69363e8adeeb006bb0403ee1c776e6f16789b2d66fb181f15b7e5e3df23ce3ac3bbab3e52c80f7f09c3205a4b4cd6fbf904b094cf671cd28eee9bf879999ab5fc17982fe79e72276ad83c98d7ef4916ad75de9393bd69ba16df360f3c9a9da48ee6756763f589a71484e3a4dc191ad76b9e35327390d358373ceaa47dbd2ebe22dd29f0f5c799060ef305ebfce52461569e974a4ee0d26f1a8a1ee184f702a7847530ab896f312dd353c7fff7b7a7eeeb18bf781057b9968aec798c03b57bdf1d942357741cfe5ee62ab289e4005d2ee3fc3c1b5389fd18a70acfa3dd3657c9374b07334945654ce68d34ac029973cba42fc0111c9a0f1f5d07301b671546fa78d57d5d6119bbb2c0e119a0288067a750a5442308c7ac2cef581f1596770422cefd2c909c55637feaefbdb76dda592f524c05d60c253f4982601bfb585e48424c11a7548ebe022955b952bf67e295d0aecf8e01ce5f241250380ccd79fc62c004af7b97418105c8ebb388b9991a26f2077503df0e05b337f017ffb22fad53acd4b24b23675691c79dc8c807a97a4c2bf3071812e8ce26c2bf674256d357cdf1301bb799b0bb9533e4e1a05f5b7810a267307e16ecc8cc3ae64b48cdfa69333df2aebf71796e856c759fe60e04e67c413b8702bffe8491a540981b6631031e1e3d2efd5a3a59994c9a813e3a2ac324bf9a0de8c221b1f658a97d9639d5d66eb1c9b6ced3e34331167cc3e7f831036451edc650e7c47e31793914610d2b0341c5ba29f6bee656e96d11723bb34ad15e24a30bd616ec09d08e5d42ec15f02376cabad3a838d42ccf097bd3b40ceebf37a10296f4308bdf59f0804719857a1b617c6412b82be07e55df2654262944d86b7948afdcd29259a02b70c1a767ed5754eabda2a366970d74cd0b10723aff06995ca195471a9a842910a639c14191342038338b26ffb15af5919afbf01a362c6e7b770eaf4b472a75ac131ae0dcf9e92caf98eca7e20c667fe0cfc9e014d70540aecc37e123024cb6bc99604463cb2394af1e6577f887979a90984684184b656464acd4794c3b0cb8a3c6b972b3212d6ab924caa9723162dfc9ac717d9df17db549da893eef3bacd9bbf2e65ffbadace271e6112dc4f4b2dd27a3fbae551d782235b1e6354a38e37f9077d11608f9929a957fba3f2f5c4156c70b91fefeaf63ef1aea8ae4b4c2d34c2c10bbff2b2225b9b0868fe4554a37921ae199f73215e1c2b211b835b0e38cab45273579cc90490b3a666530693805d98b0b3e8915423686b736b378af8bd657073d270bca994748e56e58e9d5c8acbd8ed9f8e929242704df07c19cf55ed57d45d997c97a1698fc631af2a5f0dc5ce3516fabd479f710eb2414accba5e7cfae6ff8bf7c0fb23ab21551176b5879a41454756167edee074f87a6368850c6be5a59f7da9d676019669480546e3a07c0409d856708ce3b41dfc1e9a2e1864afd9db604e53f780724bbb7f889faa85db1095f5be8f454d229fe2df8e8d12c4986581dbfcf51df583b865f54bf407f93c2200a21a61b40cc1e523493587c60e14299f044a1cbc4d51e25b8d1b95ed80803e9b8e008a4203e86779776d767b8d38bb0cb3f42a7123567a77cec08672c17dcf9bcc762f8b49dfe7dae364c7c2c63188436ddf7547948b901418adefc4ccc5aefc2dae133ea79c0e85b7c628965b5129d3dc5e38e634485a368e1bffd7d73b4b4a3a9ffb10e5282123512f7d5384a8c7864230713c1d15bfb98c6b80362a35c8cb9807afa7b065b8763aa9821f5dca2b4ba9e36a2f9121e3f8312dd3639bbbc4fe545f7f4d383ce84ed933fafa5547d7c63b8664402b757e168be8184fdfcbade6d8fe50a067d47c387efd9bd0cf5147d92bf905cbf8876c91c8370e168b3d426e05433d79d44bca03323ddfb7b7c5c75f6c3a4693c6e36c7870f3cdabdd3b10c3661b23fbd428a57f03200a89a74d1bfecaf4ff451dd11086db8a4ac6c6ba0b364c6dda7c48a579d69632152a01f877d618ded7be2572883ed58757bd86dc9df9fc8dce5f3ed37c3fbcc7f93cf201886f08eca1c561023716edb60c7d3ad473d8ed7bd15a4450747b5112770d10a1ef9ebd923cc51475dbc889a53511d3e241783a2bc1c55f85803225c4f679f38fa63b9d09c4593b25f30f5bc847dea928a218eb3776fd72016ed3744afd2851f2902198d1f721b7c7031afd039208bf237deec0f8ce04b13a27c06057a276cbdab2ad72d0bf4cc413f5d249f4b2226a10978f304177e3ab6d80e7f530bd1a8170e2e1ecaf19b47b6ab4120978207f34bccf9fb6ddc62948e3e08a129e0c315ab7177111ba12a36e20e42508a3ca9064b7e310bd59394d67bcb3ef15699c0f5f2c3be632428acfff010b6f218a390f6723f919f17a92e3800b95d1745d4e65d1af7ba14319491bb0202e0a5b52b579bc319c166f932ea4adc97caf84643199b5f6e126cd18ecf5b0bfc7423cd884388be03cbb14ed1e85a5fb4fbf2d5167fc425c25af57af725550f09999e01489c33fa28cd3eab0486cf649aaabd6845fa230d3fc7f77231eaa45cc38fdef7321d4649d3ccac194e1dc4ad8eb54497b5717b187aac01e3234eb1971f3b42be18dcdac94a54bb521776fb17d8a307ccb1410ed965b40739b7108058e65b115c89458d6466f37416cfd52f063b88e45047375c70c820a261a1df29fc6f96b732bedecfd089df06f625b7a77eb586323a3749ae1ab910e09c32431d5d34e7c27237f274da19b412a70bc5f1ac9053eac0142f1d52e836653380d58c7ec8406c541082ba1e273e2bd66151e4456a0322a66db5cc7d72f670b6fd84b75bd4f5839ce2af854c02c2d94a794359b2a955d755202863102b7559aebac43f82e3a2546840eedd8e056223c260fb128cd305661da507bc4c71195bf8b75a96f2e609861e2019976a4abeafa497e62faba48890f66813275533bfa5cfd59f55226a075f97f8c2bf9f2ffe4ebe0f794719aa41978225a815d52d04354797bb394a58de5f9c3aabd388faf4678e998e40a7362dafc12f1e64b66680708388eb419f47eb692d70d339845fa4203f41fce2cc7865ac216a2b9c6afb60fc02fae1f8e6dbea158d5c6dfaa783bc25081a6cf9e56bb43ace43e0098308387f1442437c9cfdb0fb6cc8176ada4ce39431a62553ca77796a4d27363e2b953859dd00a843e297ca8d6f5f63f14aae8edc044bd3f0829ad65c1d6dd892490a75e701e769437a799b7e8ae626aaa2b1ca8cf2ccf2c4f8e00af8294eae09c5482993b8642c0d157d88ca816540dac61de8128ee302372ecdde5fc937bb79057cb7902e73e2e22c2fd8562949f0d12b10f50e87a83fff1a1e5cdc6607bcf871ea157935e3648850b33842d01e59a23e926baf49ce671fd3f50636a5865db91350f266a9693deb04270524e1ee6558388312a9bea15d88d0448c831e9eebfba4205197438e0383f207bb23b50e34e4d6cfa6b31389f5f9d189d3a6c6ce6b37606b8ae5dc28aab5e0408d00c413d14460768c4f4ee97159b815e20132a4148832faef454610d011c3612ebc291be706b7fa9c3e7f84b8170968c9f4c4b8fd8eba6b9f2b0e476931356a5d58941fe2b2bbfd1d2cf2c7d915d3ce545b82a9f37982d9170e0dd859619d394c5f08bbf8bc30f373f0051a48716718a02f283731ce5dcc8e9f00039a5e1c24417b3278bcf78bc855f20971cda58b81f72d7641ad110c906a93c94be7b2d2cc72b52d54e54afdd40de7da30f5f16b661945f7e7caa61347ee5466a46559f5dd7b1456cf2dc7f3d1f0970e8f98d98f9cc80b8cf505ba9bf838d27f5e067ff2d794247bd14e8b1ba26f0f96ccc51d2e339f3d496d140a11daf4fe5aceb33042afe97fd162a1e43264d3097f6a6941fc1de04e2fd27897baf0f70fd83a3b1091937f1f8215dda8d7d71b1e9732f39c8a390d501644a8420218f69f39518d9ee2e37e575122b39502668097357b415e9ce9952b9c741965bae47c317f3634761394b9b1239a14cdb6767d48b4332c13e916a389864eea2441794d4100ad5e3b0921a61f8e9c387c6cdc9882eae3f42cf8f27", 0x8, r0, 0x4}, 0x38)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffeba, &(0x7f0000000200)={&(0x7f0000002780)=ANY=[@ANYBLOB="3400f8f8", @ANYRES16=r4, @ANYBLOB="0105000000000000000006000000200001801400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r6, @ANYBLOB="f2030000000000000015ae569c84ebd0e37a9253799c757b3e1d036f1cb616e2fd37ffcf93b6aa0bcf38114c3331afbb95843400632aca58219ca87df025417b22f06ccf2de9ffcb79280000000000000000000057c6c83afb9d388838419086957ac6d5c9ca0052d2830d21932e7bdfbbecc05abbe3e33b1df0d16a3d9d2f44e7e98f7264261c14b77e16346ed94de0adb74b4e8df6279d7a9d1af7d31a21aafd23db371c52ffcc31e59210479278ef928e8e868c30846532422cadd716288a1f2d1b4228edcee53f5dd39d076b3fd30f3845d6bb4225db2c663575573abd446b5b393031b1638743617cc950c498258d7f31460c86318cf3ee8b919ed356f4ca73f01a44f0898d55437d00dd396aa1281a53a895ee34a24dfb4c31fe66b76b85b7cacdae2ab5a56d3697171b73e067014b9eabbd3a4a20a9ea1a875424e530a85be3095e73307972efeef396072fd6d236afaa1030c303284f5a1fdb1f080e48dd3d3882a08a787ceb7d200181c39c9a3c61173940ac1a4071ccc5adde71bc505262f6fc3eb39a9706b0dbcfe0709ed61e1109974075f865ee8feb9ef12213e5ef56259b7790f6f2e669c9eb930dfa0630d02e23d6", @ANYRES32=r2, @ANYRESHEX=0x0], 0x34}}, 0x0)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001300), 0x101203, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@bloom_filter={0x1e, 0x6, 0x79c, 0x1, 0x200, r0, 0x49, '\x00', r6, r7, 0x0, 0x1, 0x2, 0xa}, 0x48)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af22, &(0x7f0000000140)={0x0, r9})
[ 1562.433770][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.433857][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000002400)={0xc, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="07630440020000001f630000e1a20ca8f4ab152e7fbeb19590c3933e3879675a9c2be73b20e596050c55b3e7cc11fa1f84f8320ee5"], 0x1000, 0x0, &(0x7f0000001400)="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"})
ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0)

[ 1562.434037][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.434139][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:56 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0})

01:36:56 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0})

01:36:56 executing program 4:
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000240)={{{0xb}}, 0xb9, 0x7f, &(0x7f00000004c0)="d02eda88c4f329042a8a696251f147adfaff5ce81b46bf462fa556fa0203f870b64ee97922152af0d42171bc7d8c1a88e7262d14203c4ce3fb7a9d608d789a64f78ce54291f682067136bf9cfffb250f0ae42bf2c7ba4f341b173e8cd0c54de8e82a24db1ec37da7896f1b4cfc9de351506a61cfd98d5e60c9e21fceb60c5a4d123d9935475dc38d07defdf299e6a81e77360a82c6cb80258b86f3c57390454757e511911956a6383e4c41e137da5c1f50ea4d5eebd1713417"})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r3})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x2}, @dead_binder_done, @acquire_done={0x40106309, 0x1}, @acquire={0x40046305, 0x2}, @request_death={0x400c630e, 0x2}, @free_buffer], 0x24, 0x0, &(0x7f0000000080)="c1cd4666dadda09f22208b389e062d1845600694cc501a2c89dc2de038ab81bde462359f"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000140)={0x0, r6})
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000200)={0x2, r6})

01:36:56 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0})

01:36:56 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x802, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x18080, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000000ff0300"/40])
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x802, 0x0) (async)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x18080, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000000ff0300"/40]) (async)

[ 1562.434230][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.434323][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.434427][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:56 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0})

01:36:56 executing program 0:
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001240)={&(0x7f0000001200)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001280)={&(0x7f0000000000)="c953259553820ad8a8685f5ed3578dc62faccd04d15dbb86a341bec3bee1e4e435f7c850d7c51b210f5034ed4e45ec6428a5081a1e9cd24703e5f98fcaf71860bebea0f3e7e569390e52003356d232c0fe5a96c2ff59c5b5f61e893dc15a71569dd2d2b6b6697bee2b44fe4e434e593cbfe4842951748b6051df58a97a38f35b2e63606f856d5ed52c5343c9a807403c797b0c6cdb019affe4", &(0x7f00000000c0)=""/55, &(0x7f0000000140)="87c46791dbc642a84cfeb5bf497216c9516959d55baf24076345037036c210ddd2d1cbc5f6f68941498883995da82449ae02af7933c0f49833656b31c58deba4115cc5cd69c4e09a54f4d949ef4dcb9b1c8a2d7e984af33ae9c14c4cf456ce9fd4818d6bda84b6fd4db7f3b7e66b00315ab2c60cf01ed0b1a0d74d7de940deaff6c67e225955a08dbb6fd8fa2d5d0bd5a4a1717c35424c173b035c54fa6a29af0f0f5ea8944ea6b7b4aad2b9edb6ebeb4354", &(0x7f0000000200)="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", 0x8, r0, 0x4}, 0x38)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3}) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffeba, &(0x7f0000000200)={&(0x7f0000002780)=ANY=[@ANYBLOB="3400f8f8", @ANYRES16=r4, @ANYBLOB="0105000000000000000006000000200001801400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r2, @ANYRESHEX=0x0], 0x34}}, 0x0)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001300), 0x101203, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@bloom_filter={0x1e, 0x6, 0x79c, 0x1, 0x200, r0, 0x49, '\x00', r6, r7, 0x0, 0x1, 0x2, 0xa}, 0x48)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af22, &(0x7f0000000140)={0x0, r9}) (async)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000002400)={0xc, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="07630440020000001f630000e1a20ca8f4ab152e7fbeb19590c3933e3879675a9c2be73b20e596050c55b3e7cc11fa1f84f8320ee5"], 0x1000, 0x0, &(0x7f0000001400)="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"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0)

01:36:56 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0})

01:36:56 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0})

[ 1562.434521][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.434605][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.434693][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
[ 1562.434801][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:56 executing program 4:
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000240)={{{0xb}}, 0xb9, 0x7f, &(0x7f00000004c0)="d02eda88c4f329042a8a696251f147adfaff5ce81b46bf462fa556fa0203f870b64ee97922152af0d42171bc7d8c1a88e7262d14203c4ce3fb7a9d608d789a64f78ce54291f682067136bf9cfffb250f0ae42bf2c7ba4f341b173e8cd0c54de8e82a24db1ec37da7896f1b4cfc9de351506a61cfd98d5e60c9e21fceb60c5a4d123d9935475dc38d07defdf299e6a81e77360a82c6cb80258b86f3c57390454757e511911956a6383e4c41e137da5c1f50ea4d5eebd1713417"}) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r3})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x2}, @dead_binder_done, @acquire_done={0x40106309, 0x1}, @acquire={0x40046305, 0x2}, @request_death={0x400c630e, 0x2}, @free_buffer], 0x24, 0x0, &(0x7f0000000080)="c1cd4666dadda09f22208b389e062d1845600694cc501a2c89dc2de038ab81bde462359f"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"}) (async)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) (async, rerun: 64)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (rerun: 64)
ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000140)={0x0, r6}) (async)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000200)={0x2, r6})

01:36:56 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x802, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x18080, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000000ff0300"/40])

01:36:56 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x6, 0x0, 0x0, 0x0, 0x0})

[ 1562.434896][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:56 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0})

01:36:56 executing program 0:
r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001240)={&(0x7f0000001200)='./file0\x00', 0x0, 0x8}, 0x10)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000001280)={&(0x7f0000000000)="c953259553820ad8a8685f5ed3578dc62faccd04d15dbb86a341bec3bee1e4e435f7c850d7c51b210f5034ed4e45ec6428a5081a1e9cd24703e5f98fcaf71860bebea0f3e7e569390e52003356d232c0fe5a96c2ff59c5b5f61e893dc15a71569dd2d2b6b6697bee2b44fe4e434e593cbfe4842951748b6051df58a97a38f35b2e63606f856d5ed52c5343c9a807403c797b0c6cdb019affe4", &(0x7f00000000c0)=""/55, &(0x7f0000000140)="87c46791dbc642a84cfeb5bf497216c9516959d55baf24076345037036c210ddd2d1cbc5f6f68941498883995da82449ae02af7933c0f49833656b31c58deba4115cc5cd69c4e09a54f4d949ef4dcb9b1c8a2d7e984af33ae9c14c4cf456ce9fd4818d6bda84b6fd4db7f3b7e66b00315ab2c60cf01ed0b1a0d74d7de940deaff6c67e225955a08dbb6fd8fa2d5d0bd5a4a1717c35424c173b035c54fa6a29af0f0f5ea8944ea6b7b4aad2b9edb6ebeb4354", &(0x7f0000000200)="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", 0x8, r0, 0x4}, 0x38)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 64)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3}) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000180)={0x0, 0xfffffffffffffeba, &(0x7f0000000200)={&(0x7f0000002780)=ANY=[@ANYBLOB="3400f8f8", @ANYRES16=r4, @ANYBLOB="0105000000000000000006000000200001801400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r2, @ANYRESHEX=0x0], 0x34}}, 0x0) (async)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000001300), 0x101203, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002700)=@bloom_filter={0x1e, 0x6, 0x79c, 0x1, 0x200, r0, 0x49, '\x00', r6, r7, 0x0, 0x1, 0x2, 0xa}, 0x48)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r8, 0xaf01, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r8, 0x4008af22, &(0x7f0000000140)={0x0, r9}) (async)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000002400)={0xc, 0x0, &(0x7f0000001340)=ANY=[@ANYBLOB="07630440020000001f630000e1a20ca8f4ab152e7fbeb19590c3933e3879675a9c2be73b20e596050c55b3e7cc11fa1f84f8320ee5"], 0x1000, 0x0, &(0x7f0000001400)="5ef25c13a518ba22566a2331ce74e5ce7df74e973d15df8884b2dc0803a3ccd6b27160d5665461ee368c9147002d949ea40ae52370a252dbdee09f0b08765208c89c1550ffdd92f634bd018af4f036b6c54573e1a132511ec2e00203e56d1e335105c55cf9e3aec41e6f988d5bfd67025438bbf7f5474b45f072c18347a4a0d2245b7cdde1d8073e9c9d5702e8dde8d6fd61a4a84b2980be8cd780b43eb630104208e0d9f48df98a30e4a1e2e6bcb2594c2fd6b4f3b4d0ba6bff604de56d3e0cc02b4ba656d355adac912caaf0f3298f727d2ab15a289ef1cb832f5c957788ab1e291799d34b367d21d4c03771f5a5c94c63890aa1684d9a22ff38933c71cee98da3340d80c9f865ef228bdc1ef58499227014381198c07309da776f4f0a3d84b3748024c152ae9f63bac70ef17b43aedbcfb55b4072d53ffe21f4c786d47e057fa4defd23ba6d4f7219c9016f5c4bc14d518c38ff44aeb88ea2b07324609920b88e29269893d1e6195e97cf458b5c6e8696dc653c64764d5d59022138db51cb5038d801f27b3fdbf8fcd8ab53c7bfbdf7b800a94669276334c34dd00f0e413b24c464ecc0112b8b9041e3d303e73c5915310ffff168ea2adb03f5d6036b9d50a47144ce7ea1085819b4bde5a1249a3415e05d8d5f28b816fcabab386da317b400654e52ef6c2169ee41687455b80704b51238a6c09c7211a67dfe80bfe4aee851e4c6f7851d48d5c121794ebe7f84c166d6e5c36296e4c028e72b59ed61719b31cfbae4477f49bd8c0175856cbfc62a51a90ef7353096ac334ae267675884f96bd567abae7a8f3a5189800f216d22a8377179499f57d55a063276e52af229aab4aa653250b9670522b2d47ee70a2f17180726673c771b5598f5679b7312610edfe76b42ba9e52addaeea1024fcc7af6d6365c49a345571ebb9707e121a6cf885a0d090087d85f5b21354d41c045c5068097a6051f1230ed6b9345c841221a8e5edb8e08e29f2d089a739151d36a6ef28860693915c9e6f8cbdb38048a42f7bf9091bd3f66666654b454ae9315567a1415a50d997c6f2aad406ff6a62b85c94a0c95ec2d34ba27a2f5475fe43c723efa172799baac56d7b4d5226e5ebcfd8c44ecb17d3b96b844905155911b4d16f1e3185b81150de6701541bb5e0bfcf56ae5536942e1426baeb881f382535c0c22d15cf4df0913fb15b13a8a1cbc80f056af4b6b7ef91297bcc57c920f94daae8c4b1ac8e276ca102d70df9a212388248ee28b992be8b9ea177e0f60045917b6c13dde9542acb48fdd50cecfb527d7cdd1f99bb43480031095c9378499773d6c681dd9e64508443591eefdd1a872a25a667d95aabd3e99f0f84a4c03638a539d90a1243a41cb6d59ed8b619c95c92d2536bf2b61615bb554a4dff5a3868bcc49ffef78913b04a88dca9b170124bda256919ed97991ceaba7fabbee2442f98d67dedf7c1c95de951ee502a6ea1e6250dac2e36b5cf5175bb4aef068920710835731a125493fdc634fce413cfc8dffbe64cbf24967ae70822f505f56a930b3c404f920f78c0f037eb57d54357f7441380af473b623ec64265cd1d7d3b3d8db3b05b1bc86302ee190f658e5aca7ebfcf64c4abd1bd5ad2af613ceba72551f8ee34f4ee08c9a91611950974ac9f2c76bb19baf2c124640f02643ca2fda4eded794f976086b15fdd4d8d96b9bfcae6ac36967171cc73e1896c2ac3ab4a0d250907dd1717e85bc11fab5b4459040b49ed69db5ac6f88907dfb69bf06c879029fe495a71c0cf588aa05a10c725f77fd84a7329cd15afc8191c2dc07e8ebd06543e402675d12367f7fb0e0db95664f34ec841ba8f53dbb0a25777dc3277f75373cf2cdbecd4a43d4950be042ad79cba19692537b16c232e288a543caa38395ea90a3553879e09757002adfacdc91ce4c505b388d4f06b5e4b943bda558729c9563b1b477040c9b50dd98bafd10a6f9421295d8c74a9d6e046cc599d587aa3b3ec33913e83062189ceabb1166291076d0601c834e35a249ce7cd3cdc708183e4b452378d46d0c21f24f54ec3cf504b9f60a5fc7eba9c174e90e106c949ee72d0b424571f6b332e5a9b5e3a7ef1d194ec2f5d9b40bb4fd18b0a5cae4cc3355f0440db58d5ef28b05ca3c328b4610d4972f2a76b266a1b7c12a09ad1636d5aae41074c2149ab9ab40428ad6f86ef5e6bd79d8e63e68e5f3bdf3be18a0d825e269b2bf4022ac4a1a78fcd592d06b4f881c0a006917047df9aba5304a608521a21d512d62db536b8e536ee730320d65bb84b9a732f9e7d7525a2925acd2da68cbb51146dec3176dcb234ac24f62a2a8ff5dbaf8b48c765a70689067394d69ed7938015396ec0a696fe6ade0cf146816c3a7c83d819ededa79cac70d6dea61c67fb9a68424207d6e2d2e58d1fb894a1c3e97b28d7e2e6d48242f0e5775b0be13c9b892d2466478a730f2a3ca9f07c47a4b8f19083991bbb3cf0792d3abf775aa906f6d50d92803eb4098a912bf1a7b17fd48b8b0bf513d8a04d145bb63765576ea227606bf70286f0cccbffee18681d2d2584ed3de2a2bb680ea59d94c82322296b80d0955b7afe76aafcfed74cde669659608895cf5cf1cd2abf5f83f52d734c88bbbef96103411738156aad257d3e4989fa2f95ffeadad6810e431c3381bf93621c89eaa9a57f90dd2d9da06886740b8ffa1956187b95428d648c2401389221d369aadc67359c19d45fe9b487bfae3b91acf93a61203cc9c526f53249ab8ebabae376c93ba17bf72d1caf1ed19c7f295cc0a02bcb26f842411e79c8fa1e2bdb9d3fb6341f53379e3740ca71172c0640c0bcb28aa0eae1515345e6863748f6eb58952521c22c11ecc6cf24ee41220852061cf89d3275ea5350f147ddf87239355498edb2893bf49acf62099a8a06b5a30e12dd5cdaa1aeae3f6dbcf6b76256900de9b9345d4dd5d9b2a9f3c803ca04c7158aee6be616cacff1b5599d241013c5aaaa3bd17bbe85a219de827848662abcbf8b632a1fcb2ecd29e8a04c0082d7dc8a913650ef9b759edab9aba29322d01b6aff9aedd137f4ab70191f27adfae49aa6bbee1b70ed1d4cd25acda93ab62123e283703c5caf1526d427649fbcd9d9c000b47316ff97d92200a39a08632ff737065556a667a926a1a9bf677c4c78293a7a612e9c5d31f3ba76fd336ff3249e11b74cbafefb84fa3e273db45f47b60399d0e5e6214b4771efcc3152e7dcb8a52157ec7d4f0fbfc3be893795f3946d89f3fc6e5f4aa51968bd38de110062aa4612b08d70c0a95dbe379ba4d954966b33412c3b4733a46524bdc87c07bd72ff070f919e6d5240187ad652efe4a33f6e630bcdfa9870fc24dad44a92d14b44d58fe84125a620f5546ed2b67594c9ed9fc4dce42fe76a3ca6cbeb8919d6b8b42dbffd6167cf18f3ab038434684e73d5b55c4bac4b94e668cfae9fa86ef05bf614814e0b2f41bd7862aa37fc21eeb2d6adf2a9efa18cd14f9db65d4c3ed48a0ceb1363ba304a7301da7e6a2043bfdd8a12b359438040004bd749f3cf475fdff2c083a93483c74707e284711ef32134988556617b52191224979ede9e10f24c1ee5f19536ca10574178113706c1739c835b736014dea5a8f08ba6e0cb385667900386e6c4ac9a1a61ad5ba9cbb2a70b1e9e85d34266b18023d0fbe5885615f080acbbf40deeb5e81e95c677f3af024ef669ea6fa4c6c03f7e6205419587de25c537b07918b697daf6d6882bc59260d9bd8e1ae4712ee83f5ce9ef2e44c0001ec09342c2ffb17cc20bdb450b4946108e1b0acdbdd72aac1c66d974c62e2830424dda8c71c68aa78afd239fa045020c146c09ea3be83700cd6bfe14b4168eaa2718f16ab22542cbacac6e5ae035ec7ae51ce4c7adf4f0813a1e87694913dbf642f06a3e2e58de7e11383082ba0cee6f0dcad76b3a5522af4824152f56cbdcac6bfab9b938f4fb8e65c149ce6305f2a0bf15e8a60259b9e10fef2aaa11ea90c9d6cc7a9279b56b750d42172d40a032b492efc94df157e338e75c5557d2a6ff129a3faca03d100d65bd151e1f23234cb55db694369ce9f400012f907582b95686df07ab8b424c1215dfef42109e793b7b62935f3bbcd768013ce46f83c109d6a2d373f390cb61f1ff818d1b217ac32e24a689f3e46efe36f5213720891d7750f3838d221a5f4c447cfc34e1afd7b602db6fa0b0e64a6c6f0b93afc7f7ea43164d40f9fbf22b519e57f611cad0cb29ab4887c6ddde5ed21cbcf8436859e3fa0ca52f12ccd22915b41974d5120b9db1525fdc085ca5da69edc4d6e0e6d02b190d3a55225c156659a6d027bace5d2b88ba9f7319fd6398da71dcddf377970aa1da8cbdaa394c6032942cf2ea6d84ca659a6e53f97fd3d5f9f57bc0e49c1afc880002a753636272851f2a30d9e0d676d5c833ab2f861e2b9f291f9a54a3fcad342588c443a8397d66fa4b518930c77c542ce31a3a7b0ba010f1bb065b8622ebc6df931b761a460059618262ea30195f73a0e1b16209d6e332237213528900b9d0e91ea55345f7f25da42f13b6fda88cbc79aff9ed6791bf161c83fb5e3a23455f8438a0a76129ff00f43a027a37e3cd8ca3f00acf14e0735a39cdb4e000f9158b39ba092b09a0de105eeeb8d39873932a0a8ac039d07ab943c1d0705e49e839c5f1a49db694ce7c651178b20a7087153d1511a66f0c880d9d6a644c25cf8263aa32d1a87474bf88eba61e793c5e57ccf72ccf999271d73160b3ce4b7a43b698965bed6ebe27ae2cb47816a401675617daf71ddd8eceadc79524675e560947a24372243e64d8cf13172d9ee0d41316f2afe4d49eacf9aa8327480a2a7c2342a21d1df3af84cce4c10b960f0d2d88d6d31e8b6272d4b40b9de38258dec83212b05e864b116e0236e6e097e0973161bc33f68636d54989d2d1e65db54ea42c8051d34358a79578a9ddd12bec633d7ec8ac70daf6cbffe32e016702311e720df8fd942f87640e6fe0426559cb5ad0118bbc33afe0440d1f789f15058015e95ca5eaf42d9e17e2442fc70dc0be0551fe219e3c9161455e9cef2adb60a5288a026aca3b7a661ba25137e99bf5608616f69aac1ef2ca988652c391a598ae61e1863251c99c4bd266749afcf57a38935d85e177eae637f5cb63f2181a794ef78ad1926f15154c3039a424f77e755c121cb324d05cd2f53e3bc8719984e3fb82586b2dc8dd2ca28ec7f959dd27544ae48800eda84c8b61fd2f68a2eec68756e3a938756ed32122c5e6473680ad1dc322cf9ea8e88882317aa77c2dd6100022453b2e1ef0597f5a8a7d730739dc21af3e8f7ba8d47ec65d93229118cadf9c3247f9605a9f7c13e67cd635e37772e9651b5e8b5d6cae75e0f96dd5431275e77d1dd3d0cb5c955255338a0501c6433429370391e9626494177b7f840345e381bc1c4f75437112653218b6889be02f05732f507dcfe77e2b85352082c4821359ba4087000c15e5d90be5922720e3f08451720a65296c6c545c85a2e13deebec5ea86ed35bfa7699f83ee9a89d06729833b597811f6cf8436bbab3cc1a1c251e2b171e19f26df032e8b79b2eb515d4fa36d37e0b02814e59cc634f0af2aba90e5afc5384e99840439ea2014dd855756dd2b685aff504055e10eb184840ecbb5046c292c0730fc5abcc0a653668f44f3aee0f6585210bed53e1df77427f62e81d65c2b51d22db5e27275e26007622450de995fc0d033791aee86bb30e1c3d709cbb83d5d614babf2e9974efba4cc23aa667eae8f8004b1e"}) (async)
ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0)

[ 1562.451793][ T1266] binder: 1263:1266 ioctl 400c620e 20000400 returned -22
[ 1562.457797][ T1260] binder: 1251:1260 ioctl 40046205 0 returned -22
01:36:56 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

[ 1562.625629][ T1285] binder: 1280:1285 ioctl 400c620e 20000400 returned -22
01:36:56 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x500, 0x0, 0x0})

01:36:56 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0})

[ 1562.728048][ T1302] binder: 1287:1302 ioctl 400c620e 20000400 returned -22
[ 1562.847058][ T1318] binder: 1317:1318 ioctl 400c620e 20000400 returned -22
[ 1562.985556][ T1340] binder: 1335:1340 ioctl 400c620e 20000400 returned -22
01:36:56 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:36:56 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0})

[ 1563.125034][ T1357] binder: 1353:1357 ioctl 400c620e 20000400 returned -22
[ 1563.168775][ T1361] binder: 1358:1361 ioctl 40046205 0 returned -22
01:36:56 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x600, 0x0, 0x0})

01:36:56 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x48, 0x0, 0x0, 0x0, 0x0})

01:36:56 executing program 4:
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000240)={{{0xb}}, 0xb9, 0x7f, &(0x7f00000004c0)="d02eda88c4f329042a8a696251f147adfaff5ce81b46bf462fa556fa0203f870b64ee97922152af0d42171bc7d8c1a88e7262d14203c4ce3fb7a9d608d789a64f78ce54291f682067136bf9cfffb250f0ae42bf2c7ba4f341b173e8cd0c54de8e82a24db1ec37da7896f1b4cfc9de351506a61cfd98d5e60c9e21fceb60c5a4d123d9935475dc38d07defdf299e6a81e77360a82c6cb80258b86f3c57390454757e511911956a6383e4c41e137da5c1f50ea4d5eebd1713417"}) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async, rerun: 64)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (rerun: 64)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r3})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x2}, @dead_binder_done, @acquire_done={0x40106309, 0x1}, @acquire={0x40046305, 0x2}, @request_death={0x400c630e, 0x2}, @free_buffer], 0x24, 0x0, &(0x7f0000000080)="c1cd4666dadda09f22208b389e062d1845600694cc501a2c89dc2de038ab81bde462359f"}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"}) (async, rerun: 64)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 64)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async, rerun: 32)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 32)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) (async)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000140)={0x0, r6}) (async)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000200)={0x2, r6})

[ 1563.229792][ T1368] binder: 1367:1368 ioctl 400c620e 20000400 returned -22
[ 1563.285413][ T1374] binder: 1373:1374 ioctl 40046205 0 returned -22
[ 1563.411786][ T1388] binder: 1383:1388 ioctl 400c620e 20000400 returned -22
01:36:56 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:36:56 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x4c, 0x0, 0x0, 0x0, 0x0})

01:36:56 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0})

[ 1563.439225][ T1396] binder: 1384:1396 ioctl 40046205 0 returned -22
01:36:56 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:36:56 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x700, 0x0, 0x0})

[ 1563.457697][ T1397] binder: 1384:1397 ioctl 40046205 0 returned -22
[ 1563.519626][ T1405] binder: 1401:1405 ioctl 400c620e 20000400 returned -22
01:36:56 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000040)="f6af35504609ac18659f0f2a6515b4ed887fd0f6844f1ee8763008b6fa80c8b97af0dba894fd8a00454216f43a2c9b9dbbedc553474380c17bce2d2919723c608be8030ef04cdcf4a2f638", &(0x7f00000000c0)=@udp6}, 0x20)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x6})
ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0)

01:36:56 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x68, 0x0, 0x0, 0x0, 0x0})

01:36:57 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0})

[ 1563.630753][ T1408] binder: 1407:1408 ioctl 40046205 0 returned -22
[ 1563.675228][ T1414] binder: 1411:1414 ioctl 400c620e 20000400 returned -22
01:36:57 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xff00, 0x0, 0x0})

[ 1563.769620][ T1428] binder: 1423:1428 ioctl 40046205 0 returned -22
[ 1563.796607][ T1431] binder: 1423:1431 ioctl 40046205 0 returned -22
[ 1563.802277][ T1434] binder: 1427:1434 ioctl 400c620e 20000400 returned -22
01:36:57 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

[ 1563.898271][ T1444] binder: 1440:1444 ioctl 40046205 0 returned -22
[ 1563.916626][ T1446] binder: 1443:1446 ioctl 400c620e 20000400 returned -22
[ 1564.021289][ T1464] binder: 1461:1464 ioctl 400c620e 20000400 returned -22
01:36:57 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x6c, 0x0, 0x0, 0x0, 0x0})

01:36:57 executing program 4:
socketpair(0x1a, 0x2, 0x1, &(0x7f0000000140))
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000001900)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x1130}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000040)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000a00)={0x7, "639cbd8985c389b1bd3f6d7e16da387797f35462b27a8f8e6ab71542b665640bfc335081b2e1bfea92733ec87d5c2cadd84a0a31ae455a3dc397a81ab97504dc"})
r3 = syz_open_dev$loop(&(0x7f0000000a80), 0x0, 0x282900)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, r4)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000009c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="00050000140002002abd7000ffdbdf2502fb740001003818658047db933696c870e0fd02544e291cbb2d3579bba2ccb69b96c9c1c8fb9ebe555e44f35cdd9d70c59f21e018ee882c7f1db6e05e269289bb05a219e8e38256498d56dbf7c6a0bcc2f7122287ee954858883394c9f546b7baff7dcc1c14733d5bcb48a0c0cfacb820abcf37a0ba790001000440fa184a776c64d7f31b160391b125f1d14619b3851fa734998d62fbae5ca0cbb594c1f1ef6d1910dc32510b1d1e4fe4c5e91fffbd9c51039ea4b3535142a32a3d974b2d11a5064c94681b6ed03400886c545b451e866a948b16e8ffb84b4cdc3c2cb56344c486721d6913aa0af4d3f9a48e42e00000008d0001004c466f6c202aab3f13069b345335a6cc2bd3d9d4bae1a51a0816e50ddeda2c0a405cbad859eb7f7f103034cc9064fe3b63b4f11c0bfb8db8c1531ba297e628b8102d51546f2639bbfe4b012fe0d1de2e8c388ce24ee8216ef13f38e12e7448e53c207c4d3b5ec3ecd8a09de7d735aaa16375b9bdb4173a7c10414c0000006f0001005600cb82cacdf58dd9098be5add94515f96e73f08fe456181e34f72c83abbf7cb0b6f8257f406da0a6bb8439f2fc79d6fb27bce918f750a2431261428ad0c7913caed04c9b8fea7c2fffc071198479e01a1b959f726f3684579a549b2f1ea69e01580afcc7b3148a01bf6d00ba0001009415c61a85d5afe1363328b812a15a425aa099029e90fe6aab08889012977838ab4435690e4dac84f3015682eb774be857e5a6385183d053c995921d57f40064fdfeb26c4df47f3733a3c63465e5c078344b754404dd9aa2ac0fe2ab2b4127a95df7b1e151cfbbe3ac3d6880294e67a49e0c2a2a7c5805bab019de30c9970f59dca983b51a65b88f3c33b199fda54021ca1801a773181a8107ec37ad892fb197d51d816329f38816950900000000000000fcc9cb86ab0000520001000b9a55c4093f2bb94835b35761bb02060f10ec1456f2058ad9c7fd5a64be30792a8b13203e8757c19fcfe5947a762cd5f17895f71ead46c563417d9d0a1f744363b83301fc06669c9268a94cf3ae000074000100c1b13315ff4bbfcee0f3cf79bcb1450e96abe33c2cdc284a98bcae8edda7ff94a67c7936f27ba208c91288c117778e34e70f31f3148db086b70d59188f755e140f07f28665f283c218c8b38889506f0dbfa3b8956fb01caea8474435e0d20d537d5a93dab8fe03a8df4fc00fb80f0840880001006feac78ef30b3b09f3c932359503352b96ed5bcc98afd4605a313ed6138e60346b35249ed25f669a5d02ec4544ba1e273e894575e00d2e22f5544e91e5eb3a78ea2fb60fa0523448bbd112459deea521d6503f39f0aca77286a6d10b093f06e9084970312f72a296e113ebc05125b72ca9ef1f5f23061b0771046a0e3c2a1c7b5fb19536ee000100f92186a709330f65d12ca1d7b4c484112cabca2b66a18ed12f227da0404eedf3dee2467327a90b270a09d63308bec11b2946eee96c76d23c5d6541a767b678e63ee3d7e4089f8f6ff4d8eb06d0ae2bf229d522775b14d3b9f54081c62ae492caae58a656256e1ac8b730d856cc590bb998b2c4a2276582f7a936d2ac8604f75f2520913f5315d8388059ac4a003b6ef0c7e5a1e3f7b462ca902100fe9595d88e7db31a186cfbd718450649fda18e43bafa9e279589da0aeac7aef50a5b95c6936079bb61443f329a49954069e943a1977b96fab8545eb01384f0d3ed52e79450bfd3b37c57206b0f35a700000000bd5a51dcc53b86dd264aac76c7a90907da86cb916374b8731027c4aebcc4684f1fafefc31f652e3a3ee318a271940ef61789c1bff3f906ae4219cfd732728b0cc0addc164f3e31d52ea6f755d2d2a4e7b1f748e07f4abdb7a16e69b7669780433f6fb6bc437f00"/1382], 0x500}}, 0x1000)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, r5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000001600)={0x2bf, "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"})

01:36:57 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1}) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000040)="f6af35504609ac18659f0f2a6515b4ed887fd0f6844f1ee8763008b6fa80c8b97af0dba894fd8a00454216f43a2c9b9dbbedc553474380c17bce2d2919723c608be8030ef04cdcf4a2f638", &(0x7f00000000c0)=@udp6}, 0x20)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x6})
ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0)

01:36:57 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0})

01:36:57 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)

01:36:57 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0xff00000000000000, 0x0, 0x0, 0x0, 0x0})

[ 1564.113599][ T1472] binder: 1467:1472 ioctl 400c620e 20000400 returned -22
[ 1564.245508][ T1484] binder: 1481:1484 ioctl 400c620e 20000400 returned -22
01:36:57 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x74, 0x0, 0x0, 0x0, 0x0})

[ 1564.352776][ T1495] binder: 1493:1495 ioctl 400c620e 20000400 returned -22
01:36:57 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0})

01:36:57 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000040)="f6af35504609ac18659f0f2a6515b4ed887fd0f6844f1ee8763008b6fa80c8b97af0dba894fd8a00454216f43a2c9b9dbbedc553474380c17bce2d2919723c608be8030ef04cdcf4a2f638", &(0x7f00000000c0)=@udp6}, 0x20)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x6})
ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1}) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000040)="f6af35504609ac18659f0f2a6515b4ed887fd0f6844f1ee8763008b6fa80c8b97af0dba894fd8a00454216f43a2c9b9dbbedc553474380c17bce2d2919723c608be8030ef04cdcf4a2f638", &(0x7f00000000c0)=@udp6}, 0x20) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000180)={0x0, 0x0, 0x2, 0x0, 0x6}) (async)
ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0) (async)

01:36:57 executing program 4:
socketpair(0x1a, 0x2, 0x1, &(0x7f0000000140)) (async)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000001900)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x1130}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000040)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000a00)={0x7, "639cbd8985c389b1bd3f6d7e16da387797f35462b27a8f8e6ab71542b665640bfc335081b2e1bfea92733ec87d5c2cadd84a0a31ae455a3dc397a81ab97504dc"})
r3 = syz_open_dev$loop(&(0x7f0000000a80), 0x0, 0x282900) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, r4) (async)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) (async)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000009c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/1382], 0x500}}, 0x1000) (async)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async)
ioctl$LOOP_SET_FD(r3, 0x4c00, r5) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000001600)={0x2bf, "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"})

01:36:57 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0})

01:36:57 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r6=>0x0})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10040, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0105000000000000000006000000200001801400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r6, @ANYBLOB="d2afac4e753e15131cceb0ddb7015cade08e3c48a11221c9fd156eb98b3350a2567c575eb9dfbae3d82930a0b5c922501ba7af6e"], 0x34}}, 0x0)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
ioctl$KVM_GET_API_VERSION(r8, 0xae00, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x101, 0x4, 0x35, 0x400, r3, 0x1, '\x00', r6, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x48)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

[ 1564.387393][ T1492] binder: 1491:1492 ioctl 40046205 0 returned -22
[ 1564.502632][ T1504] binder: 1502:1504 ioctl 400c620e 20000400 returned -22
[ 1564.519773][ T1509] binder: 1503:1509 ioctl 40046205 0 returned -22
01:36:57 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x7a, 0x0, 0x0, 0x0, 0x0})

[ 1564.626518][ T1520] binder: 1519:1520 ioctl 400c620e 20000400 returned -22
[ 1564.692825][ T1526] binder: 1521:1526 ioctl 40046205 0 returned -22
01:36:57 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0})

01:36:57 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0})

01:36:57 executing program 4:
socketpair(0x1a, 0x2, 0x1, &(0x7f0000000140))
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000001900)=ANY=[@ANYBLOB="301100001200000327bd7000fbdbdf251fb080036e244e22070000001f000000020000002d300000a90000001000000000010000000400109dbe4906548e6815f5cd35799ab8535eb69c48c564767e32d14607d8f83ec928f00982da9f256fa524cb3b15a355098b045bcb93fa7898256b7d36c3b531e605e3d68f580fab56301c352dd54660467f584cf1db50719f5cadc571f2cb9bb43b80f1468089990e739a366de13e06525dedfd3231274ceddd79fe8b174816299529d1e3cdd5f126c348038e5fc5defbd901bd7e284142cd34758d9d091df84a4c4751f167744308de739485b27931a13a35fbea45f95610983b09754121fc0f67c8adc592b7be99e731ac982a011b109101b63da7f0482402df0458d05452923170d4be6bf481f5dd434292df19616c7225d5d8bf155adf69d012039d0cd27d70dd", @ANYRES32=0x0, @ANYBLOB="810000000400000003000000010000005f0001004c84325fc9705c4f244111664a31edca7bd769bba2dcab2187db359000a5c377cee80bd53f8fc10e2cc239403780666e3acbf32906c3863ba1062f825579003738fe51d8b9284b08fa87a5947353274b4e64fc02c4309df8b3fd040004100100a37a3baf0698eb7ba22fb9fbb2bdec7c0d10b1c19d1c89771ec2f1e99a2317ec9d72eba128f2e40dd26dcf5ec359582bd67086945353248a1ff0c265b9d8cce1ec683e1e9e23bb51c9acb323a0a58c114e1e6222349b364f7962f4acd2f71137e53c71abf2e895fd086ecf800118f74d9b316a55f22a995539a297a58f03dc3e3ebbf7b7335dd574130caf765db8570c017678712d14dfb064e042a57cadec1c6181162883981852064a9a9d4cd4706b56695d52912aab833f594ff21bf63ab264028d96c19f29c9114b51ddfc42a6c91e536da5191d1f6ff6a4580fee8dc0bc4c098c5f4e2049c8a9e52c74ef5fa855af345c5b80f3cb2e860d985ae6e46c93a64a0e93de874430f149453e2fd57782d68ec7999bd7091f93f7304d30577c967a51766cedba74f3b4338071c07d77bbd43159a297ba2d99664415dd23cfab3d4350b3dffbec92c87d21a6cd702d260f7eafe08266d19c7700cac02ecdf8dcf7bb5e4d5d1f0462b6a247b9d2e4a199bb2dddbffec67a3da5659d83268cd775da6cc716001efbc1e1bde303c54f1c071f9cb712e0adb109e29f8d8359e8dbf762d05be805583c5d72b553f0caaef9c2fab384ae0b957b76fcb923fac24eeb74a278c440412d9f35a9c4ebe64fd7e97ea7c0a113d54145df1406ca2b7d19805cf6147c614538e68784143a938d61a6f7b5ed33fb2ff59ab55da4aa3205bf4bab2d870ffeccb8d0170d3fed58ca48b16044fc61ecea3e000f1f66824aeb01a7a3608eacce565aa904cb58d42fb0b39f924889a3573af2285c7b223689f971f7b5760cadeb81ee9fb4b53efbb769046e1e0f7a4615e37df39f8fccda1aa0e7d3b3c989b95fe71a514c3ea7b9c573ecba75e9086c20ea7aa87b8078943054f6fb8e372e197fe7f1aa87101334fb4780e4034c4bf25b69544386e1d28048bd9e1bfef388dad5b1046803d38e53b123fe74ec4681327d1ca18f8bd6d5a9ffc2c1c030a837252fa1f32b787f6a89a4fcda45390fd3e31a326bc6f56e4c5c917652b428bc62b859463217baf221b6408836708d5e6d8ced8e591796ec6456df0f3b4ec25836035c7ec70eedbba83f487ed92fb60197e5618ff6635357668edf73c08364c4468af8ad8a68c9206ab860472da871c2b3fb51e7747a19fa70b1e31d3d745bdf511603a65a3bf106604eab78591a4d65ab68086c75bacd3bc3d6569e4e7102c45a89d9f36bc12491d912194a755e558a585053fabf2470e036d707f5cb6851ef3b7ed80da5ee9b2fb3f905f1d16db6626988bb16a11f43ee5429121f172c62479cfed15655e60b0302784db9eac42a7ca3685c3b82a0e0039d4f817f1cda6ca7a4ce909c2003462d1d8e7ce3645b7c5e86f724f61c30d1de1deeb030d35020a5d6eae4392d2da8b2524f21e0925ad4c473759907f83cf95a80a50f29642dd35dba559246cbb6894b3f55208e08fe4876dce50ef2fa3e0aa7dfa201966a4dd22fc5d7268e2f2b0d17424ddeb75d3f2a25665a5f39f3697cd0eb96367ac78a9e853e144089cefbfe2d34033f45c3342a48124c45f8400f9996b193546bc40448d575a935c13c8dc70d281ba19e4faeb5fe26467318f47be18b1424fd1af219bee43727a7ada4c3f0c9b56588ba945db0da9393b9cb360269bd663cf377e987e4c30f5509aab656d482ea0b92178d353cdd8db1e24f4af576d8de1d19348c9e8eb3360350778dcedf87bd62c26d3a92c47414c4b90a449b83bec24ee272dff292ab7705de16a0a440e41218363015d69c6b983154387cb40e7b329b0dbffb904e5c9f49269d6ffb0f87ad32c80d9d5074548f377233d6578d5ef53e18e24f39a6809b0c87011d73be7530839edcdca45ca612df099255249a5973d3c3316b86fc8cddbfa09250ad5c9e862c1e6cea55e90c122ca399a064e7638314127b93868c604c6fcb0d072dcb41d5f9122d9b7a06dfbad6392b2490e42e9c088f6221b472fc891ef4fe80bd9b4c43746b2bc263db72df880e1b28bdbd607b9882c52fef3c01f1963913072808ca0c11b54c9236ec8f2c18c17f648491975940aae1898ffa966666a54e106e864feaf7678f93e228e60389fe0f9cfdaf155fc5588dd58b8200f3edd25ef9e0cb36b8c73fb4e09655fb33331c8035e493950d25374d5c781e386a6a88a91f88b811f37f54f783250df1c5fc85a83e50ffacd72eb1e5e80af818221fd492361c85abed71227c3dcb972d77c002a332ee51db64e1b3722cfc493390f71837bffed7eda995b4558b404a700176c698ce4a07dd439555829abeb2a361a4736e502ab026b9a4a31b79dbfc69465a61c54c11d4aae4d68f7d7b6da9ccb6e165695732a7277b7abfeda14cd9d856e957e768fd8d87e279ee33b561e819872012dc1627ebf264badd46fa59384f4e368f7a23a0beb95e607d7951da0b623961d9fe0c2c91b9b3fadef98f3e8e20ddda7e99c9f1f99b73e81259a852c65f0daa37a2d28cc7647be77feceb86651693acb80961639d3173ab3f293bc45964503dddd2d70a677da0a03cc5839955abea4cb9d29f9561962e0cb4e09511d943f4157312771ed8bd0f999beb78ad7e0ddddc2a192eb9db47f9cfe3026fd0760e3255d6a34873d364f39a12c849c868e264e43095ebce790a88b654afe6d99ceab927143694ddd2b4100ca3f3d30e1241dbd3d749c6dd88a565d186f255205c9775cd5c7f380a87052d83b26c21d814bcacbf74bb8ef28b1bfb3fab2b739ed9b698f77ba895c49b14b301e5d9889f6dfa462abab241fd8a6e07763570cc87ba84bf194496a8efe294b3588e18f457b9c639728dfd8ef15a2dc2435c00ad013b173ed2d8ff56643d3d10df13d5bd83c4a6e81cc55f6090ed42fdfeadafdc278857accdc0c0316a2da94329f7d15f2854857c12bc415769a2c0be4a81c5557d2fbc118f9aca4126e54b8d969b47c2bef8ddcdf22410102633378267277176faad72faaf3b23f9f9f0930f3984c498c4cbaa414ed60c87db08e0892be76f406700d34ced8e4f1ea3df6d89ddaed8d5f3cb61e63fcf5387948aa9e2c2f28cfdcb273561af660d664b887517884ec4bdec4dd35877718f6e89e5ebe6e0f5df686b0ba4b4c5f734b965df35b0af95366bbe0eda2d5e9049f39ca2dfaa098380973a42cf9eb9990adcf1234413aa92af4cc8f000de21de90a87d99c66b43ee0a869e2470a89edce4303618d6a88130fe4d87da920196ba40fde4eb20b6fe12c836a59d4cc6faf9dc864b8251fdda44a8081477d68e3c47e460f0238b0ac0a348ac6b8a8de75511c96ee82355ba9c441004e49d0c96902863bc3ac159339ff0449a891e06880495f79cd78bae1f025412f7dc10401fb3b99c86972a643e4e62bf88f2291ce81f21ad16ef58a981c6f16b089612ea1f05bf2de57f3a0e793ebe44eaaf37c0765a5147715f5299437ead6a397cd804118bc994c741928245fa8abe9434fb7f292e1ab90241edd985f9a93fa7d14d7089e45be202337068eb055f7b1007a8c80241952427c550b2eb4dfc578eaa7c1da376025fe865978915999ce7cfa86066ce3ba0179a2f82c6491daf0fe29a5bd0301c596ad7bb51141553ada39c263d728a7c3f4f0598f89f219cd89a67a49fe37680ad3ad911ba8ac8334b112fc39936efd2d3efd34284d6fc98d897a06632c3007453a0bac916e598179df21240fcdcde6f8f7fc8f978d1384674adc75e2f07224e63f6888a1a88acccb2303a7f33bd0edf73eb06b4406d8d3620c2e7dc78a52fa4617916b8af16f4028c47e83753247abad00053cbcbc8a515868002e38c04b39b6a626da497d4006aef2465e6eed3b44dafc28eb7d5a2bbc9bf238260df3dceff3ba2940b2277056d68eaa6a8a4995d17347986e2a0f9469ade346fdb698f07d2941cb9b16e3374dddafa23b5e0ddcd0a8369ab71daae11645e5ad41d7cb8dd40ca0fa0801a69a73ffc187aee3e0f95275013d0b7f002c4ab8a1862aa006ad11ac532eba877a2a8a51c70d4aa743e9c108b8a2cfd55cd345ae298da20c47857ce637b6d6c09ef19eaa35f36c5d6da62dc5983d7d3a0be66c815ea79edd3fd7298b08d64b41a2ed04b0fab5265aaf5011c2aea410bdb1863f174bb45b156c2fa55c4d4db2a404b2e307fcd2e72695ffb416ecf61390e6ab33913912b8544e9b4a31e8c3b1525ff67955a200a21e914084893073af953b6d7557de70176270d876de9365ab91b14f01e884715ac7dc75df0ad5191edb5a33df6d87080b993c49f1d451af9c1f01a3804dec8e4a69be0ea5919057b0b4ab2b122471376fcbaf269969e4bab3df41fa99b22f28fcf9da5e7f8f9cd518e59a062517ea4e9c85ec8f3f00a52464020dc0723269b200a7203ac663eecf73c5a63f0a5fcaa1b50c818b49f7074efc3866b67d041b2403a8792b3f8e5fdabf033520dc9fa85f9919506f6bb47303f28e8b612136cb110b7605d79b1e7b6255d543bcaa9e57750f2492176af5704fbfc95a34bae02a47edee74594cd45971760013ce406c8203360356ad34ee22899781ea681512c26d1286123594423e786b3e65e46dc43217e39280c626c3e1b91558100838986b766353435edfb58f0ea9b26a94a11e170248e51ad6cbe69c40a4104aaa6c93ec0a7d3de0d7f6f1e98e5c589962fbe85e0ab70aa4e7c54bb87aa13e04b1ca047adf965cf6e3f19592d0280dfb0e868bfa5536e0d6ca5229a8ed973055e0ecb3b254c8e61bcdf286a9135e63a6676e55895768a9a79d54182f89e666fcf40ca9f1f60fb2e952238081be5ca7198cfc52a15cfbcf364d27e07867dc659db910ae1757338a02b2e46cf17e8302bac619c2cce5b112131773fe3d35e9d00fce0e71ab921c431e6320139830251c9c9fd2e47ddc542573f14f749b30420501b278766fee5093a97462dd2b9fb3936856f973ca513a525d4bb0ad1879ba0e2b6a956889687292f2a288d5680266c6de4f1f845cb69bcf72e8bb1cf341b2ae654dac9de0fe28eed4cefda8dcbfd18abb8e3b95b6946ecbd92b09dfb59ad0bc4f12b89de8f029585b3970f5cf680fecab7a09a884823217257dc294fb4e61e94d0ce71afd551d0356a5c52742c7b8f174355e73bbcdfdf5300da244264522500726a54ae3c3b126a84d3ef47fe03e91820f288de151c1bed982cc183b359d9e91b33f1b8b9e56d62db5dcc4c5915d767bc2d10aecb3dd200931c38991558080c32d087374cd9ce15ce98b62cdb0fb901f0a2dd92350ae9dde685a375294788bc319a3ee188174cd50a37faf5f4a337735ee4220c608f7a1031538d5d11e2e3ef4899db484d5c73029f86a3c0f7e4f0dbad608ecdd889d04ba5d97f91527cbb10b893f49cc3aa51028cfcd149e7941c67ca5ba3e9117018f8c19bd10326431cbf2d090fdf2c91a80f17d7d484810d94690bcd6eab5dc82aa1e720d62bed4b02fe4d412652ee7e57566052341a394f0dc8dfe2b0e2d463a37ea228c6167f6d8039bd0d93a7e390bdedd270f8bd2829dbbb3031ef355aade661e6d98f77f112e33435c13935d87aeb892db186ee86343989d283f3970b28f2d907fdf75a25cd1b3575876835fb599f8fe0bb86cacefb936e8318291daed67348eb0f1baeca417e8941bb41fdf231397fff1e8ebe5bf3b9208bf7c554b1440bb1a8893f8173bbfd130568c598809930a63f7822a546410d9050e5c5aaa45e7ea57ade69771e95e4edbc947a48ee9dbab67ea6120393a346850ee7dbd162060190178445844d08e5378f51c2a1ce1babb03e7d000100a12ec445b5f3d2b77dcb21a95b2022f04b136155053387f754c9747757525ab8e7f04586f2bbab7685e212216935643562a2a9c1c0c56251ef6d7cb692149718381d7768fceecf4e509d6f6b526a33eecce7ba0f7e38ef3299f9f63585f7f0dc9bd5cf498258f9ed426656003ad4a5c90a584433c8e8dc5e5d000000"], 0x1130}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000040)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000a00)={0x7, "639cbd8985c389b1bd3f6d7e16da387797f35462b27a8f8e6ab71542b665640bfc335081b2e1bfea92733ec87d5c2cadd84a0a31ae455a3dc397a81ab97504dc"})
r3 = syz_open_dev$loop(&(0x7f0000000a80), 0x0, 0x282900)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, r4)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
r6 = socket$nl_sock_diag(0x10, 0x3, 0x4)
sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000009c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/1382], 0x500}}, 0x1000)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0)
ioctl$LOOP_SET_FD(r3, 0x4c00, r5)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000001600)={0x2bf, "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"})
socketpair(0x1a, 0x2, 0x1, &(0x7f0000000140)) (async)
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000001900)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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"], 0x1130}, 0x1, 0x0, 0x0, 0x20000040}, 0x20000040) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x800, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$HIDIOCGFEATURE(r2, 0xc0404807, &(0x7f0000000a00)={0x7, "639cbd8985c389b1bd3f6d7e16da387797f35462b27a8f8e6ab71542b665640bfc335081b2e1bfea92733ec87d5c2cadd84a0a31ae455a3dc397a81ab97504dc"}) (async)
syz_open_dev$loop(&(0x7f0000000a80), 0x0, 0x282900) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) (async)
ioctl$LOOP_SET_FD(r3, 0x4c00, r4) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000009c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/1382], 0x500}}, 0x1000) (async)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x0) (async)
ioctl$LOOP_SET_FD(r3, 0x4c00, r5) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"}) (async)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000001600)={0x2bf, "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"}) (async)

01:36:57 executing program 5:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0)

[ 1564.733076][ T1544] binder: 1543:1544 ioctl 400c620e 20000400 returned -22
01:36:57 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0})

01:36:57 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r6=>0x0}) (async)
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10040, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0105000000000000000006000000200001801400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r6, @ANYBLOB="d2afac4e753e15131cceb0ddb7015cade08e3c48a11221c9fd156eb98b3350a2567c575eb9dfbae3d82930a0b5c922501ba7af6e"], 0x34}}, 0x0) (async, rerun: 32)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) (rerun: 32)
ioctl$KVM_GET_API_VERSION(r8, 0xae00, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x101, 0x4, 0x35, 0x400, r3, 0x1, '\x00', r6, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x48) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (rerun: 64)

01:36:57 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0})

01:36:57 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0})

01:36:57 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)

01:36:57 executing program 5:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) (async)

01:36:57 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x500, 0x0, 0x0, 0x0, 0x0})

01:36:57 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0})

[ 1564.911922][ T1564] binder: 1563:1564 ioctl 400c620e 20000400 returned -22
01:36:57 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0})

01:36:57 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)

01:36:57 executing program 5:
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0)

01:36:57 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x600, 0x0, 0x0, 0x0, 0x0})

[ 1565.010912][ T1582] binder: 1581:1582 ioctl 400c620e 20000400 returned -22
01:36:57 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0})

01:36:57 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r6=>0x0})
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10040, 0x0)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0105000000000000000006000000200001801400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r6, @ANYBLOB="d2afac4e753e15131cceb0ddb7015cade08e3c48a11221c9fd156eb98b3350a2567c575eb9dfbae3d82930a0b5c922501ba7af6e"], 0x34}}, 0x0)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0)
ioctl$KVM_GET_API_VERSION(r8, 0xae00, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x101, 0x4, 0x35, 0x400, r3, 0x1, '\x00', r6, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x48)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0x40046207, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3}) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x10040, 0x0) (async)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0105000000000000000006000000200001801400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r6, @ANYBLOB="d2afac4e753e15131cceb0ddb7015cade08e3c48a11221c9fd156eb98b3350a2567c575eb9dfbae3d82930a0b5c922501ba7af6e"], 0x34}}, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x100, 0x0) (async)
ioctl$KVM_GET_API_VERSION(r8, 0xae00, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x101, 0x4, 0x35, 0x400, r3, 0x1, '\x00', r6, 0xffffffffffffffff, 0x5, 0x4, 0x1}, 0x48) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)

01:36:57 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0})

01:36:57 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:36:57 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)

01:36:57 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x700, 0x0, 0x0, 0x0, 0x0})

[ 1565.121056][ T1594] binder: 1591:1594 ioctl 400c620e 20000400 returned -22
01:36:57 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0})

01:36:57 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

[ 1565.191232][ T1602] binder: 1601:1602 ioctl 40046205 0 returned -22
[ 1565.234092][ T1608] binder: BINDER_SET_CONTEXT_MGR already set
01:36:57 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x6, 0xfe, 0x298d24bf, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x49, 0x0, 0x20}})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfffffffffffffdd8, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000000c0)=0xfffeffff)

01:36:57 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0})

01:36:57 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x4800, 0x0, 0x0, 0x0, 0x0})

[ 1565.234104][ T1608] binder: 1597:1608 ioctl 40046207 0 returned -16
01:36:58 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x6, 0xfe, 0x298d24bf, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x49, 0x0, 0x20}}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfffffffffffffdd8, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"}) (async)
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000000c0)=0xfffeffff)

01:36:58 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0})

[ 1565.255145][ T1614] binder: 1603:1614 ioctl 400c620e 20000400 returned -22
01:36:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x1002, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:36:58 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0})

01:36:58 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:36:58 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x500, 0x0, 0x0})

01:36:58 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x4c00, 0x0, 0x0, 0x0, 0x0})

[ 1565.327786][ T1623] binder: 1620:1623 ioctl 40046205 0 returned -22
[ 1565.392447][ T1628] binder: 1624:1628 ioctl 400c620e 20000400 returned -22
01:36:58 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0})

01:36:58 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x6, 0xfe, 0x298d24bf, 0x0, @rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x1, 0x49, 0x0, 0x20}}) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0xfffffffffffffdd8, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f00000000c0)=0xfffeffff)

01:36:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x1002, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x1002, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)

01:36:58 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x6800, 0x0, 0x0, 0x0, 0x0})

01:36:58 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x600, 0x0, 0x0})

[ 1565.471184][ T1634] binder: 1631:1634 ioctl 40046205 0 returned -22
[ 1565.495897][ T1639] binder: 1638:1639 ioctl 400c620e 20000400 returned -22
01:36:58 executing program 5:
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={<r0=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={<r1=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f00000000c0)={&(0x7f0000000080)=[r1, r0, r0, 0x0, r0, r0, r0], 0x7})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x100000000, 0x200000)
r5 = syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x8000)
ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000000200)={0xe})
mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x4010, r2, 0x7)
r6 = syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x80000)
ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000280)={0xd, 0x1})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000140)={'wg2\x00'})
ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f00000002c0)={0x4472, 0x4, [{0x9}, {0x3, 0x1}, {}, {0x7, 0x1}]})
ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0)

01:36:58 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0})

01:36:58 executing program 4:
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="6ee7b8e1112a8b100be0c3dbecdc4095c71afdefb2db10d6fd", 0x19})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x5c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @flat=@weak_handle={0x77682a85, 0x0, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @register_looper], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x14a4, 0x15, 0x200, 0x70bd2b, 0x25dfdbfd, {0xb, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "c47531f7319ccf5865d2f76b1ba3844907a5d4c82233b77b5ec9ecee30aa794176f3fcac98e8c17afd418726faa7731d57d7587daab7811dfa99a4022890638d97996a6b4ffc7618182ce781b04261c77f6fa0c12349d9f79da57b2f2c63451898e658b48cd6444586d90af19b139069cd2c4f4c2e2b3653eabfece8ae565fc97fd675e16a9a1cb70fae8e851979cf7774dd0989a7293e316ea5dde1155e44ebd6bbe01ef709e930e9f2dc996b28d981715537d357398c5104b40559d1629e810916cfe5cb5530d769ad683fe71c1edae85f66440475b2556cb30102c95b8ab2a1f837806502e865f350f6464425881d"}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "25e0a2154d1f23af6bafa05012e8b5e777afaad1e92b663c899a6f25c3518621747563c693b9596cdbf8803b4f711da0c721ddd91b22693fe785e2b623e0c6367bd3f3b05f0499bc3c1e41c97529bb1f92c6dc86e42aa806b722671120a330f22c82f9da72547106e7ff53baddb14c5cf8c8f7aa7596a1f8d5b7099c24d7a9b7eea1e01d81ac230de79a6dd973a73d4bdf02e4badde6db5c055102d5258916"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "70af7e5b818eb03dcab1e188762e88f808af9504d7e1d9cd27d4d3d8adf924298a1ed8c2b64e0ba2a31e17b00d"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "5849118fa9830b3cac10bd007e9dbd754c0c7be278c8d86f74b72616dac892225ee78f443781e896f1a369bd83192bf095a7bfa9ca447fc4d5ad64e71213f5c0c029f1f275b89dcd862127d4ad66e4b338c86f79346ed94fd5c0150ee9558b11c92075a8d33c8ae271ea38da5eb3e4927a3ac6bbd28e8dcb5c7ce79e7bac99"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "3eace1406caca6ca14740a33b723eb823fa4547b213dc34ad6d92632cde3b5e82ce2d5e76d4672be6897cc5a4fa3ec8b0e8557bcc5209288bfba1b52fa558caf504d6160f8bb4c699f9165fed153ebf228417c402863547d36da5faa10cd5ce6f724f47cc49d3c195d3f29cb16ad"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "6821d88eca1004cd7631f82d6d604d2e866179a9c25a66fbe057ba59d9383cd14b462e9946ed0844c78f1d02e3a1bf24675d08f0ccb52f319bc6d68048d6271843487fb1e1d7e168fc5ca767e2c97ff73dfdaf5de1bbaa945530f67ad4da3e0e7e62c679597f4415af0c64978307e10826984868a35b5a7ad9747a8c3dd0115130303bad05d92f5d62c62df786d6f50053fc6cf20e282b9a54b60fb82a058ca1c0c2d9dc1f13415e7e377c45d8fb718b9a606d3bb788df956a19900279e47b1682be8ffa6e75870600eba258bd779f9746afbc06cdc373bb1988b848a47c4cffd378856130db85d29815cec12af9"}, @INET_DIAG_REQ_BYTECODE={0xd4, 0x1, "f31ac8cd3cbb29a7d7b58e8b929763b9fa26ad02ad41cc723a91a696d7b4e3d3a58de4d1e5c697359028e5a32838b44e474bdac1a75f65697cd222b29c907504cead6294a24a81e651006cbe7f136c8153a8bcc4fac1f2aa4a83dc3ef1152bc36fa9e723a2845954d1a391e7ceae1470066113f3a5e5da798511874fcb7ee06437cfcb519091852c6ff37b982e3d7311fac5b9410a1dabfc74d4c2b4baeeb354d9f66fd61d0c9072764aaba3643a0f7fe8cee9558c462cc855f78cadc8946f40c1d34b0acdf86ceb1f27d132a1a84ac2"}]}, 0x14a4}, 0x1, 0x0, 0x0, 0x8014}, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000200), 0x7, 0x682000)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000000c0))

01:36:58 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x6c00, 0x0, 0x0, 0x0, 0x0})

[ 1565.594709][ T1648] binder: 1647:1648 ioctl 400c620e 20000400 returned -22
01:36:58 executing program 5:
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={<r0=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={<r1=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f00000000c0)={&(0x7f0000000080)=[r1, r0, r0, 0x0, r0, r0, r0], 0x7})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x100000000, 0x200000)
r5 = syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x8000)
ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000000200)={0xe})
mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x4010, r2, 0x7)
r6 = syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x80000)
ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000280)={0xd, 0x1})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000140)={'wg2\x00'})
ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f00000002c0)={0x4472, 0x4, [{0x9}, {0x3, 0x1}, {}, {0x7, 0x1}]})
ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f00000000c0)={&(0x7f0000000080)=[r1, r0, r0, 0x0, r0, r0, r0], 0x7}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x0, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000180), 0x100000000, 0x200000) (async)
syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x8000) (async)
ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000000200)={0xe}) (async)
mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x4010, r2, 0x7) (async)
syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x80000) (async)
ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000280)={0xd, 0x1}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000140)={'wg2\x00'}) (async)
ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f00000002c0)={0x4472, 0x4, [{0x9}, {0x3, 0x1}, {}, {0x7, 0x1}]}) (async)
ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0) (async)

01:36:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x1002, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x1002, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)

01:36:58 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x700, 0x0, 0x0})

[ 1565.647623][ T1651] binder: 1650:1651 ioctl 40046205 0 returned -22
01:36:58 executing program 4:
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="6ee7b8e1112a8b100be0c3dbecdc4095c71afdefb2db10d6fd", 0x19})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x5c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @flat=@weak_handle={0x77682a85, 0x0, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @register_looper], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"}) (async)
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x14a4, 0x15, 0x200, 0x70bd2b, 0x25dfdbfd, {0xb, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "c47531f7319ccf5865d2f76b1ba3844907a5d4c82233b77b5ec9ecee30aa794176f3fcac98e8c17afd418726faa7731d57d7587daab7811dfa99a4022890638d97996a6b4ffc7618182ce781b04261c77f6fa0c12349d9f79da57b2f2c63451898e658b48cd6444586d90af19b139069cd2c4f4c2e2b3653eabfece8ae565fc97fd675e16a9a1cb70fae8e851979cf7774dd0989a7293e316ea5dde1155e44ebd6bbe01ef709e930e9f2dc996b28d981715537d357398c5104b40559d1629e810916cfe5cb5530d769ad683fe71c1edae85f66440475b2556cb30102c95b8ab2a1f837806502e865f350f6464425881d"}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "25e0a2154d1f23af6bafa05012e8b5e777afaad1e92b663c899a6f25c3518621747563c693b9596cdbf8803b4f711da0c721ddd91b22693fe785e2b623e0c6367bd3f3b05f0499bc3c1e41c97529bb1f92c6dc86e42aa806b722671120a330f22c82f9da72547106e7ff53baddb14c5cf8c8f7aa7596a1f8d5b7099c24d7a9b7eea1e01d81ac230de79a6dd973a73d4bdf02e4badde6db5c055102d5258916"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "70af7e5b818eb03dcab1e188762e88f808af9504d7e1d9cd27d4d3d8adf924298a1ed8c2b64e0ba2a31e17b00d"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "5849118fa9830b3cac10bd007e9dbd754c0c7be278c8d86f74b72616dac892225ee78f443781e896f1a369bd83192bf095a7bfa9ca447fc4d5ad64e71213f5c0c029f1f275b89dcd862127d4ad66e4b338c86f79346ed94fd5c0150ee9558b11c92075a8d33c8ae271ea38da5eb3e4927a3ac6bbd28e8dcb5c7ce79e7bac99"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "3eace1406caca6ca14740a33b723eb823fa4547b213dc34ad6d92632cde3b5e82ce2d5e76d4672be6897cc5a4fa3ec8b0e8557bcc5209288bfba1b52fa558caf504d6160f8bb4c699f9165fed153ebf228417c402863547d36da5faa10cd5ce6f724f47cc49d3c195d3f29cb16ad"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "6821d88eca1004cd7631f82d6d604d2e866179a9c25a66fbe057ba59d9383cd14b462e9946ed0844c78f1d02e3a1bf24675d08f0ccb52f319bc6d68048d6271843487fb1e1d7e168fc5ca767e2c97ff73dfdaf5de1bbaa945530f67ad4da3e0e7e62c679597f4415af0c64978307e10826984868a35b5a7ad9747a8c3dd0115130303bad05d92f5d62c62df786d6f50053fc6cf20e282b9a54b60fb82a058ca1c0c2d9dc1f13415e7e377c45d8fb718b9a606d3bb788df956a19900279e47b1682be8ffa6e75870600eba258bd779f9746afbc06cdc373bb1988b848a47c4cffd378856130db85d29815cec12af9"}, @INET_DIAG_REQ_BYTECODE={0xd4, 0x1, "f31ac8cd3cbb29a7d7b58e8b929763b9fa26ad02ad41cc723a91a696d7b4e3d3a58de4d1e5c697359028e5a32838b44e474bdac1a75f65697cd222b29c907504cead6294a24a81e651006cbe7f136c8153a8bcc4fac1f2aa4a83dc3ef1152bc36fa9e723a2845954d1a391e7ceae1470066113f3a5e5da798511874fcb7ee06437cfcb519091852c6ff37b982e3d7311fac5b9410a1dabfc74d4c2b4baeeb354d9f66fd61d0c9072764aaba3643a0f7fe8cee9558c462cc855f78cadc8946f40c1d34b0acdf86ceb1f27d132a1a84ac2"}]}, 0x14a4}, 0x1, 0x0, 0x0, 0x8014}, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000200), 0x7, 0x682000)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000000c0))

01:36:58 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0})

01:36:58 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x7400, 0x0, 0x0, 0x0, 0x0})

01:36:58 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xff00, 0x0, 0x0})

[ 1565.712097][ T1660] binder: 1657:1660 ioctl 400c620e 20000400 returned -22
01:36:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0)

[ 1565.781709][ T1665] binder: 1662:1665 ioctl 40046205 0 returned -22
01:36:58 executing program 4:
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="6ee7b8e1112a8b100be0c3dbecdc4095c71afdefb2db10d6fd", 0x19}) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x5c, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @flat=@weak_handle={0x77682a85, 0x0, 0x2}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @register_looper], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})
sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)={0x14a4, 0x15, 0x200, 0x70bd2b, 0x25dfdbfd, {0xb, 0x8}, [@INET_DIAG_REQ_BYTECODE={0xf4, 0x1, "c47531f7319ccf5865d2f76b1ba3844907a5d4c82233b77b5ec9ecee30aa794176f3fcac98e8c17afd418726faa7731d57d7587daab7811dfa99a4022890638d97996a6b4ffc7618182ce781b04261c77f6fa0c12349d9f79da57b2f2c63451898e658b48cd6444586d90af19b139069cd2c4f4c2e2b3653eabfece8ae565fc97fd675e16a9a1cb70fae8e851979cf7774dd0989a7293e316ea5dde1155e44ebd6bbe01ef709e930e9f2dc996b28d981715537d357398c5104b40559d1629e810916cfe5cb5530d769ad683fe71c1edae85f66440475b2556cb30102c95b8ab2a1f837806502e865f350f6464425881d"}, @INET_DIAG_REQ_BYTECODE={0xa3, 0x1, "25e0a2154d1f23af6bafa05012e8b5e777afaad1e92b663c899a6f25c3518621747563c693b9596cdbf8803b4f711da0c721ddd91b22693fe785e2b623e0c6367bd3f3b05f0499bc3c1e41c97529bb1f92c6dc86e42aa806b722671120a330f22c82f9da72547106e7ff53baddb14c5cf8c8f7aa7596a1f8d5b7099c24d7a9b7eea1e01d81ac230de79a6dd973a73d4bdf02e4badde6db5c055102d5258916"}, @INET_DIAG_REQ_BYTECODE={0x31, 0x1, "70af7e5b818eb03dcab1e188762e88f808af9504d7e1d9cd27d4d3d8adf924298a1ed8c2b64e0ba2a31e17b00d"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "5849118fa9830b3cac10bd007e9dbd754c0c7be278c8d86f74b72616dac892225ee78f443781e896f1a369bd83192bf095a7bfa9ca447fc4d5ad64e71213f5c0c029f1f275b89dcd862127d4ad66e4b338c86f79346ed94fd5c0150ee9558b11c92075a8d33c8ae271ea38da5eb3e4927a3ac6bbd28e8dcb5c7ce79e7bac99"}, @INET_DIAG_REQ_BYTECODE={0x72, 0x1, "3eace1406caca6ca14740a33b723eb823fa4547b213dc34ad6d92632cde3b5e82ce2d5e76d4672be6897cc5a4fa3ec8b0e8557bcc5209288bfba1b52fa558caf504d6160f8bb4c699f9165fed153ebf228417c402863547d36da5faa10cd5ce6f724f47cc49d3c195d3f29cb16ad"}, @INET_DIAG_REQ_BYTECODE={0xf2, 0x1, "6821d88eca1004cd7631f82d6d604d2e866179a9c25a66fbe057ba59d9383cd14b462e9946ed0844c78f1d02e3a1bf24675d08f0ccb52f319bc6d68048d6271843487fb1e1d7e168fc5ca767e2c97ff73dfdaf5de1bbaa945530f67ad4da3e0e7e62c679597f4415af0c64978307e10826984868a35b5a7ad9747a8c3dd0115130303bad05d92f5d62c62df786d6f50053fc6cf20e282b9a54b60fb82a058ca1c0c2d9dc1f13415e7e377c45d8fb718b9a606d3bb788df956a19900279e47b1682be8ffa6e75870600eba258bd779f9746afbc06cdc373bb1988b848a47c4cffd378856130db85d29815cec12af9"}, @INET_DIAG_REQ_BYTECODE={0xd4, 0x1, "f31ac8cd3cbb29a7d7b58e8b929763b9fa26ad02ad41cc723a91a696d7b4e3d3a58de4d1e5c697359028e5a32838b44e474bdac1a75f65697cd222b29c907504cead6294a24a81e651006cbe7f136c8153a8bcc4fac1f2aa4a83dc3ef1152bc36fa9e723a2845954d1a391e7ceae1470066113f3a5e5da798511874fcb7ee06437cfcb519091852c6ff37b982e3d7311fac5b9410a1dabfc74d4c2b4baeeb354d9f66fd61d0c9072764aaba3643a0f7fe8cee9558c462cc855f78cadc8946f40c1d34b0acdf86ceb1f27d132a1a84ac2"}]}, 0x14a4}, 0x1, 0x0, 0x0, 0x8014}, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async)
r2 = syz_open_dev$mouse(&(0x7f0000000200), 0x7, 0x682000)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r2, 0xae04)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000000c0))

01:36:58 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x7a00, 0x0, 0x0, 0x0, 0x0})

01:36:58 executing program 5:
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={<r0=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={<r1=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f00000000c0)={&(0x7f0000000080)=[r1, r0, r0, 0x0, r0, r0, r0], 0x7})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000180), 0x100000000, 0x200000)
r5 = syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x8000)
ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000000200)={0xe})
mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x4010, r2, 0x7)
r6 = syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x80000)
ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000280)={0xd, 0x1})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000140)={'wg2\x00'})
ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f00000002c0)={0x4472, 0x4, [{0x9}, {0x3, 0x1}, {}, {0x7, 0x1}]})
ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f00000000c0)={&(0x7f0000000080)=[r1, r0, r0, 0x0, r0, r0, r0], 0x7}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder1\x00', 0x0, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000180), 0x100000000, 0x200000) (async)
syz_open_dev$mouse(&(0x7f00000001c0), 0x8, 0x8000) (async)
ioctl$USBDEVFS_RESETEP(r5, 0x80045503, &(0x7f0000000200)={0xe}) (async)
mmap$usbfs(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x4010, r2, 0x7) (async)
syz_open_dev$mouse(&(0x7f0000000100), 0x0, 0x80000) (async)
ioctl$USBDEVFS_CLEAR_HALT(r6, 0x80045515, &(0x7f0000000280)={0xd, 0x1}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000140)={'wg2\x00'}) (async)
ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, &(0x7f00000002c0)={0x4472, 0x4, [{0x9}, {0x3, 0x1}, {}, {0x7, 0x1}]}) (async)
ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0) (async)

01:36:58 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0})

[ 1565.824386][ T1679] binder: 1678:1679 ioctl 400c620e 20000400 returned -22
01:36:58 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0})

01:36:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) (async)

01:36:58 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0), 0x10d, 0x0, &(0x7f0000000000)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f00000000c0)=[@register_looper, @increfs={0x40046304, 0x1}, @increfs], 0xfc, 0x0, &(0x7f00000001c0)="f7cac6bf4879acd03e8828a3b33b484466291f1254287643834a5290642236a0096faaf7e9e5e4feca79539d7ee18785dd49c36202eb930803655dd42d7f6339ba57915ebbeff29ac2e5dc8e764a79b0d4e76930f34d8dfa3d7557c1d36ee3edc34d192353e6b112ed1d801584e31a2440d6215b3eae2ed08a7618e352b6f763ab5ebc2fb04c6932431f3861cfef77c76fc8df56ca4e0c6944dc0c6a799c62430b26979581437358b527340d156b6b2b7a97eaea1341754845d756e6bc1f464dba3fcc7e52635daaf278f0f86a14daaadc869220c0eec08c3a3d8d13012051b29c92de51ed9213e82450352245d37738d8211cf42e8abf53c061a188"})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000300)={'wg2\x00'})
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000180), &(0x7f0000000140)=0x6)

01:36:58 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0})

[ 1565.954077][ T1693] binder: 1688:1693 ioctl 40046205 0 returned -22
[ 1565.987354][ T1695] binder: 1692:1695 ioctl 400c620e 20000400 returned -22
01:36:58 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x7e87, 0x0, 0x0, 0x0, 0x0})

[ 1566.000785][ T1693] binder: 1688:1693 ioctl 40046205 0 returned -22
01:36:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
ioctl$KVM_GET_API_VERSION(0xffffffffffffffff, 0xae00, 0x0) (async)

01:36:58 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x1, 0x1f, 0x1, 0x1000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x9, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x0, 0x6, 0xb, 0xa, 0x50, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x101, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1]}, 0x80)

01:36:58 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0})

01:36:58 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0})

01:36:58 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x7e8f, 0x0, 0x0, 0x0, 0x0})

01:36:58 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0), 0x10d, 0x0, &(0x7f0000000000)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"}) (async)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4}) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f00000000c0)=[@register_looper, @increfs={0x40046304, 0x1}, @increfs], 0xfc, 0x0, &(0x7f00000001c0)="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"}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000300)={'wg2\x00'}) (async)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc) (async)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000180), &(0x7f0000000140)=0x6)

01:36:58 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x1, 0x1f, 0x1, 0x1000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x9, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x0, 0x6, 0xb, 0xa, 0x50, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x101, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1]}, 0x80)

[ 1566.107804][ T1713] binder: 1712:1713 ioctl 40046205 0 returned -22
[ 1566.125266][ T1714] binder: 1711:1714 ioctl 400c620e 20000400 returned -22
01:36:58 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0})

01:36:58 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:36:58 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0})

01:36:58 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x7e90, 0x0, 0x0, 0x0, 0x0})

01:36:58 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x1, 0x1f, 0x1, 0x1000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x9, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x0, 0x6, 0xb, 0xa, 0x50, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x101, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1]}, 0x80)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x1, 0x1f, 0x1, 0x1000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x9, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x0, 0x6, 0xb, 0xa, 0x50, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x101, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1]}, 0x80) (async)

[ 1566.234799][ T1733] binder: 1725:1733 ioctl 400c620e 20000400 returned -22
[ 1566.237072][ T1734] binder: 1726:1734 ioctl 40046205 0 returned -22
01:36:59 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0), 0x10d, 0x0, &(0x7f0000000000)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4})
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f00000000c0)=[@register_looper, @increfs={0x40046304, 0x1}, @increfs], 0xfc, 0x0, &(0x7f00000001c0)="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"})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000300)={'wg2\x00'})
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000180), &(0x7f0000000140)=0x6)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0), 0x10d, 0x0, &(0x7f0000000000)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"}) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4}) (async)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000002c0)={0x14, 0x0, &(0x7f00000000c0)=[@register_looper, @increfs={0x40046304, 0x1}, @increfs], 0xfc, 0x0, &(0x7f00000001c0)="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"}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000300)={'wg2\x00'}) (async)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc) (async)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f0000000180), &(0x7f0000000140)=0x6) (async)

01:36:59 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0})

01:36:59 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:36:59 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x877e, 0x0, 0x0, 0x0, 0x0})

01:36:59 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0})

01:36:59 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0})

[ 1566.345564][ T1744] binder: 1742:1744 ioctl 40046205 0 returned -22
[ 1566.370813][ T1746] binder: 1743:1746 ioctl 400c620e 20000400 returned -22
[ 1566.372701][ T1745] binder: 1742:1745 ioctl 40046205 0 returned -22
01:36:59 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:36:59 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x800, 0x0)

01:36:59 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4})
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000001700)=@usbdevfs_driver={0x54, 0xa6, &(0x7f0000000700)="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"})
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000000)={0x0, 0x100})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000004c0)={0xffffff4c, 0x2, "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"})
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000140)={0x0, r7})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="18000000fbffffff0061490bdd9dbf004b0000004200000095000000000000009500006fead8d80031f4d97b7e8adc3955ab61bf0bcfa91795feee1e9f16880a32f8108791af410a3f3b650f"], &(0x7f0000000080)='GPL\x00', 0x6, 0x26, &(0x7f0000000200)=""/38, 0x41000, 0x5, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xf, 0xf78e, 0x9}, 0x10, 0x11267, 0xffffffffffffffff, 0x0, &(0x7f0000000640)=[r7]}, 0x80)

01:36:59 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0})

[ 1566.458857][ T1762] binder: 1761:1762 ioctl 400c620e 20000400 returned -22
01:36:59 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0})

01:36:59 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x8f7e, 0x0, 0x0, 0x0, 0x0})

01:36:59 executing program 0:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x58, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b630000086310400100000000000000000000000000000009631040020000000000000000000000000000001063084000000000000000000c63000003630840", @ANYRES64=0x0, @ANYBLOB="0f630c400200000000000000000000004dfc42d8b434e741b40385a531821c7eb8eccd175edcbf3180c263a4e711aaad0cbf6874d108394d22e2cc9b1b75a7739a8f964828eb075515a768da4497f9554ccab15d12be0420a1d3073b6b0f10a5a851c9083c7ad19c2c69b6fcab42411a437ee84634844c86835fd845e10fc3668592d4bdf0ba4d6bdf4ff85266ba03deccde13a7619bd8fd81d06be8b21e2a252a7baf7c9f1c80b100"/188], 0xd6, 0x0, &(0x7f0000000140)="836945807d0167097fed1b5bb5e70970056aab1e09cd3443c36c64146be6f4d8b60e809e146b670e9134861aab62ea976aa5808ee533476d84ac9d6e4c2b0f9b70e78d5af5f35fab6016dcd11626a9980201a673b6d814ef670b38993677baec88ec01608e53189ff5b7e90aba26688317c4ecafbc3c184a867bd06aca244db72aa1e913138cf89d88db3d90fb10712c8c1abef7bf5ba70770b2cbab339cdfe4f5b9f6b171ba35fdce7f1c469df695313921e7038932061228f08dbc6a95a083f9896df1dce4656a65b8b03adc783bcf5a9345092c0f"})
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)

[ 1566.562316][ T1770] binder: 1769:1770 ioctl 40046205 0 returned -22
01:36:59 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) (async, rerun: 32)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x800, 0x0) (rerun: 32)

01:36:59 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x907e, 0x0, 0x0, 0x0, 0x0})

01:36:59 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0})

01:36:59 executing program 0:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x58, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b630000086310400100000000000000000000000000000009631040020000000000000000000000000000001063084000000000000000000c63000003630840", @ANYRES64=0x0, @ANYBLOB="0f630c400200000000000000000000004dfc42d8b434e741b40385a531821c7eb8eccd175edcbf3180c263a4e711aaad0cbf6874d108394d22e2cc9b1b75a7739a8f964828eb075515a768da4497f9554ccab15d12be0420a1d3073b6b0f10a5a851c9083c7ad19c2c69b6fcab42411a437ee84634844c86835fd845e10fc3668592d4bdf0ba4d6bdf4ff85266ba03deccde13a7619bd8fd81d06be8b21e2a252a7baf7c9f1c80b100"/188], 0xd6, 0x0, &(0x7f0000000140)="836945807d0167097fed1b5bb5e70970056aab1e09cd3443c36c64146be6f4d8b60e809e146b670e9134861aab62ea976aa5808ee533476d84ac9d6e4c2b0f9b70e78d5af5f35fab6016dcd11626a9980201a673b6d814ef670b38993677baec88ec01608e53189ff5b7e90aba26688317c4ecafbc3c184a867bd06aca244db72aa1e913138cf89d88db3d90fb10712c8c1abef7bf5ba70770b2cbab339cdfe4f5b9f6b171ba35fdce7f1c469df695313921e7038932061228f08dbc6a95a083f9896df1dce4656a65b8b03adc783bcf5a9345092c0f"})
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x58, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b630000086310400100000000000000000000000000000009631040020000000000000000000000000000001063084000000000000000000c63000003630840", @ANYRES64=0x0, @ANYBLOB="0f630c400200000000000000000000004dfc42d8b434e741b40385a531821c7eb8eccd175edcbf3180c263a4e711aaad0cbf6874d108394d22e2cc9b1b75a7739a8f964828eb075515a768da4497f9554ccab15d12be0420a1d3073b6b0f10a5a851c9083c7ad19c2c69b6fcab42411a437ee84634844c86835fd845e10fc3668592d4bdf0ba4d6bdf4ff85266ba03deccde13a7619bd8fd81d06be8b21e2a252a7baf7c9f1c80b100"/188], 0xd6, 0x0, &(0x7f0000000140)="836945807d0167097fed1b5bb5e70970056aab1e09cd3443c36c64146be6f4d8b60e809e146b670e9134861aab62ea976aa5808ee533476d84ac9d6e4c2b0f9b70e78d5af5f35fab6016dcd11626a9980201a673b6d814ef670b38993677baec88ec01608e53189ff5b7e90aba26688317c4ecafbc3c184a867bd06aca244db72aa1e913138cf89d88db3d90fb10712c8c1abef7bf5ba70770b2cbab339cdfe4f5b9f6b171ba35fdce7f1c469df695313921e7038932061228f08dbc6a95a083f9896df1dce4656a65b8b03adc783bcf5a9345092c0f"}) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) (async)

01:36:59 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xff00000000000000, 0x0, 0x0})

[ 1566.610598][ T1775] binder: 1771:1775 ioctl 400c620e 20000400 returned -22
01:36:59 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4}) (async)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000001700)=@usbdevfs_driver={0x54, 0xa6, &(0x7f0000000700)="555aa0290d8eb36c6ea7aa3a945ea3435f0ef22832e00faa718f1d7a6280222cf8a0cc88b57f641bcb90bb380d26be5d5b39bc0deab075182d0c446532dd4017814a66aa57c8dc30ba681aa23f6e0ecf944d150a2fc91a5fe092a2a5bbef4153d6b349b0e5be1da876f5bae1b06ee63f6523ece9b6b05caccd87ed781fa79a0a2470ca350644bc0f31dc28eda32e0bb49165865654610806350f5a8991aa880e2246d35b0b68078f409a196f0dcc56cd2acbc9a8484fffbf222b49205feffefb9b80fec15068ba955e27285cb026c4fde02f21a5437ccf13cc5911b5fd58204a1414088da73da231e1a24de973fb4fd7a1c5b401b623f08da7b7b2bd99ba70939a0fb6daf94a42077436e2d43e18daa569d9d0d1199784f2b3ab5eb69cffb8039d1ee84b5f3ca44c9bd730d13590564b0e5ddbb9a219c7ddeec5b0a8a3bae739fec66f58f7c0ce70c755786cecc7ccb2ea1a0d87ebdf58fe407a8b1152622aa5ba3194e2ec2636f85d3083dd817f2609f2a5a5f3046e172cc86f4566ce5920e0753d8ae6a4ff13c58322d294756e9ed47e0f1fd06a32fa7247210a224bc889d323fd129433bf2948f5dddf67e51fa4f6142f8713497d95724da9f3cbb2cf6386dee88d9c76355f670b9a0ef23ae04f4d3981c638c515ff32182d7570d83dc82dfe09fb6aa8c5ecdf141c157cdedf663236a2ecfb085ee04b5354b485db5c45d41981cffe560a0a3cde5c00dcf324a94fe696a35e6d70f335fe7da93fdba6da505acb3f5e1bc640d6191c61cafee5802d86192efa8416c4b088e38c8b90855d6c4fe0f26ef10bc24329b40a1cb2724c8b25c397611b6e6a07128698a829a64b220d8a431b169f4bc6a5ebb4206ff6a589b4ad59c7c2fcd1a8887aaae65ea4ac1eaabf2e5b726889e2bd84a8538c8db77b19324b75961a1740d1c7870571b5851f1ee5ba76984662b5da61c44a905a981e203908425d4d1e09db98829a5727737ba95de06cd267260b68088aa339990ec9aacbd1434dd3e12ceef9122d99d4ea73bd03b7cd7c8125300f401b199fe3f25a93845f4fccb1cb22ee6ea6a72766ed887909fef86410ee20e66dc3c2513229709fe22a184d56c92c67287c5fcbf11f45cfe457f3c62706515d27da5a65a0a3ba807c7083daead90c302ad25f221e3094418ea6d5372747a552d6ccff86df5dff3103e2a992e2996afadc71a3d62206e69adc9d91ac5e75de3df45bd6c1044cb4fbdd5c5db29a92fe7204a2512028f943a89cf8b90366486c7fb84cdf77b4efba7c8578d0743a4678a86d2c4b0e73c6b542888a4236658bde96493473cc3e676f392b6ca656f145a32f667316acbbff524fb51bf46894467b395e76041a7d3165204f50e4dbea93ee7bad6e59fd5979840635b176426198654fc18d889b38a96983ddd321ff77f46c521a6266e128b61657a518920ff5f9c1ffced68cc6cc5d02b7001d4775f9823bc9d9397691b5b908592d7fa04dadbdd5c7761ab73f1b3e58c6961c1d09c65a1e7ed397b2972ecea1c37be71849c7caed2945a7b03f885166372e8aaf3417729bfa075ca85bccb47680010138b39c1e77c7fab865c88072ec7c3e3a0b029f93745ce633377c9b54a6803b3c7723f371ab1ad4cea036a056805cd6967ccfc816d14f0c44dc65d4213e9b6ef46adc377d702cb28adfbe5affec78d9eaa5b1a06c9d652ef25d1a186075fa7d468246a1b8ea8ee486e30d5145b4ffa97cddf03a3ccef6e444d4a8c69cdc254faac34c64cd51732301fbe6b4d493b651aa48915aa26a2cd6c7ff3d2157c84f3d546c68612dcece1664f3c07a46d74f5fe875df2dffd45981682eb43a47075f976df0ae9c05eb43537d720fa07e64d42b70cd742fdaacced9a3b48c2a8efc5b7e63999f2ef6695f99ec36968a88612523cbb3ca14e9b95cd0edce172d11ca703626efbf22385809bdc9adda853d5459ab1a4f8f7dc9859f445a8456e7c541d0d432013208f0f09b364098d71f55d423f0bf1662fcffa1d5ec33f1bf6635980e03abcea3176e69a71c0bcbbcc3d353427e18864c75a2784c9e566002c44199c8166a9604277ea992c005b36266cd5c5257daf91dd8a02bef3136a60b0694ed50f763804439a6bc8643c4bc89978119629d201ffe93dc76be9f6f0f6fad6a161c4194e0ad1c3838b3604a933da59191f4bbe3aa5ead045c34422d11afc0cc968c6a54510a26a93933cf8682ace59f6856b07c48db428b8099b2ac7acc8924849986a2b32e0c94296d5c623fec359412da2fa06211939b4984c100ce5f4ca0e0073db6daa9c3d6e887325cb49b742fc9ca8d7e9ce9425e013242345b63948e9782d94c68fc4c5390fcb9fb9a9f95408cd7edf23bc78d276fc333e8d8c7a6c119500a0908de2ce929e77d9d737a10cd6dc699b2dfe616b3687103c567977139545444b7cc236bed697204031ee174b1bed803216d35979cda8fc5f8814eb70d4d988ecefdec8f83bbffbed16d476186f1c3e77433485b0af6c8cb1f2990aad61d885608fc577b030829487f2d6a6e99e3f006e7468019b99e67a5be65ac9e1b8c0e3b3e2a4c17989341bb253a62f474cb3f0948458b47f49f1d78a42e4949c2c5b70173c9aca893fea39aad932fa11cdbd644ce330dd176c100355b9f6143fde3502e9c09c43e626a60e9b5c148a523f03ff0b39608a8982f69ef6010eee27c8e61387e2d38ee2da255afb543fbe1f862c2f2a6c097d6f8216aa06d87c52e929c0a3b87926abef68609b0697e634f07e63c1cbed31dc7e546f9d54cb4a08cdb3da3ec8971021f6fbc263ab1a0ecd5c693ff6f934649ecf18cadcd895a06a6b682930a05547526873711d05ecfa1a38c313d57a531f9ec3059a833b091d37cf995f46fb5174ab6c5b212d496dbed64fd189ba0dd5572f9f34fa77fa981f2ab0862f95b9deb6dffc24c5e6c5921cc79fb6de3e8355c02ec4288c478623041f7e2c5c3a3898d7e31037be2e1342dc6ca622463d721715c891e529e13a91c4199b7391d6b257b4f46092a214ac99945f3d5f29f33d9fbb7c99b97ac8dfa6481153cb05b9441bdbcb1e1cbfeef720df68e4ad33edd80596fc36fc655022a81cc206691e864a6d5cd2cff667eccdf59bd59416dccab9d982606077b48097fc9cb042f0f23f3f76797f3af6c785589e729cf55a6cb218972b36121a1ff5a9615347b6c486c4bd78f929c7ded46a96729ef46328e6f8546cde19d964b6bf9a8257562bddc3c4760835ee31618d645a62aa2a0eac02fa74e9c2efe1e36b6d83c2e4d27b8525d526c00c05f636654aa9d8af5a469e0661bc8d28209da521156eea7d8dac693fcb2e621eb85a8414696e5a992c8e9a6ac37d6d1e88928cc46020bc4d89ce8ea7b6bd478ed5f92479b1d40138bdb7da83f04b1a59509e471d0e0b07537607fe32ddd5d2612505cdd52d1c85c59f6e07cb9a3d9cd04b051fe44a21ebb56b85302d5b2a62d0203c2136003965922e9fc3cd5b797b3a644edff9bd96c419dbb3d919c68b462d688706764fecac76feff46fffd689ff0f3022185cd96678c9a55db6de494ec161e1037651b49d92f62cdd2e3b130b6f668bbee78db4312c5782e33dc9f618b08bd8239ffbd4780c757d49faf9fa1b7d4a44290fed23fa46b77dde8dacb81951bb9eba45716878290313bab8c1f099b6edb1ec1133dd04a331ac26fcea6b703ef90a41eb227026904b640b04eba2e3e00e1cdf5075f628b8268c5ede15614f2088ad3b3aa1dcdef829d6b5848b58c04672e1ae39c6459f33be933d7603dcf01fa5585543de2a017cee33ce62cc6239601254d82155b4020a543cbba31f423058fe082b34e078d0e486b8dcb6daf62402b6205660260a20d7f3da2219a8fa33e7faaf6e0f4a6472b13472addcc475636c2b711f1cf55e634cdcab9f4f03409445b1f1fb2108cfe65c0614799c945ea3be85d0a759797b356ab35cbdc693e1e8d89c65f13cb46d0eef8598efafe9678f3eb793536ca87a9d4310a48c6cedf062b271f9b1a265760a23150c24a9ae362acdb2dc40ba9f077daca4705b270399802b536a9e33ba9a07f4ea633a9682303952db8f56ace4cb969cf30841474b4b2542c32534b5961b21ca59104c8d8564fe7e1fa7e4f113dd0a2b20e12813d7f85981a6d54803e364cf94d72873a492ccaf73287faa679acdd1da57b4c6ca15b28424e5bb961eb83a5e95d23de267dbf51419e126d47136ec3da8816fa35722af6f12614968f17e671dabb27082621d59a0c8f0de213feffad9aa12b456daba229b76bc884e72eebdbbbc42bd2759f3dc0e98f502f040c4278b3c145a174e4f3a8ca5c147e3085c10d55853af99937e2b958e1c89658d1620aeabaac3298b189ec965c727fbb76a72420d3305138c4376f071e293120e7cccefd4c973c303f3fcf78caeb653916e3d9a73d9829f973a0f09e6b612522ce7ecc75e76cda1038d9ae1c52aff2e52815dd70b1a3c033a4266c97086ed3521d89061d848389df9459eb5ba1cd9ec555a8b070e3eda99ea0370ae463293e77ce1e8070041fd255d10020aa87e6a6acdd8c05d1d3e62b8b26df9939240c50b0c15e0f38421301bf8c92a169cc71c61754e14e5667f37f32eb0e2f6e1f410832f361d9adc3ef0e7863f0d7946204521ff69f177c7dde017223cf383aecb94aaa326f0c70ff9fe61469c24340ca12136d0b8940b11f5f110f245733d42c617a80a127ce8c93276c8418eb1128f3e8b99aff188d2e31e589fee017c0af5d6e644f116cdbf1fb8d35417cdd8bca163deb51bdd6328f5e94310586296ba7d5c560fcd0da4a74dd09748327822e8a54ba84f0799f5db4df7657d8a6b1cd998597e6bd6cd1fa1e8b0a6a9f02ba4193a6a38909a98e3b477e56ce14c30706b68975c948b5dd738ab7e9a019d84839b02b1d1c6a116e8dcf2647b93a78e4954e638d4174f996e5d502580aa04fe933b56b8757aa22736aa4d956ebda15dc8a83543ab0e755359400548a84aca2609639cb73c14679306b27205b1947952ee81a2c5cbadbccc3bcbce7ca4ab2cd5c018696a62b262dd84869a4ddc663c3cb03d163375936dbdf53d8d81984932a1b4859f8c2f09267130279a3ab5d8e69b2f7a026d5fcb89aacb33e597743359119df2c67e255833afd18a01dddf2c48f4db71b1a4531e7a4268a03d4f01915f92ee3c7cc5405e6cdee3fcfbfc692ac65d0db0052fb135652748a0861021f195283581a0c05436d649102cd4edc433ec671c15fbce7d460c6787b77eeba970d54928fc1a1eeaed02c8f74b112d1d313cac8d6a521504fead8ede4752bf067f20426f0e7fe5662699ac707a778d29bbec6ac703c244ed975332890ff3853368033f1382c50f2f0068015a687fe0e2924d3ad54f96309eb8f54f9b07f36f2a0fa47c5d97ff0c2f98857c2a580a31355618256853592e756ec843d109a7cb68d43067524d043395ebe181a25cbdc474c7f915979679af0f5e40440b0d668b213b17f414759a488f5f357a229310c6af97704d944bbd5a28c87f2477e083003e26c86c28e812d3db23d70f4e7a952f60f3d7d2cf3103946e4a71e8c6ac2f71c5abb9786f9cee91c86026eefa2cbedeaf10f211322a588705454ca4082fe5a742db00c423be79da8499236f8f7da1c1fb01d26b04a558702eb8fba770451ba87650aa5e9533b5fa640b97a2692b3fb83c91ea3d1b0867fd513df3b94e592b1e3619e79083026efad5883037e700f560677f9873ab7b1921a3bb5e403906e619e28017"}) (async)
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000000)={0x0, 0x100})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1}) (async)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000004c0)={0xffffff4c, 0x2, "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"}) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000140)={0x0, r7})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="18000000fbffffff0061490bdd9dbf004b0000004200000095000000000000009500006fead8d80031f4d97b7e8adc3955ab61bf0bcfa91795feee1e9f16880a32f8108791af410a3f3b650f"], &(0x7f0000000080)='GPL\x00', 0x6, 0x26, &(0x7f0000000200)=""/38, 0x41000, 0x5, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xf, 0xf78e, 0x9}, 0x10, 0x11267, 0xffffffffffffffff, 0x0, &(0x7f0000000640)=[r7]}, 0x80)

[ 1566.698686][ T1786] binder: 1785:1786 ioctl 40046205 0 returned -22
01:36:59 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0xff00, 0x0, 0x0, 0x0, 0x0})

01:36:59 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x800, 0x0)

01:36:59 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0})

[ 1566.732791][ T1792] binder: 1787:1792 ioctl 400c620e 20000400 returned -22
01:36:59 executing program 0:
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x58, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0b630000086310400100000000000000000000000000000009631040020000000000000000000000000000001063084000000000000000000c63000003630840", @ANYRES64=0x0, @ANYBLOB="0f630c400200000000000000000000004dfc42d8b434e741b40385a531821c7eb8eccd175edcbf3180c263a4e711aaad0cbf6874d108394d22e2cc9b1b75a7739a8f964828eb075515a768da4497f9554ccab15d12be0420a1d3073b6b0f10a5a851c9083c7ad19c2c69b6fcab42411a437ee84634844c86835fd845e10fc3668592d4bdf0ba4d6bdf4ff85266ba03deccde13a7619bd8fd81d06be8b21e2a252a7baf7c9f1c80b100"/188], 0xd6, 0x0, &(0x7f0000000140)="836945807d0167097fed1b5bb5e70970056aab1e09cd3443c36c64146be6f4d8b60e809e146b670e9134861aab62ea976aa5808ee533476d84ac9d6e4c2b0f9b70e78d5af5f35fab6016dcd11626a9980201a673b6d814ef670b38993677baec88ec01608e53189ff5b7e90aba26688317c4ecafbc3c184a867bd06aca244db72aa1e913138cf89d88db3d90fb10712c8c1abef7bf5ba70770b2cbab339cdfe4f5b9f6b171ba35fdce7f1c469df695313921e7038932061228f08dbc6a95a083f9896df1dce4656a65b8b03adc783bcf5a9345092c0f"})
openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)

01:36:59 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0})

01:36:59 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4}) (async)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000001700)=@usbdevfs_driver={0x54, 0xa6, &(0x7f0000000700)="555aa0290d8eb36c6ea7aa3a945ea3435f0ef22832e00faa718f1d7a6280222cf8a0cc88b57f641bcb90bb380d26be5d5b39bc0deab075182d0c446532dd4017814a66aa57c8dc30ba681aa23f6e0ecf944d150a2fc91a5fe092a2a5bbef4153d6b349b0e5be1da876f5bae1b06ee63f6523ece9b6b05caccd87ed781fa79a0a2470ca350644bc0f31dc28eda32e0bb49165865654610806350f5a8991aa880e2246d35b0b68078f409a196f0dcc56cd2acbc9a8484fffbf222b49205feffefb9b80fec15068ba955e27285cb026c4fde02f21a5437ccf13cc5911b5fd58204a1414088da73da231e1a24de973fb4fd7a1c5b401b623f08da7b7b2bd99ba70939a0fb6daf94a42077436e2d43e18daa569d9d0d1199784f2b3ab5eb69cffb8039d1ee84b5f3ca44c9bd730d13590564b0e5ddbb9a219c7ddeec5b0a8a3bae739fec66f58f7c0ce70c755786cecc7ccb2ea1a0d87ebdf58fe407a8b1152622aa5ba3194e2ec2636f85d3083dd817f2609f2a5a5f3046e172cc86f4566ce5920e0753d8ae6a4ff13c58322d294756e9ed47e0f1fd06a32fa7247210a224bc889d323fd129433bf2948f5dddf67e51fa4f6142f8713497d95724da9f3cbb2cf6386dee88d9c76355f670b9a0ef23ae04f4d3981c638c515ff32182d7570d83dc82dfe09fb6aa8c5ecdf141c157cdedf663236a2ecfb085ee04b5354b485db5c45d41981cffe560a0a3cde5c00dcf324a94fe696a35e6d70f335fe7da93fdba6da505acb3f5e1bc640d6191c61cafee5802d86192efa8416c4b088e38c8b90855d6c4fe0f26ef10bc24329b40a1cb2724c8b25c397611b6e6a07128698a829a64b220d8a431b169f4bc6a5ebb4206ff6a589b4ad59c7c2fcd1a8887aaae65ea4ac1eaabf2e5b726889e2bd84a8538c8db77b19324b75961a1740d1c7870571b5851f1ee5ba76984662b5da61c44a905a981e203908425d4d1e09db98829a5727737ba95de06cd267260b68088aa339990ec9aacbd1434dd3e12ceef9122d99d4ea73bd03b7cd7c8125300f401b199fe3f25a93845f4fccb1cb22ee6ea6a72766ed887909fef86410ee20e66dc3c2513229709fe22a184d56c92c67287c5fcbf11f45cfe457f3c62706515d27da5a65a0a3ba807c7083daead90c302ad25f221e3094418ea6d5372747a552d6ccff86df5dff3103e2a992e2996afadc71a3d62206e69adc9d91ac5e75de3df45bd6c1044cb4fbdd5c5db29a92fe7204a2512028f943a89cf8b90366486c7fb84cdf77b4efba7c8578d0743a4678a86d2c4b0e73c6b542888a4236658bde96493473cc3e676f392b6ca656f145a32f667316acbbff524fb51bf46894467b395e76041a7d3165204f50e4dbea93ee7bad6e59fd5979840635b176426198654fc18d889b38a96983ddd321ff77f46c521a6266e128b61657a518920ff5f9c1ffced68cc6cc5d02b7001d4775f9823bc9d9397691b5b908592d7fa04dadbdd5c7761ab73f1b3e58c6961c1d09c65a1e7ed397b2972ecea1c37be71849c7caed2945a7b03f885166372e8aaf3417729bfa075ca85bccb47680010138b39c1e77c7fab865c88072ec7c3e3a0b029f93745ce633377c9b54a6803b3c7723f371ab1ad4cea036a056805cd6967ccfc816d14f0c44dc65d4213e9b6ef46adc377d702cb28adfbe5affec78d9eaa5b1a06c9d652ef25d1a186075fa7d468246a1b8ea8ee486e30d5145b4ffa97cddf03a3ccef6e444d4a8c69cdc254faac34c64cd51732301fbe6b4d493b651aa48915aa26a2cd6c7ff3d2157c84f3d546c68612dcece1664f3c07a46d74f5fe875df2dffd45981682eb43a47075f976df0ae9c05eb43537d720fa07e64d42b70cd742fdaacced9a3b48c2a8efc5b7e63999f2ef6695f99ec36968a88612523cbb3ca14e9b95cd0edce172d11ca703626efbf22385809bdc9adda853d5459ab1a4f8f7dc9859f445a8456e7c541d0d432013208f0f09b364098d71f55d423f0bf1662fcffa1d5ec33f1bf6635980e03abcea3176e69a71c0bcbbcc3d353427e18864c75a2784c9e566002c44199c8166a9604277ea992c005b36266cd5c5257daf91dd8a02bef3136a60b0694ed50f763804439a6bc8643c4bc89978119629d201ffe93dc76be9f6f0f6fad6a161c4194e0ad1c3838b3604a933da59191f4bbe3aa5ead045c34422d11afc0cc968c6a54510a26a93933cf8682ace59f6856b07c48db428b8099b2ac7acc8924849986a2b32e0c94296d5c623fec359412da2fa06211939b4984c100ce5f4ca0e0073db6daa9c3d6e887325cb49b742fc9ca8d7e9ce9425e013242345b63948e9782d94c68fc4c5390fcb9fb9a9f95408cd7edf23bc78d276fc333e8d8c7a6c119500a0908de2ce929e77d9d737a10cd6dc699b2dfe616b3687103c567977139545444b7cc236bed697204031ee174b1bed803216d35979cda8fc5f8814eb70d4d988ecefdec8f83bbffbed16d476186f1c3e77433485b0af6c8cb1f2990aad61d885608fc577b030829487f2d6a6e99e3f006e7468019b99e67a5be65ac9e1b8c0e3b3e2a4c17989341bb253a62f474cb3f0948458b47f49f1d78a42e4949c2c5b70173c9aca893fea39aad932fa11cdbd644ce330dd176c100355b9f6143fde3502e9c09c43e626a60e9b5c148a523f03ff0b39608a8982f69ef6010eee27c8e61387e2d38ee2da255afb543fbe1f862c2f2a6c097d6f8216aa06d87c52e929c0a3b87926abef68609b0697e634f07e63c1cbed31dc7e546f9d54cb4a08cdb3da3ec8971021f6fbc263ab1a0ecd5c693ff6f934649ecf18cadcd895a06a6b682930a05547526873711d05ecfa1a38c313d57a531f9ec3059a833b091d37cf995f46fb5174ab6c5b212d496dbed64fd189ba0dd5572f9f34fa77fa981f2ab0862f95b9deb6dffc24c5e6c5921cc79fb6de3e8355c02ec4288c478623041f7e2c5c3a3898d7e31037be2e1342dc6ca622463d721715c891e529e13a91c4199b7391d6b257b4f46092a214ac99945f3d5f29f33d9fbb7c99b97ac8dfa6481153cb05b9441bdbcb1e1cbfeef720df68e4ad33edd80596fc36fc655022a81cc206691e864a6d5cd2cff667eccdf59bd59416dccab9d982606077b48097fc9cb042f0f23f3f76797f3af6c785589e729cf55a6cb218972b36121a1ff5a9615347b6c486c4bd78f929c7ded46a96729ef46328e6f8546cde19d964b6bf9a8257562bddc3c4760835ee31618d645a62aa2a0eac02fa74e9c2efe1e36b6d83c2e4d27b8525d526c00c05f636654aa9d8af5a469e0661bc8d28209da521156eea7d8dac693fcb2e621eb85a8414696e5a992c8e9a6ac37d6d1e88928cc46020bc4d89ce8ea7b6bd478ed5f92479b1d40138bdb7da83f04b1a59509e471d0e0b07537607fe32ddd5d2612505cdd52d1c85c59f6e07cb9a3d9cd04b051fe44a21ebb56b85302d5b2a62d0203c2136003965922e9fc3cd5b797b3a644edff9bd96c419dbb3d919c68b462d688706764fecac76feff46fffd689ff0f3022185cd96678c9a55db6de494ec161e1037651b49d92f62cdd2e3b130b6f668bbee78db4312c5782e33dc9f618b08bd8239ffbd4780c757d49faf9fa1b7d4a44290fed23fa46b77dde8dacb81951bb9eba45716878290313bab8c1f099b6edb1ec1133dd04a331ac26fcea6b703ef90a41eb227026904b640b04eba2e3e00e1cdf5075f628b8268c5ede15614f2088ad3b3aa1dcdef829d6b5848b58c04672e1ae39c6459f33be933d7603dcf01fa5585543de2a017cee33ce62cc6239601254d82155b4020a543cbba31f423058fe082b34e078d0e486b8dcb6daf62402b6205660260a20d7f3da2219a8fa33e7faaf6e0f4a6472b13472addcc475636c2b711f1cf55e634cdcab9f4f03409445b1f1fb2108cfe65c0614799c945ea3be85d0a759797b356ab35cbdc693e1e8d89c65f13cb46d0eef8598efafe9678f3eb793536ca87a9d4310a48c6cedf062b271f9b1a265760a23150c24a9ae362acdb2dc40ba9f077daca4705b270399802b536a9e33ba9a07f4ea633a9682303952db8f56ace4cb969cf30841474b4b2542c32534b5961b21ca59104c8d8564fe7e1fa7e4f113dd0a2b20e12813d7f85981a6d54803e364cf94d72873a492ccaf73287faa679acdd1da57b4c6ca15b28424e5bb961eb83a5e95d23de267dbf51419e126d47136ec3da8816fa35722af6f12614968f17e671dabb27082621d59a0c8f0de213feffad9aa12b456daba229b76bc884e72eebdbbbc42bd2759f3dc0e98f502f040c4278b3c145a174e4f3a8ca5c147e3085c10d55853af99937e2b958e1c89658d1620aeabaac3298b189ec965c727fbb76a72420d3305138c4376f071e293120e7cccefd4c973c303f3fcf78caeb653916e3d9a73d9829f973a0f09e6b612522ce7ecc75e76cda1038d9ae1c52aff2e52815dd70b1a3c033a4266c97086ed3521d89061d848389df9459eb5ba1cd9ec555a8b070e3eda99ea0370ae463293e77ce1e8070041fd255d10020aa87e6a6acdd8c05d1d3e62b8b26df9939240c50b0c15e0f38421301bf8c92a169cc71c61754e14e5667f37f32eb0e2f6e1f410832f361d9adc3ef0e7863f0d7946204521ff69f177c7dde017223cf383aecb94aaa326f0c70ff9fe61469c24340ca12136d0b8940b11f5f110f245733d42c617a80a127ce8c93276c8418eb1128f3e8b99aff188d2e31e589fee017c0af5d6e644f116cdbf1fb8d35417cdd8bca163deb51bdd6328f5e94310586296ba7d5c560fcd0da4a74dd09748327822e8a54ba84f0799f5db4df7657d8a6b1cd998597e6bd6cd1fa1e8b0a6a9f02ba4193a6a38909a98e3b477e56ce14c30706b68975c948b5dd738ab7e9a019d84839b02b1d1c6a116e8dcf2647b93a78e4954e638d4174f996e5d502580aa04fe933b56b8757aa22736aa4d956ebda15dc8a83543ab0e755359400548a84aca2609639cb73c14679306b27205b1947952ee81a2c5cbadbccc3bcbce7ca4ab2cd5c018696a62b262dd84869a4ddc663c3cb03d163375936dbdf53d8d81984932a1b4859f8c2f09267130279a3ab5d8e69b2f7a026d5fcb89aacb33e597743359119df2c67e255833afd18a01dddf2c48f4db71b1a4531e7a4268a03d4f01915f92ee3c7cc5405e6cdee3fcfbfc692ac65d0db0052fb135652748a0861021f195283581a0c05436d649102cd4edc433ec671c15fbce7d460c6787b77eeba970d54928fc1a1eeaed02c8f74b112d1d313cac8d6a521504fead8ede4752bf067f20426f0e7fe5662699ac707a778d29bbec6ac703c244ed975332890ff3853368033f1382c50f2f0068015a687fe0e2924d3ad54f96309eb8f54f9b07f36f2a0fa47c5d97ff0c2f98857c2a580a31355618256853592e756ec843d109a7cb68d43067524d043395ebe181a25cbdc474c7f915979679af0f5e40440b0d668b213b17f414759a488f5f357a229310c6af97704d944bbd5a28c87f2477e083003e26c86c28e812d3db23d70f4e7a952f60f3d7d2cf3103946e4a71e8c6ac2f71c5abb9786f9cee91c86026eefa2cbedeaf10f211322a588705454ca4082fe5a742db00c423be79da8499236f8f7da1c1fb01d26b04a558702eb8fba770451ba87650aa5e9533b5fa640b97a2692b3fb83c91ea3d1b0867fd513df3b94e592b1e3619e79083026efad5883037e700f560677f9873ab7b1921a3bb5e403906e619e28017"}) (async)
ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000000)={0x0, 0x100}) (async)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1}) (async)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f00000004c0)={0xffffff4c, 0x2, "e3143d958ce957cce091252ddfee1dac87716d389ede44147c74baecc8ab9a45e0fdfce20b7ea1c56f66e603320e4b6e7db42647041c4fdc9843af606c729ecc8186dc173715ccb6d6ea3fcbddcf279b522c3ca558d58e06b6ce7d0fbb41f65cda54bcd83bd67506f733c5c50fc1313cd2388360a53aef61a608692d149a9beff7b06a21ca42380e8b338ea0db624aff7a2b336cb8ac1b110c8d15475e20defb33af97955484b4d8d05317381143c9b7adbbc441bb6140b274bd72b7d242a593d4188ffcbdb984de3ebaeef31ad05e87bf935cbb7ad860176cad45a17eb154fc012ce4c4fc1292f67384be76ed9a36f87262adf26f5c9e55505121f8bbc5722a"}) (async)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"}) (async)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) (async)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000140)={0x0, r7}) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_tracing={0x1a, 0x5, &(0x7f0000001740)=ANY=[@ANYBLOB="18000000fbffffff0061490bdd9dbf004b0000004200000095000000000000009500006fead8d80031f4d97b7e8adc3955ab61bf0bcfa91795feee1e9f16880a32f8108791af410a3f3b650f"], &(0x7f0000000080)='GPL\x00', 0x6, 0x26, &(0x7f0000000200)=""/38, 0x41000, 0x5, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x4, 0xf, 0xf78e, 0x9}, 0x10, 0x11267, 0xffffffffffffffff, 0x0, &(0x7f0000000640)=[r7]}, 0x80)

[ 1566.842055][ T1810] binder: 1808:1810 ioctl 400c620e 20000400 returned -22
01:36:59 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0})

01:36:59 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0})

01:36:59 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)

01:36:59 executing program 5:
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000080))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080))
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000140)={{0x3, 0x2, 0x80000000, 0x0, 0x4}, 0x7, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x5, 0x100200000000, 0x69, 0x100})
ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000040))
syz_open_dev$mouse(&(0x7f0000000240), 0x4, 0x4400)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x19, 0x41)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3)
r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x10000)
ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f00000000c0)=0x7)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)

[ 1566.892914][ T1816] binder: 1813:1816 ioctl 40046205 0 returned -22
01:36:59 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0})

01:36:59 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0})

01:36:59 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
socket$l2tp6(0xa, 0x2, 0x73)

01:36:59 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0})

01:36:59 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0})

[ 1566.988479][ T1833] binder: 1819:1833 ioctl 400c620e 20000400 returned -22
[ 1567.019598][ T1841] binder: 1832:1841 ioctl 40046205 0 returned -22
01:36:59 executing program 5:
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000080)) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080))
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000140)={{0x3, 0x2, 0x80000000, 0x0, 0x4}, 0x7, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x5, 0x100200000000, 0x69, 0x100}) (async)
ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000040)) (async)
syz_open_dev$mouse(&(0x7f0000000240), 0x4, 0x4400)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x19, 0x41)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) (async)
r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x10000)
ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f00000000c0)=0x7)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)

01:36:59 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x1, 0x1f, 0x1, 0x1000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x9, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x0, 0x6, 0xb, 0xa, 0x50, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x101, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1]}, 0x80)

01:36:59 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0})

[ 1567.130953][ T1843] binder: 1842:1843 ioctl 400c620e 20000400 returned -22
01:36:59 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
socket$l2tp6(0xa, 0x2, 0x73)

01:36:59 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0})

01:36:59 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0})

01:36:59 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x1, 0x1f, 0x1, 0x1000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x9, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x0, 0x6, 0xb, 0xa, 0x50, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x101, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1]}, 0x80)

[ 1567.170717][ T1855] binder: 1845:1855 ioctl 40046205 0 returned -22
[ 1567.173272][ T1853] binder: 1847:1853 ioctl 40046205 0 returned -22
01:36:59 executing program 5:
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f0000000080)) (async, rerun: 32)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 32)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)) (async)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000140)={{0x3, 0x2, 0x80000000, 0x0, 0x4}, 0x7, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x5, 0x100200000000, 0x69, 0x100}) (async)
ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000040))
syz_open_dev$mouse(&(0x7f0000000240), 0x4, 0x4400) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (rerun: 64)
r2 = syz_open_dev$mouse(&(0x7f0000000280), 0x19, 0x41)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(r2, 0x54a3) (async)
r3 = syz_open_dev$mouse(&(0x7f0000000000), 0x1, 0x10000)
ioctl$USBDEVFS_RELEASE_PORT(r3, 0x80045519, &(0x7f00000000c0)=0x7) (async)
ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04)

01:36:59 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0})

01:37:00 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0})

01:37:00 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x141140, 0x0)

01:37:00 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0})

01:37:00 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x1, 0x1f, 0x1, 0x1000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x9, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x5}, @alu={0x4, 0x0, 0x6, 0xb, 0xa, 0x50, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @btf_id={0x18, 0x3, 0x3, 0x0, 0x3}], &(0x7f0000000080)='syzkaller\x00', 0x101, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, r1]}, 0x80)

[ 1567.278508][ T1868] binder: 1858:1868 ioctl 400c620e 20000400 returned -22
[ 1567.301571][ T1867] binder: 1866:1867 ioctl 40046205 0 returned -22
01:37:00 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0xb, 0x1}}, 0xc2, 0x1, &(0x7f0000000000)="91764afa4c6908458d8c4fe9686864bc34f1fc53ab6edf03e8b02a16d11f2d9134bea8ef51e26d89bdba52b216e426d276af0a6df0ac5b1755ce9bf310d82f0cc17b1a050e0e16699fc7a81da4398cade8efa7d4c95eaf0dc4233b3cd058303d6a404ab01618dffe19057791627d4a94a52d106faa34d4eed683c442ca5156af33543e6721fc1f6bcdf83eab3912773ad731490504cfa684f5bf8fa3413d45580443d8f6e6000fe5d44136bad4cc2850f45563a8fc7c295e25124446e27002caf39a"})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180))

01:37:00 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x141140, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x141140, 0x0) (async)

01:37:00 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0})

01:37:00 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0})

01:37:00 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0})

01:37:00 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x1, 0x1f, 0x1, 0x1000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

[ 1567.392835][ T1879] binder: 1876:1879 ioctl 400c620e 20000400 returned -22
[ 1567.421746][ T1882] binder: 1880:1882 ioctl 40046205 0 returned -22
01:37:00 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x141140, 0x0)

01:37:00 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0})

01:37:00 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0xb, 0x1}}, 0xc2, 0x1, &(0x7f0000000000)="91764afa4c6908458d8c4fe9686864bc34f1fc53ab6edf03e8b02a16d11f2d9134bea8ef51e26d89bdba52b216e426d276af0a6df0ac5b1755ce9bf310d82f0cc17b1a050e0e16699fc7a81da4398cade8efa7d4c95eaf0dc4233b3cd058303d6a404ab01618dffe19057791627d4a94a52d106faa34d4eed683c442ca5156af33543e6721fc1f6bcdf83eab3912773ad731490504cfa684f5bf8fa3413d45580443d8f6e6000fe5d44136bad4cc2850f45563a8fc7c295e25124446e27002caf39a"}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180))

01:37:00 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0})

[ 1567.504317][ T1894] binder: 1888:1894 ioctl 40046205 0 returned -22
[ 1567.512417][ T1892] binder: 1884:1892 ioctl 400c620e 20000400 returned -22
01:37:00 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x300, 0x0})

01:37:00 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x1, 0x1f, 0x1, 0x1000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

[ 1567.542305][ T1896] binder: 1893:1896 ioctl 40046205 0 returned -22
01:37:00 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0})

01:37:00 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0})

01:37:00 executing program 0:
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xc000000000000000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000280)=&(0x7f0000000080))
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000000)=0x7c)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1, 0x3, 0x1f, "983e7c5d72127b21d71b0c26601ca7012582bc4d50de3d8ba833817661518d99df0774e2906847fc63dc09342a8da4189fe98188eb8370bb82c8a7294dfaf277", "f396b98b8367b7b14f0fb4f1d8dd643c5f125010b75c283f63ede27e8512b37c4323aee335b60561051208bc429fdeca5872f4cd5458e6f8d7468804fdfc315a", "f7ce0258285c9e000c0ce116928946c893c7448e6ca033d14be7e56f649759a2", [0xb14, 0x9]})

01:37:00 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0xb, 0x1}}, 0xc2, 0x1, &(0x7f0000000000)="91764afa4c6908458d8c4fe9686864bc34f1fc53ab6edf03e8b02a16d11f2d9134bea8ef51e26d89bdba52b216e426d276af0a6df0ac5b1755ce9bf310d82f0cc17b1a050e0e16699fc7a81da4398cade8efa7d4c95eaf0dc4233b3cd058303d6a404ab01618dffe19057791627d4a94a52d106faa34d4eed683c442ca5156af33543e6721fc1f6bcdf83eab3912773ad731490504cfa684f5bf8fa3413d45580443d8f6e6000fe5d44136bad4cc2850f45563a8fc7c295e25124446e27002caf39a"})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000140)={{{0xb, 0x1}}, 0xc2, 0x1, &(0x7f0000000000)="91764afa4c6908458d8c4fe9686864bc34f1fc53ab6edf03e8b02a16d11f2d9134bea8ef51e26d89bdba52b216e426d276af0a6df0ac5b1755ce9bf310d82f0cc17b1a050e0e16699fc7a81da4398cade8efa7d4c95eaf0dc4233b3cd058303d6a404ab01618dffe19057791627d4a94a52d106faa34d4eed683c442ca5156af33543e6721fc1f6bcdf83eab3912773ad731490504cfa684f5bf8fa3413d45580443d8f6e6000fe5d44136bad4cc2850f45563a8fc7c295e25124446e27002caf39a"}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000180)) (async)

01:37:00 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x500, 0x0})

[ 1567.611123][ T1900] binder: 1898:1900 ioctl 400c620e 20000400 returned -22
[ 1567.642256][ T1908] binder: 1902:1908 ioctl 40046205 0 returned -22
01:37:00 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x1, 0x1f, 0x1, 0x1000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

01:37:00 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0})

01:37:00 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x48000000, 0x0, 0x0, 0x0, 0x0})

01:37:00 executing program 0:
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xc000000000000000)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000280)=&(0x7f0000000080)) (async)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async, rerun: 32)
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000000)=0x7c) (rerun: 32)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1, 0x3, 0x1f, "983e7c5d72127b21d71b0c26601ca7012582bc4d50de3d8ba833817661518d99df0774e2906847fc63dc09342a8da4189fe98188eb8370bb82c8a7294dfaf277", "f396b98b8367b7b14f0fb4f1d8dd643c5f125010b75c283f63ede27e8512b37c4323aee335b60561051208bc429fdeca5872f4cd5458e6f8d7468804fdfc315a", "f7ce0258285c9e000c0ce116928946c893c7448e6ca033d14be7e56f649759a2", [0xb14, 0x9]})

[ 1567.749516][ T1917] binder: 1911:1917 ioctl 400c620e 20000400 returned -22
[ 1567.777774][ T1921] binder: 1920:1921 ioctl 40046205 0 returned -22
01:37:00 executing program 4:
bpf$MAP_CREATE(0x0, 0x0, 0x0)

01:37:00 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x600, 0x0})

01:37:00 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

[ 1567.817420][ T1923] binder: 1920:1923 ioctl 40046205 0 returned -22
01:37:00 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x4c000000, 0x0, 0x0, 0x0, 0x0})

01:37:00 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0})

01:37:00 executing program 0:
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xc000000000000000) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000280)=&(0x7f0000000080))
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f0000000000)=0x7c) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0x1, 0x3, 0x1f, "983e7c5d72127b21d71b0c26601ca7012582bc4d50de3d8ba833817661518d99df0774e2906847fc63dc09342a8da4189fe98188eb8370bb82c8a7294dfaf277", "f396b98b8367b7b14f0fb4f1d8dd643c5f125010b75c283f63ede27e8512b37c4323aee335b60561051208bc429fdeca5872f4cd5458e6f8d7468804fdfc315a", "f7ce0258285c9e000c0ce116928946c893c7448e6ca033d14be7e56f649759a2", [0xb14, 0x9]})

[ 1567.865179][ T1935] binder: 1932:1935 ioctl 400c620e 20000400 returned -22
01:37:00 executing program 4:
bpf$MAP_CREATE(0x0, 0x0, 0x0)

01:37:00 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x700, 0x0})

01:37:00 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x1) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:00 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0})

[ 1567.928083][ T1942] binder: 1938:1942 ioctl 40046205 0 returned -22
01:37:00 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x68000000, 0x0, 0x0, 0x0, 0x0})

01:37:00 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xff00, 0x0})

01:37:00 executing program 0:
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000140)={0x549, &(0x7f0000000040)="bc6d1093282e548b2432983a6d1b69961130cede314cde27b2f1041f294bd659dc1946b379d6afe3228b4f3d0292e7fa033509baeeb4fc8561c5699ee0f2b9e29c282082180af9eba78c2f20149f417ab2cb3b158404b90e84247fa61532c42eab36bb805769e37b1e5e342e0982a3a19a306bdee36500964d1e18ef9aa37eaede6179d367976b97fd0db4270f9cd26f65d4dba5c53416b9531a9c851c250ed9d1652bc509993cc2a14a1a96f1f528d3f557384980c791690a28c35b7384391fb6828dfe43c5655594375139171527a0cb"})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:00 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x1)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
syz_open_dev$mouse(&(0x7f0000000000), 0x10000, 0x1) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)

[ 1568.013629][ T1951] binder: 1944:1951 ioctl 400c620e 20000400 returned -22
[ 1568.042768][ T1959] binder: 1952:1959 ioctl 40046205 0 returned -22
01:37:00 executing program 4:
bpf$MAP_CREATE(0x0, 0x0, 0x0)

01:37:00 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0})

01:37:00 executing program 0:
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000140)={0x549, &(0x7f0000000040)="bc6d1093282e548b2432983a6d1b69961130cede314cde27b2f1041f294bd659dc1946b379d6afe3228b4f3d0292e7fa033509baeeb4fc8561c5699ee0f2b9e29c282082180af9eba78c2f20149f417ab2cb3b158404b90e84247fa61532c42eab36bb805769e37b1e5e342e0982a3a19a306bdee36500964d1e18ef9aa37eaede6179d367976b97fd0db4270f9cd26f65d4dba5c53416b9531a9c851c250ed9d1652bc509993cc2a14a1a96f1f528d3f557384980c791690a28c35b7384391fb6828dfe43c5655594375139171527a0cb"})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000140)={0x549, &(0x7f0000000040)="bc6d1093282e548b2432983a6d1b69961130cede314cde27b2f1041f294bd659dc1946b379d6afe3228b4f3d0292e7fa033509baeeb4fc8561c5699ee0f2b9e29c282082180af9eba78c2f20149f417ab2cb3b158404b90e84247fa61532c42eab36bb805769e37b1e5e342e0982a3a19a306bdee36500964d1e18ef9aa37eaede6179d367976b97fd0db4270f9cd26f65d4dba5c53416b9531a9c851c250ed9d1652bc509993cc2a14a1a96f1f528d3f557384980c791690a28c35b7384391fb6828dfe43c5655594375139171527a0cb"}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)

01:37:00 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0})

01:37:00 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x1, 0x1f, 0x1, 0x1000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

01:37:00 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x6c000000, 0x0, 0x0, 0x0, 0x0})

[ 1568.154928][ T1971] binder: 1967:1971 ioctl 40046205 0 returned -22
[ 1568.158457][ T1968] binder: 1962:1968 ioctl 400c620e 20000400 returned -22
01:37:00 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x800, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180))
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0xff, 0x1, 0x7ff, 0x50, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x8000, 0x400, 0x80000000}})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:00 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xff00000000000000, 0x0, 0x0})

01:37:00 executing program 0:
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000140)={0x549, &(0x7f0000000040)="bc6d1093282e548b2432983a6d1b69961130cede314cde27b2f1041f294bd659dc1946b379d6afe3228b4f3d0292e7fa033509baeeb4fc8561c5699ee0f2b9e29c282082180af9eba78c2f20149f417ab2cb3b158404b90e84247fa61532c42eab36bb805769e37b1e5e342e0982a3a19a306bdee36500964d1e18ef9aa37eaede6179d367976b97fd0db4270f9cd26f65d4dba5c53416b9531a9c851c250ed9d1652bc509993cc2a14a1a96f1f528d3f557384980c791690a28c35b7384391fb6828dfe43c5655594375139171527a0cb"}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder0\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

[ 1568.182748][ T1974] binder: 1967:1974 ioctl 40046205 0 returned -22
01:37:01 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0})

01:37:01 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x1, 0x1f, 0x1, 0x1000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

01:37:01 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x74000000, 0x0, 0x0, 0x0, 0x0})

[ 1568.292482][ T1986] binder: 1982:1986 ioctl 400c620e 20000400 returned -22
01:37:01 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0})

01:37:01 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x800, 0x0) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async, rerun: 32)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) (rerun: 32)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180))
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0xff, 0x1, 0x7ff, 0x50, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x8000, 0x400, 0x80000000}})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

[ 1568.333307][ T1989] binder: 1985:1989 ioctl 40046205 0 returned -22
01:37:01 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000040)=0x800)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4})
timerfd_gettime(r4, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:01 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x1, 0x1f, 0x1, 0x1000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

01:37:01 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0})

01:37:01 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x7a000000, 0x0, 0x0, 0x0, 0x0})

01:37:01 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0})

[ 1568.412783][ T2001] binder: 1997:2001 ioctl 400c620e 20000400 returned -22
01:37:01 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0})

01:37:01 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x800, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180))
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0xff, 0x1, 0x7ff, 0x50, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x8000, 0x400, 0x80000000}})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x800, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
ioctl$VHOST_SET_LOG_BASE(r2, 0x4008af04, &(0x7f00000001c0)=&(0x7f0000000180)) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0xff, 0x1, 0x7ff, 0x50, @mcast2, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x8000, 0x400, 0x80000000}}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)

01:37:01 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x0, 0x1f, 0x1, 0x1000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

[ 1568.481637][ T2004] binder: 2002:2004 ioctl 40046205 0 returned -22
[ 1568.517297][ T2017] binder: 2014:2017 ioctl 400c620e 20000400 returned -22
01:37:01 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x877e0000, 0x0, 0x0, 0x0, 0x0})

01:37:01 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000040)=0x800)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4})
timerfd_gettime(r4, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000040)=0x800) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4}) (async)
timerfd_gettime(r4, &(0x7f0000000080)) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)

01:37:01 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0})

01:37:01 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x0, 0x0, 0x1, 0x1000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

01:37:01 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0})

[ 1568.624115][ T2021] binder: 2020:2021 ioctl 40046205 0 returned -22
01:37:01 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0})

01:37:01 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0)

01:37:01 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x0, 0x0, 0x0, 0x1000, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

01:37:01 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x8f7e0000, 0x0, 0x0, 0x0, 0x0})

[ 1568.670988][ T2043] binder: 2029:2043 ioctl 400c620e 20000400 returned -22
01:37:01 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000040)=0x800)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4})
timerfd_gettime(r4, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000040)=0x800) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4}) (async)
timerfd_gettime(r4, &(0x7f0000000080)) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)

01:37:01 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0})

01:37:01 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

01:37:01 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0})

01:37:01 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0)

01:37:01 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x907e0000, 0x0, 0x0, 0x0, 0x0})

01:37:01 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0})

[ 1568.850738][ T2066] binder: 2065:2066 ioctl 400c620e 20000400 returned -22
01:37:01 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

01:37:01 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0})

01:37:01 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1}) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0)

01:37:01 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x1802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x1}, 0x10)

01:37:01 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

01:37:01 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0xff000000, 0x0, 0x0, 0x0, 0x0})

01:37:01 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x300, 0x0})

[ 1568.987309][ T2095] binder: 2091:2095 ioctl 400c620e 20000400 returned -22
01:37:01 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x1802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x1}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x1802, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x1}, 0x10) (async)

01:37:01 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0})

01:37:01 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x500, 0x0})

01:37:01 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x0, 0x0, 0x0, 0x1000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

01:37:01 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0})

[ 1569.124490][ T2116] binder: 2103:2116 ioctl 400c620e 20000400 returned -22
01:37:01 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0})

01:37:01 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002400)={0x6, 0x0, [{0x1000, 0x1000, &(0x7f0000000140)=""/4096}, {0x3000, 0xfb, &(0x7f0000001140)=""/251}, {0x100000, 0x59, &(0x7f0000002500)=""/89}, {0x3004, 0xd6, &(0x7f0000001240)=""/214}, {0xf000, 0x7f, &(0x7f0000001340)=""/127}, {0x2000, 0x1000, &(0x7f0000001400)=""/4096}]})

01:37:01 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x0, 0x0, 0x0, 0x1000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48)

01:37:01 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x1802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x1}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x1802, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x1}, 0x10) (async)

01:37:01 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x600, 0x0})

01:37:01 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0})

01:37:02 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0})

[ 1569.252614][ T2129] binder: 2126:2129 ioctl 400c620e 20000400 returned -22
01:37:02 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x0, 0x0, 0x0, 0x1000, 0x1}, 0x48)

01:37:02 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async, rerun: 32)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002400)={0x6, 0x0, [{0x1000, 0x1000, &(0x7f0000000140)=""/4096}, {0x3000, 0xfb, &(0x7f0000001140)=""/251}, {0x100000, 0x59, &(0x7f0000002500)=""/89}, {0x3004, 0xd6, &(0x7f0000001240)=""/214}, {0xf000, 0x7f, &(0x7f0000001340)=""/127}, {0x2000, 0x1000, &(0x7f0000001400)=""/4096}]}) (rerun: 32)

01:37:02 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0})

01:37:02 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x700, 0x0})

[ 1569.328477][ T2135] binder: 2134:2135 ioctl 40046205 0 returned -22
01:37:02 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040))
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000240))
mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x2010, r0, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3})
ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"])
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x10000, 0x200041)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x3, <r5=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r5}, 0x4)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x3, 0x7fff, 0x0, 0x9, 0x3, 0x1, "18eecfe8ad2dd9f3d729e9c48ff5bcc23c0d3c979a62d9a40488e2be1e2893c926bad6e1f583a5381a5613d4fa87dfe0c88c875faa908df521652b938117edff", "eba2c681d946f47174e1c9c80ce723f8722fa1f14277ccde98b6f5210d9b1e68b9d566d495afdd215118a1b42edce7f5fdf5c6bdedfafaa584a6445d6d0c3903", "b9506b5bc7ead35ccd6119db5086da2d5602882fdfdc77e6e22eaf5ea8a61fc1", [0x7dde, 0xffffffffffffffff]})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0x40046208, 0x0)

01:37:02 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0})

[ 1569.384995][ T2151] binder: 2148:2151 ioctl 400c620e 20000400 returned -22
01:37:02 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0})

01:37:02 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0})

[ 1569.442112][ T2158] binder: 2155:2158 ioctl 40046205 0 returned -22
01:37:02 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xff00, 0x0})

01:37:02 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0})

01:37:02 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000002400)={0x6, 0x0, [{0x1000, 0x1000, &(0x7f0000000140)=""/4096}, {0x3000, 0xfb, &(0x7f0000001140)=""/251}, {0x100000, 0x59, &(0x7f0000002500)=""/89}, {0x3004, 0xd6, &(0x7f0000001240)=""/214}, {0xf000, 0x7f, &(0x7f0000001340)=""/127}, {0x2000, 0x1000, &(0x7f0000001400)=""/4096}]})

[ 1569.511668][ T2172] binder: 2164:2172 ioctl 400c620e 20000400 returned -22
01:37:02 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0})

01:37:02 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0})

[ 1569.568224][ T2177] binder: 2166:2177 ioctl 400c620e 20000400 returned -22
01:37:02 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0})

01:37:02 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0})

01:37:02 executing program 5:
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x9)

[ 1569.624502][ T2180] binder: 2179:2180 ioctl 40046205 0 returned -22
[ 1569.657415][ T2189] binder: 2181:2189 ioctl 400c620e 20000400 returned -22
01:37:02 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040))
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000240))
mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x2010, r0, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3})
ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000d00)=ANY=[@ANYBLOB="8e0a000099309990913b3188bf013c9904134fb79df75f6c04e9782fe85aa2da799785d80f0c6e2df95567379df9dee7ffdec52d9337f15e58180ff038534fe91b0361e9ce51ba6b6bfae8b5632722fe7f1e8bf4fc91108959eeca17561024bb181af7bf78848b66c5538de545f1380da1d7979b289fc6f82aede334cba309dba3660d854e5f8b8c83fb339a9d7e03d9edd2aed6a70bdc774da315edfdde5469811b9c41cdff40dc5de97c8bfea606727cfbd55800bcd162a133b66ae87e8a6a86c32dba51245a3a63cbce3144fe3a8b03a41942cc480aa3d7e693f0ba1363fadf4b085f818d29073e2b6396aa6664efa40b66b01cd6e5e43b6584d47c36116c2e5755964989e5ddfb02da3a1bcdf57024b2ecec9d8cb5085e951bca71806097e292f82603b0cd6d3fe48c10e9515c4ab523e79bc6562e7abfa7902cd153ed96e6093591d6daa677f26cdbdc082f6d6c751ee5cb8814fffe74638cda11d64f4bf005c4bc60e1ec936b261d031dac332e675d87aa27e916c0958e705d6989619f9ac41ff069b7e32bae767fd77b8f418f1aa33060c7756606327d961a166d916a7b94b0918d6562f8216e2ee1bcf1992567a71f76a15220c95dc0e5a322b471a5fab21c05423b838792ccf043bdec99e1e1e05d51fd87e98b9fe70dac595f958825f1810013bcbbde6fcf1dcf6c38e7b8ed888b4c4809ad0b80a0edcfab11adb54429711937b751a5fdb039afb650bab03fb6189360ddb89ed8a6316919df1a76579a96a1f0e30092573602409d812ab402ff75aeed4aa7215f94084744968cc2de68851f289f49c2da7dd492e69df391007ae67fb95dad19b586d9d4c2d9e4fc4628e27efc22a49039a6eb4cdc4d70535f40bc62b3bf4df07ce455065ebf86acc5ed3697b796160f15fdc50e574771617d60f1b2275a153c43be67b82acb795d937c8cffb181e1d1001b32f942396c10890789ad239defbbe6ec8585f1e0acb1405e6798fb2db9e51ceaa62b945bc1127c914e44a50934ae757501bbe6c6c73d48ee66abb089146d87d281ab2a5d39825bd4c7290bf034098184bd1badc0a169d489c9594c89e60af5fd2cec76b18429b0198272d60919f2d8b41a212d40bb40746d716ab7bb171b69a6d87567536b1e1b71dc63eafa87d778eb26bd53017c0a000b5ef63b1751e54dc32ab2aea98630ce4519a2f60e8384275e5151c9f70a22e8551030099e3aa91c8fc0f5a1b74a09af3215800bb22b032555705dcd3de453e55767bf13802d8dd509f53f57bb0a3ccfac89fdede511d6b7a529966144de576ab3f2c88dced208a81e9a6fe79737ee7b78481413b07f56358df644d092845c164ec3e98e0f315be103efa231240f140fc8088e8111ed4e748d470fb4f6fa5cd79c82b7fc8834e325f44c7c4b2856e2e0784e2d21178f46eb1eed9818bcc8b4170c66558f6de85677b066790c47e60810f3006aab6c5243cbdaa04ea0e8567edccc1fc5ad5990acbfc8f8d80dc7229c21d2bf6ef1a146b703775331d5fddc910f9d71f020a5d9f6a796bb93f53bb969928c58a7ffe922d2863a93d5c45b5fca5a3f5e515a48b38134610e08a283a84ad901e9710ec13c12504df8dad4bc2ea2a345d405630b44833928950edef7f1e7525a055409baa28d21dd503ad6e37ee9a554ccb19c37a8eb538b380f3455d5ded15133ab253ae7878f82f35d48cb937d175ef64437b841b9fc21dad29141e5e49dd2b076a9dc00ad3f370a4e62b7d0d401455fbf259720024c399c9f56255777bcc84fa91212c478a18cac7648c485e95e6c7700af02e990611d1830d184cd51bba0b989f37e29cf42fd35575ab9f82766778bfb9764526f2d720535a962fad30f2a11c4cee2070521c084df9ed5046a8b887e70f7050ece8985227d8f0e7f3765d7c67ce054ae5b7b64b1695496a48df35ce5a430e5f417cfb227098748850fe4dcb1355a743a8c364f823c495dc41db74a6ba02c26dda6b928c2602d3fda4a1380a9be0040e3bd6e60e5e9105b02f1f2b151416b5a9ff0504c8fffe35c144c2ebff7c3c020bbd04aa5dd01073f78bd34e2823c4960e304164f77951492d442b02cde01f762bc660f6d7ea70f7694cb3b0492c3f7d769d5b7347761096df49f818a424da5366ed8a876d0fee3347cc22bae91dc77e41a6d973cfb930d7fb20162a6818bb12e581e1e5861e8c256e1e39f7f8a489924d90bd331a0667c69cd07ef6f060d0c85b3c6fd7581ba2ba3bed16f91e20d4d02c52df96e3dcf07f5b7e4e3dab6a087864bf9ec771d3a3a57c39643cc2d55eac9aa260be1ddbeb03a9fb581f3c690118329c0f27001c7f2dec661dc03a15f8fea20fa552e278f036cfae5f076b85c4273dde01d0c5a985d09d0eae78470c964dae08a542af3db24c9c4947d4b58502a8e2d252be322535a42276e8c8d10510b73a2f03158ae7f85b08951bf1d5390fd867334510e2a4b51433478888432410d3ce5f58fa47c5d9f015de72641599b7e99648bb2076e4d45875699f44d3cdf844d22c164e0860553b8134e145e59b7165f6ba9ef8a99445ea1fdc96059ebb843f2e85540f82af32aa83a7fb550f534249ad21942dd7f021e4d3dcf4d4f2f2ca52d8700009914d8df831b7a9abe3bf41f127b67b9a5e585938ddf15515adb65a37117ad1704a8eebf07a97f37fd5521d41398ec2340393777a962062d0dee5ef563f25732f8a5aa2aecb1d68cedc8704297ef42bad90dc66408d7856e6fe6b061504166653f8ae9a7dd4136c2ad01511d13355bef06934772c957b7f163ef89361ea5fcd852eda99bdf520b4a3dc26ac64600d840b395f7dc49cd419b2abe80b6db2c2c5c146f588a2c8d48f83243332cf1f95456758e8cb8a1f350987882c5f61e8ab4d8420752aa59d38458ec11fcff401d6d6741e28d44cb764731969ba317fa6481f96620aed733e4adf53e5be21bff59f7c3bea03a69be7476844714ed0b8e6f894eba3f896f12edbe598f9cd46313053076d197f80d5c4647292c9bb3d83a7f12a4b539f305468f41bcd2e58c94fb8f350579ed6a45a0ea49fec145ef46ad1f6b1ec3a7b5a045b05275341afae4a92af0ccb3b2d14ee8be21686efb167308c4e9b0f8a814bb1cedba60240f6e37ad492d04000000416a748402f003eb1bc839403dcdc54382117ed9aab8f3010c5fde976cd91adf8761402f0fec9d5254e640550667439864d62fbeb8548700f394bb4a39b7adcc625b1775cc69fba80d0c7c4e7f4950b2567c36719bf0c8ad532344b598fa956195d2c75f12683e1c70a2314fc615c0673dce1c35658527992a8b2eb59023b272f20cab6d322880681e01f5e99c3f1c3f3cc7a59bb7dde392876f1a2291bd088510c6ace10c966f212285d46910fcd7eab020ab5aa683e3b11344e46e9d3ef998940210ef9aa78a297f7c51d02d306c17137f20a099f4f66a8918c761499ec6c502de14fda1a560c0276baa2b89e18b92556a6259e0a4621b28ee707d8f957d3ca29a313e153b89b2df4e5b6132867239cceae9ab825711d7ffb4b45d8176043dece517abe79816e964ffb61090128444cc3838cd1cd85cdfe94428fb2e142ea8a13b5c9e2d9f04e95034fa2189c4a054aaa391d922cebb19bb42686b541291c27bad3428d48b7affcbf8201c0786a43140e7dd129dd4d20462717a71025b0d9db10b10b8602305de7457b88bcaff7c3d9e7f54a49f765bad5918554c5e2acbd4e12f183d133aa2dab11124f365980fb2dee44a04ce1d936f6140f23baaf38a1cb62668dcf14126fbac77c6ded5bdecd0cb79af052ef5fc84d1a904fc5f9c49a796ac1dd40b8ab99af6580f692c6b7f3a169e522c601d85932177959b24479aff3fb19147360436fa58cddb6332d0704d806970e7ee2e84979bd83240c2bb663dba796550d5393d8fe53a449e3317be582bbc6f7114cb84"]) (async)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x10000, 0x200041)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x3, <r5=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r5}, 0x4) (async)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x3, 0x7fff, 0x0, 0x9, 0x3, 0x1, "18eecfe8ad2dd9f3d729e9c48ff5bcc23c0d3c979a62d9a40488e2be1e2893c926bad6e1f583a5381a5613d4fa87dfe0c88c875faa908df521652b938117edff", "eba2c681d946f47174e1c9c80ce723f8722fa1f14277ccde98b6f5210d9b1e68b9d566d495afdd215118a1b42edce7f5fdf5c6bdedfafaa584a6445d6d0c3903", "b9506b5bc7ead35ccd6119db5086da2d5602882fdfdc77e6e22eaf5ea8a61fc1", [0x7dde, 0xffffffffffffffff]})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0x40046208, 0x0)

01:37:02 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0})

01:37:02 executing program 4:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040))
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000240))
mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x2010, r0, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3})
ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"])
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x10000, 0x200041)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x3, <r5=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r5}, 0x4)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x3, 0x7fff, 0x0, 0x9, 0x3, 0x1, "18eecfe8ad2dd9f3d729e9c48ff5bcc23c0d3c979a62d9a40488e2be1e2893c926bad6e1f583a5381a5613d4fa87dfe0c88c875faa908df521652b938117edff", "eba2c681d946f47174e1c9c80ce723f8722fa1f14277ccde98b6f5210d9b1e68b9d566d495afdd215118a1b42edce7f5fdf5c6bdedfafaa584a6445d6d0c3903", "b9506b5bc7ead35ccd6119db5086da2d5602882fdfdc77e6e22eaf5ea8a61fc1", [0x7dde, 0xffffffffffffffff]})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0x40046208, 0x0)

01:37:02 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0})

01:37:02 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0})

01:37:02 executing program 5:
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x9)

[ 1569.764351][ T2203] binder: 2194:2203 ioctl 400c620e 20000400 returned -22
[ 1569.767006][ T2204] binder: 2197:2204 ioctl 40046205 0 returned -22
01:37:02 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0})

01:37:02 executing program 0:
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040)) (async, rerun: 64)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) (rerun: 64)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000240))
mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1000000, 0x2010, r0, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3}) (async)
ioctl$HIDIOCGRDESC(r3, 0x90044802, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"]) (async)
r4 = syz_open_dev$loop(&(0x7f0000000080), 0x10000, 0x200041)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000180)={0x3, <r5=>0x0}, 0x8)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000001c0)={r5}, 0x4) (async)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x3, 0x7fff, 0x0, 0x9, 0x3, 0x1, "18eecfe8ad2dd9f3d729e9c48ff5bcc23c0d3c979a62d9a40488e2be1e2893c926bad6e1f583a5381a5613d4fa87dfe0c88c875faa908df521652b938117edff", "eba2c681d946f47174e1c9c80ce723f8722fa1f14277ccde98b6f5210d9b1e68b9d566d495afdd215118a1b42edce7f5fdf5c6bdedfafaa584a6445d6d0c3903", "b9506b5bc7ead35ccd6119db5086da2d5602882fdfdc77e6e22eaf5ea8a61fc1", [0x7dde, 0xffffffffffffffff]})
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0x40046208, 0x0)

01:37:02 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0})

01:37:02 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0})

01:37:02 executing program 5:
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x9)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x9) (async)

[ 1569.890763][ T2214] binder: 2211:2214 ioctl 400c620e 20000400 returned -22
[ 1569.895056][ T2220] binder: 2212:2220 ioctl 40046205 0 returned -22
01:37:02 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0})

01:37:02 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

01:37:02 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x4800000000000000, 0x0, 0x0, 0x0, 0x0})

[ 1569.996203][ T2228] binder: 2224:2228 ioctl 400c620e 20000400 returned -22
01:37:02 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0})

01:37:02 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xb0, 0x0, &(0x7f0000000400)=[@enter_looper, @increfs_done, @increfs, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_handle={0x77682a85, 0x80, 0x2}, @fda={0x66646185, 0x7, 0x1, 0x3e}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}, 0x1000}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/237, 0xed, 0x2, 0xa}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/190, 0xbe, 0x0, 0x15}, @fd}, &(0x7f00000003c0)={0x0, 0x28, 0x50}}}], 0xf1, 0x0, &(0x7f00000004c0)="cd03cd26c802a41b9a50b7270501f59b0cc38af7b0d4b97a74b4aa60161d946b3dfa1203a1f097319786676dbfc9ac9c45ce17a573a0daff180f07e6c8a41bfbe8cd2972ecd527166348b080120790d16bd2f3f37a5579c6d0dd749bae812277abeffa0ce05ec58b36cb0e0261f47a335bff3e1c7aa2d8051fad531944f69161d5c8426d64fe169e2a2858a6b6616b3ec974711b8a7aceb3e8fd3e51148760638c0bab0c4ad135cf63146df3f4fbd45c9fc15208f965f322be93bc7bd9f9a999a157b7e8f73325834a7b5a8087e3fb25363e16e2f5c3b8ddcc30ae53071554fea2728b134414c3761ed8e4a11016cf7c98"})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x14)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000700))
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000600)={{0x2, 0x0, 0x7ec, 0x0, 0x67f2}, 0x3, 0xffffffa6, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0x5, 0x0, 0x10000})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

[ 1570.044428][ T2239] binder: 2232:2239 ioctl 40046205 0 returned -22
[ 1570.046270][ T2239] binder: 2232:2239 ioctl 40046205 0 returned -22
01:37:02 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

01:37:02 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0})

[ 1570.127865][ T2247] binder: 2242:2247 ioctl 400c620e 20000400 returned -22
01:37:02 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x4c00000000000000, 0x0, 0x0, 0x0, 0x0})

[ 1570.164463][ T2250] binder: 2248:2250 ioctl 40046205 0 returned -22
[ 1570.219049][ T2258] binder: 2257:2258 ioctl 400c620e 20000400 returned -22
01:37:03 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))

01:37:03 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xb0, 0x0, &(0x7f0000000400)=[@enter_looper, @increfs_done, @increfs, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_handle={0x77682a85, 0x80, 0x2}, @fda={0x66646185, 0x7, 0x1, 0x3e}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}, 0x1000}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/237, 0xed, 0x2, 0xa}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/190, 0xbe, 0x0, 0x15}, @fd}, &(0x7f00000003c0)={0x0, 0x28, 0x50}}}], 0xf1, 0x0, &(0x7f00000004c0)="cd03cd26c802a41b9a50b7270501f59b0cc38af7b0d4b97a74b4aa60161d946b3dfa1203a1f097319786676dbfc9ac9c45ce17a573a0daff180f07e6c8a41bfbe8cd2972ecd527166348b080120790d16bd2f3f37a5579c6d0dd749bae812277abeffa0ce05ec58b36cb0e0261f47a335bff3e1c7aa2d8051fad531944f69161d5c8426d64fe169e2a2858a6b6616b3ec974711b8a7aceb3e8fd3e51148760638c0bab0c4ad135cf63146df3f4fbd45c9fc15208f965f322be93bc7bd9f9a999a157b7e8f73325834a7b5a8087e3fb25363e16e2f5c3b8ddcc30ae53071554fea2728b134414c3761ed8e4a11016cf7c98"})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0)
openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x14)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000700))
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000600)={{0x2, 0x0, 0x7ec, 0x0, 0x67f2}, 0x3, 0xffffffa6, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0x5, 0x0, 0x10000})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xb0, 0x0, &(0x7f0000000400)=[@enter_looper, @increfs_done, @increfs, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_handle={0x77682a85, 0x80, 0x2}, @fda={0x66646185, 0x7, 0x1, 0x3e}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}, 0x1000}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/237, 0xed, 0x2, 0xa}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/190, 0xbe, 0x0, 0x15}, @fd}, &(0x7f00000003c0)={0x0, 0x28, 0x50}}}], 0xf1, 0x0, &(0x7f00000004c0)="cd03cd26c802a41b9a50b7270501f59b0cc38af7b0d4b97a74b4aa60161d946b3dfa1203a1f097319786676dbfc9ac9c45ce17a573a0daff180f07e6c8a41bfbe8cd2972ecd527166348b080120790d16bd2f3f37a5579c6d0dd749bae812277abeffa0ce05ec58b36cb0e0261f47a335bff3e1c7aa2d8051fad531944f69161d5c8426d64fe169e2a2858a6b6616b3ec974711b8a7aceb3e8fd3e51148760638c0bab0c4ad135cf63146df3f4fbd45c9fc15208f965f322be93bc7bd9f9a999a157b7e8f73325834a7b5a8087e3fb25363e16e2f5c3b8ddcc30ae53071554fea2728b134414c3761ed8e4a11016cf7c98"}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) (async)
openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x14) (async)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000700)) (async)
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000600)={{0x2, 0x0, 0x7ec, 0x0, 0x67f2}, 0x3, 0xffffffa6, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0x5, 0x0, 0x10000}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)

01:37:03 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0})

01:37:03 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0})

01:37:03 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

01:37:03 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x6800000000000000, 0x0, 0x0, 0x0, 0x0})

01:37:03 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x0})

01:37:03 executing program 4:
bpf$MAP_CREATE(0x0, 0x0, 0x0)

01:37:03 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0})

[ 1570.497115][ T2272] binder: 2262:2272 ioctl 40046205 0 returned -22
[ 1570.507055][ T2267] binder: 2265:2267 ioctl 400c620e 20000400 returned -22
01:37:03 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x6c00000000000000, 0x0, 0x0, 0x0, 0x0})

01:37:03 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0xb0, 0x0, &(0x7f0000000400)=[@enter_looper, @increfs_done, @increfs, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000080)={@flat=@weak_handle={0x77682a85, 0x80, 0x2}, @fda={0x66646185, 0x7, 0x1, 0x3e}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000140)={0x0, 0x18, 0x38}}, 0x1000}, @reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000340)={@ptr={0x70742a85, 0x0, &(0x7f0000000180)=""/237, 0xed, 0x2, 0xa}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/190, 0xbe, 0x0, 0x15}, @fd}, &(0x7f00000003c0)={0x0, 0x28, 0x50}}}], 0xf1, 0x0, &(0x7f00000004c0)="cd03cd26c802a41b9a50b7270501f59b0cc38af7b0d4b97a74b4aa60161d946b3dfa1203a1f097319786676dbfc9ac9c45ce17a573a0daff180f07e6c8a41bfbe8cd2972ecd527166348b080120790d16bd2f3f37a5579c6d0dd749bae812277abeffa0ce05ec58b36cb0e0261f47a335bff3e1c7aa2d8051fad531944f69161d5c8426d64fe169e2a2858a6b6616b3ec974711b8a7aceb3e8fd3e51148760638c0bab0c4ad135cf63146df3f4fbd45c9fc15208f965f322be93bc7bd9f9a999a157b7e8f73325834a7b5a8087e3fb25363e16e2f5c3b8ddcc30ae53071554fea2728b134414c3761ed8e4a11016cf7c98"})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x800, 0x0) (async)
openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x14) (async)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000700)) (async)
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000600)={{0x2, 0x0, 0x7ec, 0x0, 0x67f2}, 0x3, 0xffffffa6, 'id1\x00', 'timer0\x00', 0x0, 0x3, 0x5, 0x0, 0x10000})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:03 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000))

01:37:03 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000000)="5a7b0b8db343ca89")
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:03 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0})

01:37:03 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x7400000000000000, 0x0, 0x0, 0x0, 0x0})

01:37:03 executing program 4:
bpf$MAP_CREATE(0x0, 0x0, 0x0)

[ 1570.684554][ T2288] binder: 2282:2288 ioctl 400c620e 20000400 returned -22
[ 1570.712330][ T2287] binder: 2285:2287 ioctl 40046205 0 returned -22
01:37:03 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x9)
read$usbfs(0xffffffffffffffff, &(0x7f0000000280)=""/20, 0x14)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x10, 0xffffffffffffffff, 0x613d)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4})
ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000240))
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x4, 0x3, 0x1e, 0x1, "45741966faf233681964f75cba94fb46795e791a8eec5c51c1a2ec771a4a2e2542e9483e6bf90547e644a39b79dfefcabfd3a741df8c8afd1d24012c98a64681", "0eeb8beea67ccf1de238958dfb271603e07b525ab5290627985d2bab314c73cf", [0x6, 0x7fffffff]})

01:37:03 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000000)="5a7b0b8db343ca89") (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:03 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async, rerun: 64)
ioctl$sock_inet_udp_SIOCINQ(0xffffffffffffffff, 0x541b, &(0x7f0000000000)) (rerun: 64)

01:37:03 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x7a00000000000000, 0x0, 0x0, 0x0, 0x0})

01:37:03 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0})

[ 1570.820978][ T2299] binder: 2298:2299 ioctl 400c620e 20000400 returned -22
01:37:03 executing program 4:
bpf$MAP_CREATE(0x0, 0x0, 0x0)

01:37:03 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000000)="5a7b0b8db343ca89")
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000000)="5a7b0b8db343ca89") (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

[ 1570.870351][ T2311] binder: 2309:2311 ioctl 40046205 0 returned -22
01:37:03 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x802, 0x0) (async)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x9)
read$usbfs(0xffffffffffffffff, &(0x7f0000000280)=""/20, 0x14) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x10, 0xffffffffffffffff, 0x613d)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4}) (async)
ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000240)) (async)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x4, 0x3, 0x1e, 0x1, "45741966faf233681964f75cba94fb46795e791a8eec5c51c1a2ec771a4a2e2542e9483e6bf90547e644a39b79dfefcabfd3a741df8c8afd1d24012c98a64681", "0eeb8beea67ccf1de238958dfb271603e07b525ab5290627985d2bab314c73cf", [0x6, 0x7fffffff]})

01:37:03 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
bpf$MAP_CREATE(0x10, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0)

01:37:03 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x877e000000000000, 0x0, 0x0, 0x0, 0x0})

01:37:03 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0})

01:37:03 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

[ 1570.950319][ T2324] binder: 2322:2324 ioctl 400c620e 20000400 returned -22
01:37:03 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000))

01:37:03 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x9)
read$usbfs(0xffffffffffffffff, &(0x7f0000000280)=""/20, 0x14)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x10, 0xffffffffffffffff, 0x613d)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4})
ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000240))
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x4, 0x3, 0x1e, 0x1, "45741966faf233681964f75cba94fb46795e791a8eec5c51c1a2ec771a4a2e2542e9483e6bf90547e644a39b79dfefcabfd3a741df8c8afd1d24012c98a64681", "0eeb8beea67ccf1de238958dfb271603e07b525ab5290627985d2bab314c73cf", [0x6, 0x7fffffff]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x802, 0x0) (async)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, &(0x7f0000000000)=0x9) (async)
read$usbfs(0xffffffffffffffff, &(0x7f0000000280)=""/20, 0x14) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x10, 0xffffffffffffffff, 0x613d) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4}) (async)
ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000240)) (async)
ioctl$LOOP_SET_STATUS(r2, 0x4c02, &(0x7f0000000180)={0x0, {}, 0x0, {}, 0x4, 0x3, 0x1e, 0x1, "45741966faf233681964f75cba94fb46795e791a8eec5c51c1a2ec771a4a2e2542e9483e6bf90547e644a39b79dfefcabfd3a741df8c8afd1d24012c98a64681", "0eeb8beea67ccf1de238958dfb271603e07b525ab5290627985d2bab314c73cf", [0x6, 0x7fffffff]}) (async)

01:37:03 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
bpf$MAP_CREATE(0x10, 0x0, 0x0) (async, rerun: 64)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) (rerun: 64)

01:37:03 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

01:37:03 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0})

01:37:03 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x8f7e000000000000, 0x0, 0x0, 0x0, 0x0})

[ 1571.109971][ T2351] binder: 2349:2351 ioctl 400c620e 20000400 returned -22
[ 1571.135729][ T2361] binder: 2359:2361 ioctl 40046205 0 returned -22
01:37:03 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x6, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) (async)

01:37:03 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0})

01:37:03 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

01:37:03 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x907e000000000000, 0x0, 0x0, 0x0, 0x0})

[ 1571.199594][ T2384] binder: 2382:2384 ioctl 400c620e 20000400 returned -22
01:37:03 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x6, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x6, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000000)) (async)

01:37:04 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
bpf$MAP_CREATE(0x10, 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0)

01:37:04 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0})

01:37:04 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x48)

[ 1571.361803][ T2396] binder: 2391:2396 ioctl 400c620e 20000400 returned -22
01:37:04 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0xff00000000000000, 0x0, 0x0, 0x0, 0x0})

01:37:04 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r1})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3})
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x0, r5})
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x82000, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x7fffffff, 0x401, 0x2, 0x1, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5, 0x5}, 0x48)
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0)
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r9, 0x4008af22, &(0x7f0000000140)={0x0, r10})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x549a2b9e, 0x0, 0x0, 0x0, 0x80000001}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0xd, 0x5, 0x9, 0xffffffffffffffff, 0xfffffffffffffffc}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @ldst={0x2, 0x2, 0x6, 0x4, 0x3, 0xc, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @ldst={0x1, 0x3, 0x0, 0x6, 0x0, 0x6, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x2, &(0x7f00000000c0)=""/2, 0x41000, 0x2, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000140)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xb, 0x7, 0xdad}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r6, r7, 0xffffffffffffffff, r8, r10, 0xffffffffffffffff]}, 0x80)

01:37:04 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0})

01:37:04 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000040))
ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=0x1, 0x4)
ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0)

01:37:04 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48)

01:37:04 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x5d2e3b3059c18cfa, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000340), 0xfff, 0x600200)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000300)={0x2, r4})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={<r5=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r6=>0x0})
r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x10b180, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f0000000580))
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000180)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0, 0x1, r4})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r7, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r0})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000280)={&(0x7f0000000380)=[r6, r5], 0x2})

01:37:04 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2, 0x0, 0x0})

[ 1571.491531][ T2407] binder: 2406:2407 ioctl 400c620e 20000400 returned -22
01:37:04 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x5d2e3b3059c18cfa, 0x0) (async)
r0 = syz_open_dev$mouse(&(0x7f0000000340), 0xfff, 0x600200) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000300)={0x2, r4}) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={<r5=>0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r6=>0x0}) (async)
r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x10b180, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f0000000580))
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000180)={0x0, 0x0, r2})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0, 0x1, r4}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r7, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000280)={&(0x7f0000000380)=[r6, r5], 0x2})

01:37:04 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000040))
ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=0x1, 0x4) (async)
ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0)

01:37:04 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0})

01:37:04 executing program 4:
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48)

01:37:04 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r1}) (async)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3}) (async)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x0, r5})
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) (async)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x82000, 0x0) (async)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x7fffffff, 0x401, 0x2, 0x1, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5, 0x5}, 0x48) (async)
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) (async)
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r9, 0x4008af22, &(0x7f0000000140)={0x0, r10}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x549a2b9e, 0x0, 0x0, 0x0, 0x80000001}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0xd, 0x5, 0x9, 0xffffffffffffffff, 0xfffffffffffffffc}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @ldst={0x2, 0x2, 0x6, 0x4, 0x3, 0xc, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @ldst={0x1, 0x3, 0x0, 0x6, 0x0, 0x6, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x2, &(0x7f00000000c0)=""/2, 0x41000, 0x2, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000140)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xb, 0x7, 0xdad}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r6, r7, 0xffffffffffffffff, r8, r10, 0xffffffffffffffff]}, 0x80)

01:37:04 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0})

[ 1571.617851][ T2427] binder: 2424:2427 ioctl 400c620e 20000400 returned -22
01:37:04 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0})

01:37:04 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=0x1, 0x4)
ioctl$SNDCTL_DSP_SETDUPLEX(r1, 0x5016, 0x0)

01:37:04 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x8f7e0000, 0x0, 0x0, 0x0, 0x0})

01:37:04 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x4, 0x0, 0x0})

01:37:04 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x5d2e3b3059c18cfa, 0x0)
r0 = syz_open_dev$mouse(&(0x7f0000000340), 0xfff, 0x600200)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000300)={0x2, r4})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={<r5=>0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r6=>0x0}) (async)
r7 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000002c0), 0x10b180, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r7, 0xc00864bf, &(0x7f0000000580)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01064c2, &(0x7f0000000180)={0x0, 0x0, r2}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000200)={0x0, 0x1, r4})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r7, 0xc01064c2, &(0x7f0000000240)={0x0, 0x1, r0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000280)={&(0x7f0000000380)=[r6, r5], 0x2})

[ 1571.736926][ T2445] binder: 2444:2445 ioctl 400c620e 20000400 returned -22
01:37:04 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0})

01:37:04 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r1})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3})
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x0, r5})
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x82000, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x7fffffff, 0x401, 0x2, 0x1, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5, 0x5}, 0x48)
r9 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0)
r10 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r9, 0x4008af22, &(0x7f0000000140)={0x0, r10})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x549a2b9e, 0x0, 0x0, 0x0, 0x80000001}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0xd, 0x5, 0x9, 0xffffffffffffffff, 0xfffffffffffffffc}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @ldst={0x2, 0x2, 0x6, 0x4, 0x3, 0xc, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @ldst={0x1, 0x3, 0x0, 0x6, 0x0, 0x6, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x2, &(0x7f00000000c0)=""/2, 0x41000, 0x2, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000140)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xb, 0x7, 0xdad}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r6, r7, 0xffffffffffffffff, r8, r10, 0xffffffffffffffff]}, 0x80)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r1}) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3}) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x0, r5}) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x82000, 0x0) (async)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x7fffffff, 0x401, 0x2, 0x1, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x5, 0x5}, 0x48) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r9, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r9, 0x4008af22, &(0x7f0000000140)={0x0, r10}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0xf, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x549a2b9e, 0x0, 0x0, 0x0, 0x80000001}, [@cb_func={0x18, 0xb, 0x4, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x0, 0xd, 0x5, 0x9, 0xffffffffffffffff, 0xfffffffffffffffc}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x4}, @ldst={0x2, 0x2, 0x6, 0x4, 0x3, 0xc, 0x8}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @map_fd={0x18, 0x9, 0x1, 0x0, r3}, @ldst={0x1, 0x3, 0x0, 0x6, 0x0, 0x6, 0x1}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x2, &(0x7f00000000c0)=""/2, 0x41000, 0x2, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000140)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000180)={0x3, 0xb, 0x7, 0xdad}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[r6, r7, 0xffffffffffffffff, r8, r10, 0xffffffffffffffff]}, 0x80) (async)

01:37:04 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000000), 0x8, 0x8000)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

[ 1571.826716][ T2460] binder: 2459:2460 ioctl 400c620e 20000400 returned -22
01:37:04 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0})

01:37:04 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x0, 0x0})

[ 1571.842681][ T2457] binder: 2456:2457 ioctl 400c620e 20000400 returned -22
01:37:04 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0})

01:37:04 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6, 0x0, 0x0})

01:37:04 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0})

01:37:04 executing program 5:
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x0)
read$usbfs(r1, &(0x7f0000000080)=""/30, 0x1e)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x208302, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000180)={r3, r4, 0x8, 0x9, 0x1})

01:37:04 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000000), 0x8, 0x8000)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
syz_open_dev$hidraw(&(0x7f0000000000), 0x8, 0x8000) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)

[ 1571.914428][ T2473] binder: 2470:2473 ioctl 400c620e 20000400 returned -22
[ 1571.917853][ T2476] binder: 2471:2476 ioctl 400c620e 20000400 returned -22
01:37:04 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, r1], 0x5})
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:04 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0})

01:37:04 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000000), 0x8, 0x8000)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:04 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7, 0x0, 0x0})

01:37:04 executing program 5:
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x0)
read$usbfs(r1, &(0x7f0000000080)=""/30, 0x1e)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x208302, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000180)={r3, r4, 0x8, 0x9, 0x1})
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x0) (async)
read$usbfs(r1, &(0x7f0000000080)=""/30, 0x1e) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x208302, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000180)={r3, r4, 0x8, 0x9, 0x1}) (async)

[ 1572.041905][ T2496] binder: 2491:2496 ioctl 400c620e 20000400 returned -22
[ 1572.044348][ T2497] binder: 2489:2497 ioctl 40046205 0 returned -22
01:37:04 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000000), 0x8, 0x8000) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:04 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, r1], 0x5})
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, r1], 0x5}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

01:37:04 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x6c, 0x0, 0x0, 0x0, 0x0})

01:37:04 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x0})

[ 1572.162770][ T2510] binder: 2508:2510 ioctl 400c620e 20000400 returned -22
[ 1572.177818][ T2507] binder: 2505:2507 ioctl 40046205 0 returned -22
01:37:04 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x48, 0x0, 0x0})

01:37:04 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="b3b0d220f13e9edcfb39e1abe2936e0112ebda22d0e388bbe715661b91ed57c588deb4b0cd90de04f92c4d18e19387e82554d52c205296edaf1c154f88042f8f719b9b6f772e35dbca95ea87be", 0x4d})

01:37:04 executing program 5:
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x0)
read$usbfs(r1, &(0x7f0000000080)=""/30, 0x1e)
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x208302, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000180)={r3, r4, 0x8, 0x9, 0x1})
ioctl$SNDRV_TIMER_IOCTL_STOP(0xffffffffffffffff, 0x54a1) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
syz_open_dev$usbfs(&(0x7f0000000040), 0x6, 0x0) (async)
read$usbfs(r1, &(0x7f0000000080)=""/30, 0x1e) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x208302, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000100)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000140)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r2, 0xc02064cc, &(0x7f0000000180)={r3, r4, 0x8, 0x9, 0x1}) (async)

[ 1572.194499][ T2513] binder: 2505:2513 ioctl 40046205 0 returned -22
01:37:04 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(0xffffffffffffffff, 0xc01064c4, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, r1], 0x5})
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:05 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0963104000000000000000000b6300003e63030000000000000000000c63000000000000000000"], 0xe9, 0x0, &(0x7f0000000140)="8eba8ee0b3cdf7e166ddb2a31763832a626162d34d943c394860029924d8e7b9b3a58c707b4282bc2fe3594151e5ba06fa2f1f4525afa0ea78f57272ef5fd881213a49193492f0d96377ac07f16bc328810598cff922491691ef43dd1db24ca570e6ce35dc2a230b15f8ed538cdc82e6aab1bd412713cabb1d4e4905a96d547b526f33802ff0881b281e3caa5ebd9cf4fb2c2349290ab5f291ccc552a0d6b9d565a8d71e20c6e29bdfe1b922ecfa38f30d4ab721c7560506abf213f5f772d19296e619ecf697e4f2f61b4978c0d3b0f955c00da4a1f44a59450e8885a7f08ea6286a9e7064f75014c5"})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x600, 0x0, 0x0})

01:37:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x4c, 0x0, 0x0})

[ 1572.274664][ T2528] binder: 2520:2528 ioctl 400c620e 20000400 returned -22
[ 1572.289005][ T2530] binder: 2525:2530 ioctl 400c620e 20000400 returned -22
01:37:05 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="b3b0d220f13e9edcfb39e1abe2936e0112ebda22d0e388bbe715661b91ed57c588deb4b0cd90de04f92c4d18e19387e82554d52c205296edaf1c154f88042f8f719b9b6f772e35dbca95ea87be", 0x4d})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="b3b0d220f13e9edcfb39e1abe2936e0112ebda22d0e388bbe715661b91ed57c588deb4b0cd90de04f92c4d18e19387e82554d52c205296edaf1c154f88042f8f719b9b6f772e35dbca95ea87be", 0x4d}) (async)

01:37:05 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4})
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r4, &(0x7f0000000180)="7b2e8c2bd55b81859833c597c00ca78e4a25628b3c36f95591ad18971838c99b0d658ef9f79cb626a86f737eac2a840ae2e7b0cd4c70ddb193d3ca0936ace96d0049523504e517fdef66d5a2ae374181c1d0453ed5df77a4f50f7d3db5a29617dc1e62c7c8cd8f59cccae01a4cbce500975c15054c55db721e9a98df45fd114f0908ee5f858ee819266865385c072872b63f", &(0x7f0000000240)=""/129, 0x4}, 0x20)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r5})
ioctl$RNDZAPENTCNT(r5, 0x5204, &(0x7f0000000000)=0x7)

01:37:05 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0963104000000000000000000b6300003e63030000000000000000000c63000000000000000000"], 0xe9, 0x0, &(0x7f0000000140)="8eba8ee0b3cdf7e166ddb2a31763832a626162d34d943c394860029924d8e7b9b3a58c707b4282bc2fe3594151e5ba06fa2f1f4525afa0ea78f57272ef5fd881213a49193492f0d96377ac07f16bc328810598cff922491691ef43dd1db24ca570e6ce35dc2a230b15f8ed538cdc82e6aab1bd412713cabb1d4e4905a96d547b526f33802ff0881b281e3caa5ebd9cf4fb2c2349290ab5f291ccc552a0d6b9d565a8d71e20c6e29bdfe1b922ecfa38f30d4ab721c7560506abf213f5f772d19296e619ecf697e4f2f61b4978c0d3b0f955c00da4a1f44a59450e8885a7f08ea6286a9e7064f75014c5"}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x500, 0x0, 0x0})

01:37:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x68, 0x0, 0x0})

01:37:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

[ 1572.385104][ T2540] binder: 2536:2540 ioctl 40046205 0 returned -22
[ 1572.415480][ T2546] binder: 2544:2546 ioctl 400c620e 20000400 returned -22
01:37:05 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4})
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r4, &(0x7f0000000180)="7b2e8c2bd55b81859833c597c00ca78e4a25628b3c36f95591ad18971838c99b0d658ef9f79cb626a86f737eac2a840ae2e7b0cd4c70ddb193d3ca0936ace96d0049523504e517fdef66d5a2ae374181c1d0453ed5df77a4f50f7d3db5a29617dc1e62c7c8cd8f59cccae01a4cbce500975c15054c55db721e9a98df45fd114f0908ee5f858ee819266865385c072872b63f", &(0x7f0000000240)=""/129, 0x4}, 0x20)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r5})
ioctl$RNDZAPENTCNT(r5, 0x5204, &(0x7f0000000000)=0x7)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4}) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r4, &(0x7f0000000180)="7b2e8c2bd55b81859833c597c00ca78e4a25628b3c36f95591ad18971838c99b0d658ef9f79cb626a86f737eac2a840ae2e7b0cd4c70ddb193d3ca0936ace96d0049523504e517fdef66d5a2ae374181c1d0453ed5df77a4f50f7d3db5a29617dc1e62c7c8cd8f59cccae01a4cbce500975c15054c55db721e9a98df45fd114f0908ee5f858ee819266865385c072872b63f", &(0x7f0000000240)=""/129, 0x4}, 0x20) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r5}) (async)
ioctl$RNDZAPENTCNT(r5, 0x5204, &(0x7f0000000000)=0x7) (async)

01:37:05 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) (async, rerun: 32)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x800, 0x0) (rerun: 32)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x28, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0963104000000000000000000b6300003e63030000000000000000000c63000000000000000000"], 0xe9, 0x0, &(0x7f0000000140)="8eba8ee0b3cdf7e166ddb2a31763832a626162d34d943c394860029924d8e7b9b3a58c707b4282bc2fe3594151e5ba06fa2f1f4525afa0ea78f57272ef5fd881213a49193492f0d96377ac07f16bc328810598cff922491691ef43dd1db24ca570e6ce35dc2a230b15f8ed538cdc82e6aab1bd412713cabb1d4e4905a96d547b526f33802ff0881b281e3caa5ebd9cf4fb2c2349290ab5f291ccc552a0d6b9d565a8d71e20c6e29bdfe1b922ecfa38f30d4ab721c7560506abf213f5f772d19296e619ecf697e4f2f61b4978c0d3b0f955c00da4a1f44a59450e8885a7f08ea6286a9e7064f75014c5"}) (async, rerun: 64)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (rerun: 64)

01:37:05 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x210000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000040)="b3b0d220f13e9edcfb39e1abe2936e0112ebda22d0e388bbe715661b91ed57c588deb4b0cd90de04f92c4d18e19387e82554d52c205296edaf1c154f88042f8f719b9b6f772e35dbca95ea87be", 0x4d})

01:37:05 executing program 4:
ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000240)={{{0xb}}, 0xb9, 0x7f, &(0x7f00000004c0)="d02eda88c4f329042a8a696251f147adfaff5ce81b46bf462fa556fa0203f870b64ee97922152af0d42171bc7d8c1a88e7262d14203c4ce3fb7a9d608d789a64f78ce54291f682067136bf9cfffb250f0ae42bf2c7ba4f341b173e8cd0c54de8e82a24db1ec37da7896f1b4cfc9de351506a61cfd98d5e60c9e21fceb60c5a4d123d9935475dc38d07defdf299e6a81e77360a82c6cb80258b86f3c57390454757e511911956a6383e4c41e137da5c1f50ea4d5eebd1713417"})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r3})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000000c0)={0x4c, 0x0, &(0x7f0000000000)=[@decrefs={0x40046307, 0x2}, @dead_binder_done, @acquire_done={0x40106309, 0x1}, @acquire={0x40046305, 0x2}, @request_death={0x400c630e, 0x2}, @free_buffer], 0x24, 0x0, &(0x7f0000000080)="c1cd4666dadda09f22208b389e062d1845600694cc501a2c89dc2de038ab81bde462359f"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000140)={0x0, r6})
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000200)={0x2, r6})

01:37:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6c, 0x0, 0x0})

01:37:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

[ 1572.537863][ T2564] binder: 2556:2564 ioctl 400c620e 20000400 returned -22
01:37:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:05 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x82800)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x7)

01:37:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x74, 0x0, 0x0})

01:37:05 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000140)={'sit0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) (async)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4})
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000040)={r4, &(0x7f0000000180)="7b2e8c2bd55b81859833c597c00ca78e4a25628b3c36f95591ad18971838c99b0d658ef9f79cb626a86f737eac2a840ae2e7b0cd4c70ddb193d3ca0936ace96d0049523504e517fdef66d5a2ae374181c1d0453ed5df77a4f50f7d3db5a29617dc1e62c7c8cd8f59cccae01a4cbce500975c15054c55db721e9a98df45fd114f0908ee5f858ee819266865385c072872b63f", &(0x7f0000000240)=""/129, 0x4}, 0x20)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r5})
ioctl$RNDZAPENTCNT(r5, 0x5204, &(0x7f0000000000)=0x7)

[ 1572.663865][ T2581] binder: 2574:2581 ioctl 400c620e 20000400 returned -22
01:37:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)

01:37:05 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
socket$nl_sock_diag(0x10, 0x3, 0x4) (async)
r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x82800)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x7)

01:37:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7a, 0x0, 0x0})

01:37:05 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = timerfd_create(0x0, 0x80000)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{r2, r3+60000000}, {0x0, 0x3938700}}, &(0x7f0000000080))
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1572.751198][ T2594] binder: 2593:2594 ioctl 400c620e 20000400 returned -22
01:37:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6c, 0x0, 0x0})

01:37:05 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1)

01:37:05 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x82800) (async, rerun: 64)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) (rerun: 64)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) (async, rerun: 32)
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x7) (rerun: 32)

01:37:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x300, 0x0, 0x0})

[ 1572.856819][ T2611] binder: 2605:2611 ioctl 40046205 0 returned -22
[ 1572.871075][ T2613] binder: 2606:2613 ioctl 400c620e 20000400 returned -22
01:37:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)

01:37:05 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = timerfd_create(0x0, 0x80000)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{r2, r3+60000000}, {0x0, 0x3938700}}, &(0x7f0000000080)) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)

[ 1572.907722][ T2616] binder: 2615:2616 ioctl 400c620e 20000400 returned -22
01:37:05 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1)

01:37:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x500, 0x0, 0x0})

[ 1572.969648][ T2618] binder: 2617:2618 ioctl 400c620e 20000400 returned -22
01:37:05 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = timerfd_create(0x0, 0x80000) (async)
clock_gettime(0x0, &(0x7f0000000000)={<r2=>0x0, <r3=>0x0})
timerfd_settime(r1, 0x0, &(0x7f0000000040)={{r2, r3+60000000}, {0x0, 0x3938700}}, &(0x7f0000000080)) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1573.024678][ T2629] binder: 2626:2629 ioctl 40046205 0 returned -22
[ 1573.043059][ T2632] binder: 2628:2632 ioctl 40046205 0 returned -22
01:37:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0})

01:37:05 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$KVM_CHECK_EXTENSION(0xffffffffffffffff, 0xae03, 0x1)

01:37:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)

01:37:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x600, 0x0, 0x0})

[ 1573.089299][ T2643] binder: 2635:2643 ioctl 400c620e 20000400 returned -22
01:37:05 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
mmap$binder(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x1, 0x11, r2, 0x7)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x88142, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000000)=""/157)

01:37:05 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000000))
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc)
r4 = syz_open_dev$mouse(&(0x7f0000000240), 0x9, 0x55c802)
write$bt_hci(r4, &(0x7f0000000080)={0x1, @user_passkey_reply={{0x42e, 0x14}, {@any, 0x2}}}, 0xe)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000040)={0x9f, "c1f01b"}, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00'})

[ 1573.139745][ T2645] binder: 2644:2645 ioctl 40046205 0 returned -22
01:37:05 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000000)=r2)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x4010, r2, 0x8001)

01:37:05 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3, 0x0, 0x0})

01:37:05 executing program 2:
clock_gettime(0x1, &(0x7f0000000000))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x6c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x1, 0x0, 0x2b}, @fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x1100, 0x1caa}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}, 0x400}, @request_death, @decrefs, @release={0x40046306, 0x3}], 0x16, 0x0, &(0x7f00000001c0)="b8f69388af1b45d914dc3489d576d2204ff4b487def8"})

01:37:05 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x700, 0x0, 0x0})

01:37:05 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
mmap$binder(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x1, 0x11, r2, 0x7)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x88142, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000000)=""/157)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
mmap$binder(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x1, 0x11, r2, 0x7) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) (async)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x88142, 0x0) (async)
ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000000)=""/157) (async)

[ 1573.226305][ T2655] binder: 2651:2655 ioctl 400c620e 20000400 returned -22
01:37:06 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x907e000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:06 executing program 2:
clock_gettime(0x1, &(0x7f0000000000))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x6c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x1, 0x0, 0x2b}, @fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x1100, 0x1caa}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}, 0x400}, @request_death, @decrefs, @release={0x40046306, 0x3}], 0x16, 0x0, &(0x7f00000001c0)="b8f69388af1b45d914dc3489d576d2204ff4b487def8"})
clock_gettime(0x1, &(0x7f0000000000)) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x6c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x1, 0x0, 0x2b}, @fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x1100, 0x1caa}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}, 0x400}, @request_death, @decrefs, @release={0x40046306, 0x3}], 0x16, 0x0, &(0x7f00000001c0)="b8f69388af1b45d914dc3489d576d2204ff4b487def8"}) (async)

01:37:06 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000000)=r2)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x4010, r2, 0x8001)

01:37:06 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000000))
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1})
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc)
r4 = syz_open_dev$mouse(&(0x7f0000000240), 0x9, 0x55c802)
write$bt_hci(r4, &(0x7f0000000080)={0x1, @user_passkey_reply={{0x42e, 0x14}, {@any, 0x2}}}, 0xe)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000040)={0x9f, "c1f01b"}, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00'})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0) (async)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000000)) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1}) (async)
ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc) (async)
syz_open_dev$mouse(&(0x7f0000000240), 0x9, 0x55c802) (async)
write$bt_hci(r4, &(0x7f0000000080)={0x1, @user_passkey_reply={{0x42e, 0x14}, {@any, 0x2}}}, 0xe) (async)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000040)={0x9f, "c1f01b"}, 0x6) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00'}) (async)

01:37:06 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x4800, 0x0, 0x0})

01:37:06 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x8f7e000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1573.373862][ T2671] binder: 2668:2671 ioctl 400c620e 20000400 returned -22
[ 1573.383192][ T2673] binder: 2670:2673 ioctl 400c620e 20000400 returned -22
01:37:06 executing program 2:
clock_gettime(0x1, &(0x7f0000000000))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000200)={0x6c, 0x0, &(0x7f0000000140)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000040)={@fda={0x66646185, 0x1, 0x0, 0x2b}, @fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0x1100, 0x1caa}}, &(0x7f00000000c0)={0x0, 0x20, 0x38}}, 0x400}, @request_death, @decrefs, @release={0x40046306, 0x3}], 0x16, 0x0, &(0x7f00000001c0)="b8f69388af1b45d914dc3489d576d2204ff4b487def8"})

01:37:06 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async, rerun: 64)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async, rerun: 64)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000000)=r2) (async, rerun: 64)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async, rerun: 64)
mmap$usbfs(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x4010, r2, 0x8001)

01:37:06 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x4c00, 0x0, 0x0})

01:37:06 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
mmap$binder(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x1, 0x11, r2, 0x7)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x88142, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000000)=""/157)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
mmap$binder(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x1, 0x11, r2, 0x7) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) (async)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x88142, 0x0) (async)
ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000000)=""/157) (async)

01:37:06 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x2, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_GET_VRING_BASE(r0, 0xc008af12, &(0x7f0000000000))
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)

[ 1573.479022][ T2702] binder: 2693:2702 ioctl 400c620e 20000400 returned -22
[ 1573.509054][ T2704] binder: 2703:2704 ioctl 400c620e 20000400 returned -22
01:37:06 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0) (async, rerun: 64)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000000)) (rerun: 64)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1}) (async)
ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x200000, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f00000001c0)={0x0, 0x1}) (async)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc)
r4 = syz_open_dev$mouse(&(0x7f0000000240), 0x9, 0x55c802)
write$bt_hci(r4, &(0x7f0000000080)={0x1, @user_passkey_reply={{0x42e, 0x14}, {@any, 0x2}}}, 0xe)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000040)={0x9f, "c1f01b"}, 0x6) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wg1\x00'})

01:37:06 executing program 2:
getrusage(0x1, &(0x7f0000000000))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:06 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6800, 0x0, 0x0})

[ 1573.593276][ T2714] binder: 2711:2714 ioctl 400c620e 20000400 returned -22
01:37:06 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:06 executing program 2:
getrusage(0x1, &(0x7f0000000000)) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:06 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x600, 0x0, 0x0, 0x0, 0x0})

01:37:06 executing program 0:
syz_open_dev$mouse(&(0x7f0000001480), 0x81, 0x0)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000047c0)={&(0x7f0000004780)='./file0\x00'}, 0x10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000004980)={&(0x7f0000004940)='./file0/file0\x00'}, 0x10)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:06 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r4, 0x2f, 0x9, 0x8, 0xa04b, 0x37, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x7, 0x10, 0x2, 0x20}})

01:37:06 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6c00, 0x0, 0x0})

[ 1573.722301][ T2749] binder: 2748:2749 ioctl 400c620e 20000400 returned -22
01:37:06 executing program 2:
getrusage(0x1, &(0x7f0000000000))
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:06 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:06 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0})

01:37:06 executing program 0:
syz_open_dev$mouse(&(0x7f0000001480), 0x81, 0x0) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000047c0)={&(0x7f0000004780)='./file0\x00'}, 0x10)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000004980)={&(0x7f0000004940)='./file0/file0\x00'}, 0x10) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

[ 1573.782285][ T2753] binder: 2751:2753 ioctl 40046205 0 returned -22
01:37:06 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7400, 0x0, 0x0})

01:37:06 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x309081, 0x0)
ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000040))

01:37:06 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x8) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r4, 0x2f, 0x9, 0x8, 0xa04b, 0x37, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x7, 0x10, 0x2, 0x20}})

[ 1573.843089][ T2764] binder: 2760:2764 ioctl 400c620e 20000400 returned -22
[ 1573.888740][ T2772] binder: 2765:2772 ioctl 40046205 0 returned -22
01:37:06 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:06 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000240), 0x6, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl1\x00', <r3=>0x0, 0xe2151562f17950a, 0x700, 0x0, 0x76e, {{0x18, 0x4, 0x2, 0x2, 0x60, 0x66, 0x0, 0x0, 0x4, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@lsrr={0x83, 0x13, 0x88, [@local, @remote, @private=0xa010100, @rand_addr=0x64010100]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0x34, 0x71, 0x1, 0xc, [{@multicast2, 0x3}, {@loopback}, {@broadcast, 0xfffffffa}, {@local, 0x7}, {@multicast2, 0x5}, {@empty, 0x40}]}]}}}}})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400f8ffadab125200dbb08d1d4682ca2a75aeb3ebec861fe59e1025bb7851", @ANYRES16=r4, @ANYBLOB="0105000000000000000006000000200001801400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r6, @ANYBLOB], 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000b80)={0x278, 0x0, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x134, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x14, 0x4, "ac96cc72d97e430d2172c80c38628f0b"}, @ETHTOOL_A_BITSET_MASK={0xf3, 0x5, "9d8241723d6e28bc987f960d135d0440af40378297c18beb052e425b4c458683cc269420f542fed1be111de67d22866961bc069aa2b121b024b5945f1b3e16647df0b4fc0e2dcb57a46eb5ac9dac878cce22c1c6d69b4fb608580621e907e36f4cebf818ec19b7862078175d39ef86a1ec1507f5949a6d7587106b12cc996ddb4fc354eda503c37fbec8a89fa3f366fbeefab9fafb6bd79447c9a9f757be383f3820600409733401c2031342c086696f9244a07822a2dd0038e2cf6b5ac01b7204eac8df2f53ff09670b87a1db09642b8f1e294c58ebbaca1d479981388e2fe22238252c62bb5ad094e9264e21595e"}, @ETHTOOL_A_BITSET_MASK={0x23, 0x5, "ea4ced66b8e8cbbf324086bfc9e333dc87901bf448d390e04598dc8bbf699c"}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @ETHTOOL_A_DEBUG_HEADER={0x6c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x80, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x7c, 0x5, "c405502262e336d649a0f2f89a35286f745b888c4633e8b38b5baef6cb73f5aa765a2a4b366980b500692d4bb268e6e25785f5d467c8730c714ac246720c2f6749b00582d0a14dec0ac4cc506c2a188ac3c3611b7deac3fce322f8a709872ddead03b4f325a71dee57be0f2ddb58e3536f9fb868e3b45d94"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x41}, 0x40)
r7 = syz_open_dev$usbfs(&(0x7f00000004c0), 0x1, 0x400200)
ioctl$USBDEVFS_BULK(r7, 0xc0185502, &(0x7f0000000540)={{}, 0x2e, 0x7, &(0x7f0000000500)="37c5c83161fc8a27036c21430114508f41f9664cff232561d489baaa88b7ce16d43e0010c2911b7d190e912621c6"})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000b00)='./binderfs2/binder1\x00', 0x802, 0x0)
pselect6(0x40, &(0x7f0000000980)={0x80, 0x2, 0x1, 0x1, 0x81, 0x0, 0x8255, 0x6}, &(0x7f00000009c0)={0x2, 0x721f, 0xf4, 0x1, 0x5, 0x3, 0x6, 0x9cf}, &(0x7f0000000a00)={0x3, 0x401, 0xf11, 0x9, 0xde8, 0x7fffffffffffffff, 0x401, 0x8}, &(0x7f0000000a40)={0x77359400}, &(0x7f0000000ac0)={&(0x7f0000000a80)={[0x9]}, 0x8})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000b40)='./cgroup.net/syz1\x00', 0x200002, 0x0)
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"])
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x68, 0x0, &(0x7f00000002c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000440)={@fd, @fda={0x66646185, 0xa, 0x6, 0x13}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/94, 0x5e, 0x2, 0x16}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @enter_looper, @release={0x40046306, 0x1}, @request_death={0x400c630e, 0x3}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:37:06 executing program 0:
syz_open_dev$mouse(&(0x7f0000001480), 0x81, 0x0) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f00000047c0)={&(0x7f0000004780)='./file0\x00'}, 0x10) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000004980)={&(0x7f0000004940)='./file0/file0\x00'}, 0x10) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:06 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x309081, 0x0)
ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000040))

01:37:06 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7a00, 0x0, 0x0})

01:37:06 executing program 0:
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x80080)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000011c0)={&(0x7f0000000000)="038208a68e", &(0x7f0000000140)=""/4096, &(0x7f0000000040)="a1b5249c90c7f95f0051edcb3b0874a432ccbd64b5227cb62447bb15c03b2b370561ac8b0bae1ee7a65c244bf93d253984eaf925e0427e5f9d4cf58bbadd53f722fb9434ad4c43cbdce3319201fc16530e72e2", &(0x7f0000001140)="67aa654a18895de44966546a425d224ecaa716b52e1fc4861f843240317030c4847044d744711a72249f95ddbbe1eb6a7be604712d0f141ed51fc55cc9c91aa3666664187fe45d47f1554931ad6bbfff9ad6cf60be8bbc92ca73a7e4c450eded52723e6f2b8235ddec6c", 0x3, r1}, 0x38)

[ 1573.975562][ T2782] binder: 2777:2782 ioctl 400c620e 20000400 returned -22
[ 1574.006134][ T2792] binder: 2786:2792 ioctl 40046205 0 returned -22
01:37:06 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x309081, 0x0)
ioctl$SNDCTL_DSP_GETIPTR(r1, 0x800c5011, &(0x7f0000000040))

01:37:06 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r4=>0x0})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r4, 0x2f, 0x9, 0x8, 0xa04b, 0x37, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x7, 0x10, 0x2, 0x20}})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) (async)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x8) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) (async)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', r4, 0x2f, 0x9, 0x8, 0xa04b, 0x37, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, 0x7, 0x10, 0x2, 0x20}}) (async)

01:37:06 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:06 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7e87, 0x0, 0x0})

01:37:06 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0xff00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:06 executing program 0:
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, 0xffffffffffffffff, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x80080)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000011c0)={&(0x7f0000000000)="038208a68e", &(0x7f0000000140)=""/4096, &(0x7f0000000040)="a1b5249c90c7f95f0051edcb3b0874a432ccbd64b5227cb62447bb15c03b2b370561ac8b0bae1ee7a65c244bf93d253984eaf925e0427e5f9d4cf58bbadd53f722fb9434ad4c43cbdce3319201fc16530e72e2", &(0x7f0000001140)="67aa654a18895de44966546a425d224ecaa716b52e1fc4861f843240317030c4847044d744711a72249f95ddbbe1eb6a7be604712d0f141ed51fc55cc9c91aa3666664187fe45d47f1554931ad6bbfff9ad6cf60be8bbc92ca73a7e4c450eded52723e6f2b8235ddec6c", 0x3, r1}, 0x38)

[ 1574.110374][ T2798] binder: 2793:2798 ioctl 400c620e 20000400 returned -22
01:37:06 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)

01:37:06 executing program 2:
ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000000)={0x1})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000040))
ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:06 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000002c0)=[@register_looper, @enter_looper, @register_looper, @increfs={0x40046304, 0x2}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x7)

01:37:06 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7e8f, 0x0, 0x0})

[ 1574.203661][ T2811] binder: 2807:2811 ioctl 400c620e 20000400 returned -22
01:37:06 executing program 0:
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, 0xffffffffffffffff, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x80080)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000011c0)={&(0x7f0000000000)="038208a68e", &(0x7f0000000140)=""/4096, &(0x7f0000000040)="a1b5249c90c7f95f0051edcb3b0874a432ccbd64b5227cb62447bb15c03b2b370561ac8b0bae1ee7a65c244bf93d253984eaf925e0427e5f9d4cf58bbadd53f722fb9434ad4c43cbdce3319201fc16530e72e2", &(0x7f0000001140)="67aa654a18895de44966546a425d224ecaa716b52e1fc4861f843240317030c4847044d744711a72249f95ddbbe1eb6a7be604712d0f141ed51fc55cc9c91aa3666664187fe45d47f1554931ad6bbfff9ad6cf60be8bbc92ca73a7e4c450eded52723e6f2b8235ddec6c", 0x3, r1}, 0x38)
mmap$dsp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x810, 0xffffffffffffffff, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
syz_open_dev$mouse(&(0x7f00000000c0), 0x3, 0x80080) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000011c0)={&(0x7f0000000000)="038208a68e", &(0x7f0000000140)=""/4096, &(0x7f0000000040)="a1b5249c90c7f95f0051edcb3b0874a432ccbd64b5227cb62447bb15c03b2b370561ac8b0bae1ee7a65c244bf93d253984eaf925e0427e5f9d4cf58bbadd53f722fb9434ad4c43cbdce3319201fc16530e72e2", &(0x7f0000001140)="67aa654a18895de44966546a425d224ecaa716b52e1fc4861f843240317030c4847044d744711a72249f95ddbbe1eb6a7be604712d0f141ed51fc55cc9c91aa3666664187fe45d47f1554931ad6bbfff9ad6cf60be8bbc92ca73a7e4c450eded52723e6f2b8235ddec6c", 0x3, r1}, 0x38) (async)

01:37:07 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @remote_name_req_cancel={{0x41a, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xa)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:07 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:07 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000002c0)=[@register_looper, @enter_looper, @register_looper, @increfs={0x40046304, 0x2}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x7)

01:37:07 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7e90, 0x0, 0x0})

01:37:07 executing program 2:
ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000000)={0x1})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000040))
ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1574.315873][ T2830] binder: 2828:2830 ioctl 400c620e 20000400 returned -22
01:37:07 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x82800)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x9, 0xa, 0x5, 0x15, "fe0a0de224d06afb7d1f62f1859f2ae5dccfbe0f44076bc0ad53c0cd3c2fbc864450b10e6fda6da06fbb43e55f2fde414853e5739a7d3f49fc7e56078241e8fe", "5dec272aff22f69025023ce6dd42fdf19989675f31731c5dea1672b8b6e84d49", [0x9b6, 0x8]})

01:37:07 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @remote_name_req_cancel={{0x41a, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xa) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:07 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:07 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000002c0)=[@register_looper, @enter_looper, @register_looper, @increfs={0x40046304, 0x2}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x7)

01:37:07 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x877e, 0x0, 0x0})

[ 1574.432490][ T2844] binder: 2842:2844 ioctl 400c620e 20000400 returned -22
01:37:07 executing program 2:
ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000000)={0x1})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000040))
ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000000)={0x1}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_GETTRIGGER(r1, 0x80045010, &(0x7f0000000040)) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

01:37:07 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @remote_name_req_cancel={{0x41a, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xa)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) (async)
write$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1, @remote_name_req_cancel={{0x41a, 0x6}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}}}, 0xa) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

01:37:07 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x82800) (async, rerun: 32)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) (rerun: 32)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x9, 0xa, 0x5, 0x15, "fe0a0de224d06afb7d1f62f1859f2ae5dccfbe0f44076bc0ad53c0cd3c2fbc864450b10e6fda6da06fbb43e55f2fde414853e5739a7d3f49fc7e56078241e8fe", "5dec272aff22f69025023ce6dd42fdf19989675f31731c5dea1672b8b6e84d49", [0x9b6, 0x8]})

01:37:07 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:07 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8f7e, 0x0, 0x0})

01:37:07 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000002c0)=[@register_looper, @enter_looper, @register_looper, @increfs={0x40046304, 0x2}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

[ 1574.546555][ T2860] binder: 2854:2860 ioctl 400c620e 20000400 returned -22
01:37:07 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)

01:37:07 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1c, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x2}, @enter_looper, @exit_looper], 0xec, 0x0, &(0x7f0000000140)="06c458fe9a738c64a0629e420915b514879767fbfa4d4ed7e3b8df2119814766b1aa5b40cd24f1d5cb175a3bf8481598510abbe1a1049e3ec3aca81feeca6dd2a41922d6a6774a0df6d640bb67f2f28cea84e7410d603f443668b59aa6ac2e01fddb21549a3673fd679aefdb3a9ed89a45740865bc1a6498d6658117b220bb484cd605456b14098abb64af659c34e6fdb4e61395d31117310a01403a3446320a560fcbbfe51a67a1fc367bbfdcd7b6790a127c7ea396db7841841e5ebce08fcec6a3938892e057e637ccbe7de9db6616766dcaaaa048b144a5c144c187c119b5468c83670da4ec148033e09e"})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1)

01:37:07 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6)

01:37:07 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x907e, 0x0, 0x0})

[ 1574.651931][ T2878] binder: 2871:2878 ioctl 400c620e 20000400 returned -22
01:37:07 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x3, 0x9})
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:07 executing program 4:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000002c0)=[@register_looper, @enter_looper, @register_looper, @increfs={0x40046304, 0x2}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:37:07 executing program 4:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000002c0)=[@register_looper, @enter_looper, @register_looper, @increfs={0x40046304, 0x2}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:37:07 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x4)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6)

01:37:07 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x82800) (async)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async)
ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000080)={0x0, {}, 0x0, {}, 0x9, 0xa, 0x5, 0x15, "fe0a0de224d06afb7d1f62f1859f2ae5dccfbe0f44076bc0ad53c0cd3c2fbc864450b10e6fda6da06fbb43e55f2fde414853e5739a7d3f49fc7e56078241e8fe", "5dec272aff22f69025023ce6dd42fdf19989675f31731c5dea1672b8b6e84d49", [0x9b6, 0x8]})

01:37:07 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xff00, 0x0, 0x0})

01:37:07 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x3, 0x9}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:07 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000000c0)) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1c, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x2}, @enter_looper, @exit_looper], 0xec, 0x0, &(0x7f0000000140)="06c458fe9a738c64a0629e420915b514879767fbfa4d4ed7e3b8df2119814766b1aa5b40cd24f1d5cb175a3bf8481598510abbe1a1049e3ec3aca81feeca6dd2a41922d6a6774a0df6d640bb67f2f28cea84e7410d603f443668b59aa6ac2e01fddb21549a3673fd679aefdb3a9ed89a45740865bc1a6498d6658117b220bb484cd605456b14098abb64af659c34e6fdb4e61395d31117310a01403a3446320a560fcbbfe51a67a1fc367bbfdcd7b6790a127c7ea396db7841841e5ebce08fcec6a3938892e057e637ccbe7de9db6616766dcaaaa048b144a5c144c187c119b5468c83670da4ec148033e09e"}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1)

[ 1574.796504][ T2890] binder: 2888:2890 ioctl 400c620e 20000400 returned -22
01:37:07 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x4) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6)

01:37:07 executing program 4:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000002c0)=[@register_looper, @enter_looper, @register_looper, @increfs={0x40046304, 0x2}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:37:07 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:07 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f00000000c0))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x1c, 0x0, &(0x7f0000000000)=[@acquire_done={0x40106309, 0x2}, @enter_looper, @exit_looper], 0xec, 0x0, &(0x7f0000000140)="06c458fe9a738c64a0629e420915b514879767fbfa4d4ed7e3b8df2119814766b1aa5b40cd24f1d5cb175a3bf8481598510abbe1a1049e3ec3aca81feeca6dd2a41922d6a6774a0df6d640bb67f2f28cea84e7410d603f443668b59aa6ac2e01fddb21549a3673fd679aefdb3a9ed89a45740865bc1a6498d6658117b220bb484cd605456b14098abb64af659c34e6fdb4e61395d31117310a01403a3446320a560fcbbfe51a67a1fc367bbfdcd7b6790a127c7ea396db7841841e5ebce08fcec6a3938892e057e637ccbe7de9db6616766dcaaaa048b144a5c144c187c119b5468c83670da4ec148033e09e"})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x1)

01:37:07 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0})

[ 1574.920350][ T2902] binder: 2897:2902 ioctl 400c620e 20000400 returned -22
01:37:07 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x3, 0x9})
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000040)={0x3, 0x9}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)

01:37:07 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1575.014842][ T2914] binder: 2912:2914 ioctl 40046205 0 returned -22
[ 1575.028903][ T2918] binder: 2915:2918 ioctl 400c620e 20000400 returned -22
01:37:07 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000002c0)=[@register_looper, @enter_looper, @register_looper, @increfs={0x40046304, 0x2}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:37:07 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)

01:37:07 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0})

01:37:07 executing program 0:
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x82800)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x4)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0)
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="93a956d6a08f751787138da025a27f555522dbf98c38d00b945ef9c0d1ceb2f0f2ffa6c9a2e9e22fc4bddc1e1be5a27730", 0x31, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000001140)={r4, 0x100c, &(0x7f00000031c0)=""/4108})
ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0)

01:37:07 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0x6, 0x8, 0x6, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7800, 0x80, 0xba, 0x7}})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000006c0))
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg1\x00'})
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x9, 0x6, 0x1, "a3c7d5459f4ab392b11ed72db1292396b449687e4159c3a4a9f30a87e1aa4fa80b15a0e0800cc086ed7ce892ccb441a1454365bc922792e569769d921661f2ef", "97e716e896a283b24fee5edf5dc3f5277e6f063e05ee0dd9ac41a09990071b8f8443d92b33c447c3c70c3cedf7ccaa2042f15109024abaec34ce0bcc6b7e6fc7", "75cc3e0c5afb2e8e2c431ee93bb5d4cdd9dd2a520a277cade234540dbacdc3ad", [0x81, 0x2]})
ioctl$BINDER_WRITE_READ(r3, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:07 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0})

01:37:07 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:07 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1575.135181][ T2930] binder: 2929:2930 ioctl 40046205 0 returned -22
[ 1575.137082][ T2935] binder: 2929:2935 ioctl 40046205 0 returned -22
01:37:07 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000002c0)=[@register_looper, @enter_looper, @register_looper, @increfs={0x40046304, 0x2}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

[ 1575.156512][ T2940] binder: 2939:2940 ioctl 400c620e 20000400 returned -22
01:37:07 executing program 0:
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) (async)
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x82800) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x4)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0)
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="93a956d6a08f751787138da025a27f555522dbf98c38d00b945ef9c0d1ceb2f0f2ffa6c9a2e9e22fc4bddc1e1be5a27730", 0x31, <r4=>0x0}) (rerun: 32)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000001140)={r4, 0x100c, &(0x7f00000031c0)=""/4108}) (async)
ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0)

01:37:08 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0x6, 0x8, 0x6, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7800, 0x80, 0xba, 0x7}})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000006c0)) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg1\x00'}) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x9, 0x6, 0x1, "a3c7d5459f4ab392b11ed72db1292396b449687e4159c3a4a9f30a87e1aa4fa80b15a0e0800cc086ed7ce892ccb441a1454365bc922792e569769d921661f2ef", "97e716e896a283b24fee5edf5dc3f5277e6f063e05ee0dd9ac41a09990071b8f8443d92b33c447c3c70c3cedf7ccaa2042f15109024abaec34ce0bcc6b7e6fc7", "75cc3e0c5afb2e8e2c431ee93bb5d4cdd9dd2a520a277cade234540dbacdc3ad", [0x81, 0x2]}) (async)
ioctl$BINDER_WRITE_READ(r3, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0})

01:37:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1575.264786][ T2952] binder: 2948:2952 ioctl 400c620e 20000400 returned -22
[ 1575.268796][ T2950] binder: 2946:2950 ioctl 40046205 0 returned -22
01:37:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x44001, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)={r2})

01:37:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000002c0)=[@register_looper, @enter_looper, @register_looper, @increfs={0x40046304, 0x2}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:37:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0})

01:37:08 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1}) (async)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'sit0\x00', 0x0, 0x2f, 0x6, 0x8, 0x6, 0x8, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7800, 0x80, 0xba, 0x7}}) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000006c0))
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000180)={'wg1\x00'}) (async, rerun: 64)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x9, 0x6, 0x1, "a3c7d5459f4ab392b11ed72db1292396b449687e4159c3a4a9f30a87e1aa4fa80b15a0e0800cc086ed7ce892ccb441a1454365bc922792e569769d921661f2ef", "97e716e896a283b24fee5edf5dc3f5277e6f063e05ee0dd9ac41a09990071b8f8443d92b33c447c3c70c3cedf7ccaa2042f15109024abaec34ce0bcc6b7e6fc7", "75cc3e0c5afb2e8e2c431ee93bb5d4cdd9dd2a520a277cade234540dbacdc3ad", [0x81, 0x2]})
ioctl$BINDER_WRITE_READ(r3, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x44001, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)={r2})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x44001, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)={r2}) (async)

01:37:08 executing program 0:
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff) (async)
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x82800) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1) (async)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x4) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0) (async)
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) (async, rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="93a956d6a08f751787138da025a27f555522dbf98c38d00b945ef9c0d1ceb2f0f2ffa6c9a2e9e22fc4bddc1e1be5a27730", 0x31, <r4=>0x0}) (rerun: 32)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000001140)={r4, 0x100c, &(0x7f00000031c0)=""/4108})
ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0)

[ 1575.373830][ T2972] binder: 2971:2972 ioctl 40046205 0 returned -22
[ 1575.400895][ T2973] binder: 2966:2973 ioctl 400c620e 20000400 returned -22
01:37:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x3, 0x8, 0x20, @loopback, @loopback, 0x7800, 0x20, 0x3, 0xff}})
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:08 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000002c0)=[@register_looper, @enter_looper, @register_looper, @increfs={0x40046304, 0x2}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:37:08 executing program 1:
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0})

01:37:08 executing program 0:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x44001, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r1, 0xc01064c1, &(0x7f0000000080)={r2})

[ 1575.494364][ T2993] binder: 2982:2993 ioctl 40046205 0 returned -22
[ 1575.497683][ T2986] binder: 2978:2986 ioctl 400c620e 20000400 returned -22
[ 1575.512431][ T2995] binder: 2982:2995 ioctl 40046205 0 returned -22
01:37:08 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000002c0)=[@register_looper, @enter_looper, @register_looper, @increfs={0x40046304, 0x2}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:37:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0})

01:37:08 executing program 1:
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:08 executing program 0:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x3, 0x8, 0x20, @loopback, @loopback, 0x7800, 0x20, 0x3, 0xff}}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1575.607344][ T3006] binder: 3003:3006 ioctl 400c620e 20000400 returned -22
01:37:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0xba, 0x0, 0x9, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x20, 0x0, 0x7f}})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x1f, 0x80)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETDUPLEX(r3, 0x5016, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)

01:37:08 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000400)={0x14, 0x0, &(0x7f00000002c0)=[@register_looper, @enter_looper, @register_looper, @increfs={0x40046304, 0x2}], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

[ 1575.666103][ T3010] binder: 3008:3010 ioctl 40046205 0 returned -22
01:37:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x48000000, 0x0, 0x0})

01:37:08 executing program 0:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:08 executing program 1:
openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1575.725204][ T3017] binder: 3015:3017 ioctl 400c620e 20000400 returned -22
[ 1575.756210][ T3029] binder: 3018:3029 ioctl 40046205 0 returned -22
01:37:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0xba, 0x0, 0x9, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x20, 0x0, 0x7f}})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x1f, 0x80)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETDUPLEX(r3, 0x5016, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0xba, 0x0, 0x9, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x20, 0x0, 0x7f}}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
syz_open_dev$loop(&(0x7f0000000040), 0x1f, 0x80) (async)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) (async)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETDUPLEX(r3, 0x5016, 0x0) (async)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) (async)

01:37:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

01:37:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x3, 0x8, 0x20, @loopback, @loopback, 0x7800, 0x20, 0x3, 0xff}})
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x89f9, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x29, 0x0, 0x3, 0x8, 0x20, @loopback, @loopback, 0x7800, 0x20, 0x3, 0xff}}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

01:37:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x4c000000, 0x0, 0x0})

01:37:08 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socket$inet_udp(0x2, 0x2, 0x0)

[ 1575.817513][ T3038] binder: 3033:3038 ioctl 400c620e 20000400 returned -22
01:37:08 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@release, @decrefs={0x40046307, 0x3}], 0x6b, 0x0, &(0x7f0000000040)="23bbc9c453123110ab4f370c35347052dfc91e1bdda2ecd27ae077fdbe0b93e07ffc83c3799189eccc3a1c1a94ce387427357f630fad955cd3f2e768c5ead0474481de0c46c0e75776088d373d443c2df6138dc8872d47b4ceaa416fc23c126737cabcf270cedc69a8d34a"})
r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x80000)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0)={0x3, 0x22, 0x4, 0x1f, 0x6, 0x6, 0xe4}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00'})
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x3, @none, 0x4, 0x1}, 0xe)

01:37:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[ 1575.891016][ T3044] binder: 3041:3044 ioctl c0306201 0 returned -14
[ 1575.915838][ T3046] binder: 3043:3046 ioctl 40046205 0 returned -22
01:37:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x68000000, 0x0, 0x0})

01:37:08 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
socket$inet_udp(0x2, 0x2, 0x0)

[ 1575.941085][ T3051] binder: 3050:3051 ioctl 400c620e 20000400 returned -22
01:37:08 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@release, @decrefs={0x40046307, 0x3}], 0x6b, 0x0, &(0x7f0000000040)="23bbc9c453123110ab4f370c35347052dfc91e1bdda2ecd27ae077fdbe0b93e07ffc83c3799189eccc3a1c1a94ce387427357f630fad955cd3f2e768c5ead0474481de0c46c0e75776088d373d443c2df6138dc8872d47b4ceaa416fc23c126737cabcf270cedc69a8d34a"})
r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x80000)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0)={0x3, 0x22, 0x4, 0x1f, 0x6, 0x6, 0xe4}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00'})
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x3, @none, 0x4, 0x1}, 0xe)

01:37:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x4, 0x0)
ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xffffffffffffff31, 0x0, 0x0})
r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x80000001, 0x4000)
ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f00000000c0))

01:37:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0xba, 0x0, 0x9, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x20, 0x0, 0x7f}})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000040), 0x1f, 0x80)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0)
r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SETDUPLEX(r3, 0x5016, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f, 0xba, 0x0, 0x9, 0x1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7800, 0x20, 0x0, 0x7f}}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
syz_open_dev$loop(&(0x7f0000000040), 0x1f, 0x80) (async)
ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) (async)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SOUND_PCM_READ_CHANNELS(r3, 0x80045006, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SETDUPLEX(r3, 0x5016, 0x0) (async)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) (async)

[ 1575.946052][ T3057] binder: 3043:3057 ioctl 40046205 0 returned -22
01:37:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[ 1575.988087][ T3069] binder: 3068:3069 ioctl c0306201 0 returned -14
01:37:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6c000000, 0x0, 0x0})

01:37:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x4, 0x0)
ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xffffffffffffff31, 0x0, 0x0}) (async)
r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x80000001, 0x4000)
ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f00000000c0))

01:37:08 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
socket$inet_udp(0x2, 0x2, 0x0)

01:37:08 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@release, @decrefs={0x40046307, 0x3}], 0x6b, 0x0, &(0x7f0000000040)="23bbc9c453123110ab4f370c35347052dfc91e1bdda2ecd27ae077fdbe0b93e07ffc83c3799189eccc3a1c1a94ce387427357f630fad955cd3f2e768c5ead0474481de0c46c0e75776088d373d443c2df6138dc8872d47b4ceaa416fc23c126737cabcf270cedc69a8d34a"})
r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x80000)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0)={0x3, 0x22, 0x4, 0x1f, 0x6, 0x6, 0xe4}, 0xc)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00'})
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x3, @none, 0x4, 0x1}, 0xe)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000000)=[@release, @decrefs={0x40046307, 0x3}], 0x6b, 0x0, &(0x7f0000000040)="23bbc9c453123110ab4f370c35347052dfc91e1bdda2ecd27ae077fdbe0b93e07ffc83c3799189eccc3a1c1a94ce387427357f630fad955cd3f2e768c5ead0474481de0c46c0e75776088d373d443c2df6138dc8872d47b4ceaa416fc23c126737cabcf270cedc69a8d34a"}) (async)
accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000140), &(0x7f0000000180)=0xe, 0x80000) (async)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f00000001c0)={0x3, 0x22, 0x4, 0x1f, 0x6, 0x6, 0xe4}, 0xc) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vxcan0\x00'}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
connect$bt_l2cap(r1, &(0x7f0000000240)={0x1f, 0x3, @none, 0x4, 0x1}, 0xe) (async)

[ 1576.074952][ T3074] binder: 3072:3074 ioctl 400c620e 20000400 returned -22
[ 1576.091708][ T3077] binder: 3075:3077 ioctl 40046205 0 returned -22
01:37:08 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:37:08 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

[ 1576.134638][ T3084] binder: 3081:3084 ioctl c0306201 0 returned -14
[ 1576.144623][ T3085] binder: 3075:3085 ioctl 40046205 0 returned -22
01:37:08 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x74000000, 0x0, 0x0})

01:37:08 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x4, 0x0) (async)
ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xffffffffffffff31, 0x0, 0x0}) (async)
r1 = syz_open_dev$hidraw(&(0x7f0000000080), 0x80000001, 0x4000)
ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f00000000c0))

[ 1576.192286][ T3095] binder: 3082:3095 ioctl 400c620e 20000400 returned -22
01:37:08 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/247)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000000)={0x1, 0xc6, &(0x7f0000000180)=""/198})
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3})
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x408000, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
r6 = syz_open_dev$mouse(&(0x7f0000000340), 0x203370aa, 0x10100)
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000380)={0x1, r6})
ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000300)=&(0x7f00000002c0))
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x1)
write$damon_monitor_on(r3, &(0x7f00000003c0), 0x3)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, 0x0, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1d4, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x80044}, 0x800)

01:37:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:37:09 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x6)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x402041, 0x0)
r3 = syz_open_dev$mouse(&(0x7f00000002c0), 0x80000001, 0x2000)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000300)={0x4, 0x1f})
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f00000001c0))
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000280)={0x0, 0x101})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="c6a46817e2aaaf14b575", &(0x7f0000000040)=""/3, 0x4}, 0x20)

01:37:09 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)

[ 1576.274972][ T3108] binder: 3103:3108 ioctl 40046205 0 returned -22
[ 1576.317630][ T3112] binder: 3109:3112 ioctl 400c620e 20000400 returned -22
01:37:09 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7a000000, 0x0, 0x0})

01:37:09 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/247)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000000)={0x1, 0xc6, &(0x7f0000000180)=""/198}) (async)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3}) (async)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x408000, 0x0) (async)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) (async)
r6 = syz_open_dev$mouse(&(0x7f0000000340), 0x203370aa, 0x10100)
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000380)={0x1, r6})
ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000300)=&(0x7f00000002c0))
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x1) (async)
write$damon_monitor_on(r3, &(0x7f00000003c0), 0x3) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, 0x0, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1d4, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x80044}, 0x800)

01:37:09 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0xffffffffffffffbf, 0x0, 0x0, 0xb, 0x0, 0x0})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400002)

01:37:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:37:09 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x6) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x402041, 0x0) (async)
r3 = syz_open_dev$mouse(&(0x7f00000002c0), 0x80000001, 0x2000)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000300)={0x4, 0x1f}) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f00000001c0))
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000280)={0x0, 0x101}) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="c6a46817e2aaaf14b575", &(0x7f0000000040)=""/3, 0x4}, 0x20)

[ 1576.429103][ T3127] binder: 3122:3127 ioctl 400c620e 20000400 returned -22
[ 1576.440383][ T3126] binder: 3124:3126 ioctl 40046205 0 returned -22
01:37:09 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x877e0000, 0x0, 0x0})

01:37:09 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

[ 1576.448057][ T3126] binder: 3124:3126 ioctl 40046205 0 returned -22
01:37:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xc, 0x0, &(0x7f00000002c0)=[@register_looper, @enter_looper, @register_looper], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:37:09 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0xffffffffffffffbf, 0x0, 0x0, 0xb, 0x0, 0x0}) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400002)

01:37:09 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8f7e0000, 0x0, 0x0})

01:37:09 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/247)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000000)={0x1, 0xc6, &(0x7f0000000180)=""/198})
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3})
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x408000, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
r6 = syz_open_dev$mouse(&(0x7f0000000340), 0x203370aa, 0x10100)
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000380)={0x1, r6})
ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000300)=&(0x7f00000002c0))
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x1)
write$damon_monitor_on(r3, &(0x7f00000003c0), 0x3)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, 0x0, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1d4, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x80044}, 0x800)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/247) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000000)={0x1, 0xc6, &(0x7f0000000180)=""/198}) (async)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3}) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000280), 0x408000, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) (async)
syz_open_dev$mouse(&(0x7f0000000340), 0x203370aa, 0x10100) (async)
ioctl$VHOST_SET_VRING_KICK(r5, 0x4008af20, &(0x7f0000000380)={0x1, r6}) (async)
ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f0000000300)=&(0x7f00000002c0)) (async)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x1) (async)
write$damon_monitor_on(r3, &(0x7f00000003c0), 0x3) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, 0x0, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000ac0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000880)={0x1d4, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x1d4}, 0x1, 0x0, 0x0, 0x80044}, 0x800) (async)

[ 1576.545123][ T3147] binder: 3140:3147 ioctl 400c620e 20000400 returned -22
[ 1576.564986][ T3145] binder: 3144:3145 ioctl 40046205 0 returned -22
01:37:09 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x6)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x402041, 0x0)
r3 = syz_open_dev$mouse(&(0x7f00000002c0), 0x80000001, 0x2000)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000300)={0x4, 0x1f})
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f00000001c0))
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000280)={0x0, 0x101})
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="c6a46817e2aaaf14b575", &(0x7f0000000040)=""/3, 0x4}, 0x20)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000200), &(0x7f0000000240)=0x6) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x402041, 0x0) (async)
syz_open_dev$mouse(&(0x7f00000002c0), 0x80000001, 0x2000) (async)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000300)={0x4, 0x1f}) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$SNDCTL_DSP_GETTRIGGER(r2, 0x80045010, &(0x7f00000001c0)) (async)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000280)={0x0, 0x101}) (async)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r2, &(0x7f0000000000)="c6a46817e2aaaf14b575", &(0x7f0000000040)=""/3, 0x4}, 0x20) (async)

01:37:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f00000002c0)=[@register_looper, @enter_looper], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:37:09 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000))
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1708, 0x80042)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000003c0)=ANY=[@ANYBLOB="84e800000b0000000d0d0f8c818903818c870d66521f6b"])
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x11, r1, 0x4)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000440))
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000480)={<r5=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r5})
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x0, r6})
ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000400)={0x3f, 0x5})
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000200)={0x944, 0x0, "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"})
ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080))

01:37:09 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0xffffffffffffffbf, 0x0, 0x0, 0xb, 0x0, 0x0})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400002)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0xffffffffffffffbf, 0x0, 0x0, 0xb, 0x0, 0x0}) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x400002) (async)

[ 1576.692825][ T3158] binder: 3154:3158 ioctl 400c620e 20000400 returned -22
01:37:09 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x907e0000, 0x0, 0x0})

01:37:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f00000002c0)=[@register_looper, @enter_looper], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:37:09 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f0000000000))

01:37:09 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getrusage(0xffffffffffffffff, &(0x7f0000000000))
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000180))
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000001c0)={0x2})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f00000000c0))

01:37:09 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xff000000, 0x0, 0x0})

01:37:09 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000))
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1708, 0x80042)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000003c0)=ANY=[@ANYBLOB="84e800000b0000000d0d0f8c818903818c870d66521f6b"])
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x11, r1, 0x4)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000440))
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000480)={<r5=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r5})
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x0, r6})
ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000400)={0x3f, 0x5})
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000200)={0x944, 0x0, "6fd37293e2774f6618a6f60d94e4b871e3fab3b6440c1dcbf0e02053052deb908f32c92b8dba16b5cee2dd151874cdbc4056e4c8b9761ea375485afdda9cccddf9d6a0d2824eb85c5d58f4ff45684739345645fb35f5beb3b0a7fb842e18babaa67cc5de27506e718ad4820e7fef8c0a4dc65319d1d189280f6c31ad747c18d60959b3ca3a52c2a6b94267f4622f3504091d48a7d188cd3a21a4c5714574e0ed9edf66327f051d13b654ff94ebba50a97618884e40c5529353df8d95fcb6d826f04b33b6cb1bb97d88c43b3b5935af856ca7faba59159b54a1b6f15709d3d4abc2162779b0aa612b5317af0e25938b8069290393fc7da32708a1a416d7370c72"})
ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080))
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1}) (async)
ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) (async)
syz_open_dev$usbfs(&(0x7f0000000180), 0x1708, 0x80042) (async)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000003c0)=ANY=[@ANYBLOB="84e800000b0000000d0d0f8c818903818c870d66521f6b"]) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x11, r1, 0x4) (async)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000440)) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000480)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r5}) (async)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x0, r6}) (async)
ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000400)={0x3f, 0x5}) (async)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000200)={0x944, 0x0, "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"}) (async)
ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080)) (async)

[ 1576.818073][ T3181] binder: 3176:3181 ioctl 400c620e 20000400 returned -22
01:37:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f00000002c0)=[@register_looper, @enter_looper], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:37:09 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1)

01:37:09 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f0000000000))

01:37:09 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
getrusage(0xffffffffffffffff, &(0x7f0000000000)) (async, rerun: 64)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000180)) (async)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000001c0)={0x2}) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1}) (async)
ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f00000000c0))

01:37:09 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0})

01:37:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f00000002c0)=[@register_looper, @register_looper], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

[ 1576.940757][ T3198] binder: 3196:3198 ioctl 400c620e 20000400 returned -22
01:37:09 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) (async)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) (async)

01:37:09 executing program 1:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
getrusage(0xffffffffffffffff, &(0x7f0000000000)) (async)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$HIDIOCGRDESCSIZE(0xffffffffffffffff, 0x80044801, &(0x7f0000000180)) (async)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f00000001c0)={0x2}) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f00000000c0))

01:37:09 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$SOUND_PCM_READ_BITS(0xffffffffffffffff, 0x80045005, &(0x7f0000000000))

01:37:09 executing program 5:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000))
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1708, 0x80042)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000003c0)=ANY=[@ANYBLOB="84e800000b0000000d0d0f8c818903818c870d66521f6b"])
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x11, r1, 0x4)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000440))
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000480)={<r5=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r5})
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x0, r6})
ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000400)={0x3f, 0x5})
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000200)={0x944, 0x0, "6fd37293e2774f6618a6f60d94e4b871e3fab3b6440c1dcbf0e02053052deb908f32c92b8dba16b5cee2dd151874cdbc4056e4c8b9761ea375485afdda9cccddf9d6a0d2824eb85c5d58f4ff45684739345645fb35f5beb3b0a7fb842e18babaa67cc5de27506e718ad4820e7fef8c0a4dc65319d1d189280f6c31ad747c18d60959b3ca3a52c2a6b94267f4622f3504091d48a7d188cd3a21a4c5714574e0ed9edf66327f051d13b654ff94ebba50a97618884e40c5529353df8d95fcb6d826f04b33b6cb1bb97d88c43b3b5935af856ca7faba59159b54a1b6f15709d3d4abc2162779b0aa612b5317af0e25938b8069290393fc7da32708a1a416d7370c72"})
ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080))
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1}) (async)
ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000)) (async)
syz_open_dev$usbfs(&(0x7f0000000180), 0x1708, 0x80042) (async)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000003c0)=ANY=[@ANYBLOB="84e800000b0000000d0d0f8c818903818c870d66521f6b"]) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x11, r1, 0x4) (async)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000440)) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000480)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r5}) (async)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x0, r6}) (async)
ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000400)={0x3f, 0x5}) (async)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000200)={0x944, 0x0, "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"}) (async)
ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080)) (async)

01:37:09 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0})

[ 1577.072209][ T3219] binder: 3218:3219 ioctl 400c620e 20000400 returned -22
01:37:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f00000002c0)=[@register_looper, @register_looper], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:37:09 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) (async)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x0) (async)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) (async)

01:37:09 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0})

01:37:09 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4)

01:37:09 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1577.172846][ T3237] binder: 3236:3237 ioctl 400c620e 20000400 returned -22
01:37:09 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f00000002c0)=[@register_looper, @register_looper], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:37:10 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4)

01:37:10 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0)

01:37:10 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

01:37:10 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000080))
mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x4000010, r1, 0x0)

01:37:10 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0})

[ 1577.298975][ T3261] binder: 3258:3261 ioctl 400c620e 20000400 returned -22
01:37:10 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0)

01:37:10 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_udp_int(r1, 0x11, 0x65, &(0x7f0000000000), &(0x7f0000000040)=0x4)

01:37:10 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f00000002c0)=[@enter_looper, @register_looper], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:37:10 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000080))
mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x4000010, r1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000080)) (async)
mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x4000010, r1, 0x0) (async)

01:37:10 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x802, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:10 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0})

01:37:10 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x2, 0x0) (async)

[ 1577.441804][ T3280] binder: 3276:3280 ioctl 400c620e 20000400 returned -22
01:37:10 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:10 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x8, 0x0, &(0x7f00000002c0)=[@enter_looper, @register_looper], 0x0, 0x0, 0x0})

01:37:10 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x110, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x2, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/79, 0x4f, 0x0, 0x12}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}, 0x1000}, @increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x2, 0xc}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x3}, @decrefs, @decrefs={0x40046307, 0x2}, @release={0x40046306, 0x2}, @increfs={0x40046304, 0x2}], 0xc6, 0x0, &(0x7f00000005c0)="f116dd511d555204726cb683256b182b1c3fd4883dcb8ab6aedfa9d82391889a2ff3c99e9ca0adb0923386509c5df601253738cc85440ffc37c3d0998b98b1deb285babff9b72f035b086ad9ec97438c0ef2adfc7d35861c4536fc5c5f1b1c735f6602d43d3d6bd8716bfbf9d8c4b009f7d3c06ac43fdc0e5051796e7a437bab24bf280e9e74828aab408b5f57a3ba48aa1e2e8b9c3f2939353092fbfcfb8738cdbbd9dc9957afd3819ae639d74e35d59c60604b623f0b639ad6b4785370ba0c3b18f92cbc47"})
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r5, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}}, 0x0)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1f8, 0x12, 0xfdf524f791567e57, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x1, 0x5, {0x4e24, 0x4e22, [0x2, 0x63, 0x7, 0x200], [0x0, 0x5, 0x7fff, 0x4], r7, [0x9, 0x8000]}, 0x0, 0x7fff}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "b489fa3800f6f446"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "3de1ecb168aedc7fb3d7ee7dade32ac6821fe881ed68cbde29"}, @INET_DIAG_REQ_BYTECODE={0x90, 0x1, "596ad76530a5df9612756b77864c610235bdfda0c4fec462494b0b153ab7c2ad6b4a7cb4aba0e260108d1e8d8717ec5683bd476505c7c16529fb28e4daa4817960552dbaa75006457e536bc09aa36ef4c77e2e1132d59ad347f92135fef35a83c088ca661c2eb127fdf1ecf9fa64267b9b54aa67d26a10a3ad9d31c94a5f815b76a4307a17526f248d51be1a"}, @INET_DIAG_REQ_BYTECODE={0x57, 0x1, "a122fe5f9cf6d40454769fffab53cf38e33786d66ca41b762f1743e86fb181b676d526d9e2c1b51baa7c1f766bb3d5497cf26a6bd3eb50d8d02299e2cae5352707ea5846b1e494608f169fa13bf728d686e3ef"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "43268118fc88d546ff290b6a0ece4360ade611b4674f148df2da7fb9df47f0914aef43659d5e7d9c41f4537615abbfe2504ebdae53d5043a8b5ec5e7b8b2b4adc66a961671fd8a742af97d21dc6517a634ab751a3cb8088e83741700f7afc1c3961c"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "141fd748b586936649cbc1c48099f6b056e43e8e7b59eb14583d965e2f8afe86af30fbe7b32ad2667b656b"}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40c0}, 0x1)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0xd2200c9d50bcc4eb}, 0x44045)

01:37:10 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000080)) (async)
mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x4000010, r1, 0x0)

01:37:10 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0})

[ 1577.558248][ T3297] binder: 3293:3297 ioctl 400c620e 20000400 returned -22
01:37:10 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r3})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r3, 0x4)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000240)=0x43)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x1})
ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080)={0x1, r3})
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f0000000200))
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000300))

01:37:10 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:10 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0})

01:37:10 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', <r2=>0x0, 0x29, 0x2e, 0xff, 0x800, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x10, 0x7800, 0xff, 0x100}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'gre0\x00', r2, 0x80, 0x8, 0xff, 0x0, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x68, 0x0, 0x8b, 0x4, 0x0, @empty, @broadcast, {[@end, @noop, @timestamp_prespec={0x44, 0x24, 0x54, 0x3, 0x5, [{@rand_addr=0x64010102, 0x2}, {@multicast1, 0x5}, {@private=0xa010102, 0x2}, {@multicast2, 0x3}]}, @ssrr={0x89, 0x7, 0xcf, [@broadcast]}, @ssrr={0x89, 0x3, 0xd1}]}}}}})
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040))

01:37:10 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0})

01:37:10 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async, rerun: 32)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (rerun: 32)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x110, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x2, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/79, 0x4f, 0x0, 0x12}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}, 0x1000}, @increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x2, 0xc}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x3}, @decrefs, @decrefs={0x40046307, 0x2}, @release={0x40046306, 0x2}, @increfs={0x40046304, 0x2}], 0xc6, 0x0, &(0x7f00000005c0)="f116dd511d555204726cb683256b182b1c3fd4883dcb8ab6aedfa9d82391889a2ff3c99e9ca0adb0923386509c5df601253738cc85440ffc37c3d0998b98b1deb285babff9b72f035b086ad9ec97438c0ef2adfc7d35861c4536fc5c5f1b1c735f6602d43d3d6bd8716bfbf9d8c4b009f7d3c06ac43fdc0e5051796e7a437bab24bf280e9e74828aab408b5f57a3ba48aa1e2e8b9c3f2939353092fbfcfb8738cdbbd9dc9957afd3819ae639d74e35d59c60604b623f0b639ad6b4785370ba0c3b18f92cbc47"})
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r5, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}}, 0x0) (async, rerun: 32)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1f8, 0x12, 0xfdf524f791567e57, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x1, 0x5, {0x4e24, 0x4e22, [0x2, 0x63, 0x7, 0x200], [0x0, 0x5, 0x7fff, 0x4], r7, [0x9, 0x8000]}, 0x0, 0x7fff}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "b489fa3800f6f446"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "3de1ecb168aedc7fb3d7ee7dade32ac6821fe881ed68cbde29"}, @INET_DIAG_REQ_BYTECODE={0x90, 0x1, "596ad76530a5df9612756b77864c610235bdfda0c4fec462494b0b153ab7c2ad6b4a7cb4aba0e260108d1e8d8717ec5683bd476505c7c16529fb28e4daa4817960552dbaa75006457e536bc09aa36ef4c77e2e1132d59ad347f92135fef35a83c088ca661c2eb127fdf1ecf9fa64267b9b54aa67d26a10a3ad9d31c94a5f815b76a4307a17526f248d51be1a"}, @INET_DIAG_REQ_BYTECODE={0x57, 0x1, "a122fe5f9cf6d40454769fffab53cf38e33786d66ca41b762f1743e86fb181b676d526d9e2c1b51baa7c1f766bb3d5497cf26a6bd3eb50d8d02299e2cae5352707ea5846b1e494608f169fa13bf728d686e3ef"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "43268118fc88d546ff290b6a0ece4360ade611b4674f148df2da7fb9df47f0914aef43659d5e7d9c41f4537615abbfe2504ebdae53d5043a8b5ec5e7b8b2b4adc66a961671fd8a742af97d21dc6517a634ab751a3cb8088e83741700f7afc1c3961c"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "141fd748b586936649cbc1c48099f6b056e43e8e7b59eb14583d965e2f8afe86af30fbe7b32ad2667b656b"}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40c0}, 0x1) (rerun: 32)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0xd2200c9d50bcc4eb}, 0x44045)

[ 1577.702879][ T3315] binder: 3310:3315 ioctl 400c620e 20000400 returned -22
[ 1577.727238][ T3316] binder: 3312:3316 ioctl 40046205 0 returned -22
01:37:10 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r3}) (async)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r3, 0x4) (async)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000240)=0x43) (async)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x1}) (async)
ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080)={0x1, r3}) (async)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f0000000200)) (async)
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000300))

01:37:10 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:10 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000080))
mmap$dsp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000, 0x4000010, r1, 0x0)

[ 1577.728658][ T3319] binder: 3313:3319 ioctl 400c620e 20000400 returned -22
01:37:10 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x4800000000000000, 0x0, 0x0})

[ 1577.794694][ T3326] binder: 3325:3326 ioctl 400c620e 20000400 returned -22
[ 1577.849739][ T3332] binder: 3329:3332 ioctl 40046205 0 returned -22
01:37:10 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000180)={&(0x7f0000000140)=[r1, 0x0, 0x0, 0x0, 0x0, r2], 0x2, 0x6, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:10 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r3})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r3, 0x4)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000240)=0x43)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x1})
ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080)={0x1, r3})
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f0000000200))
r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000300))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r3}) (async)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r3, 0x4) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async)
ioctl$RNDZAPENTCNT(r3, 0x5204, &(0x7f0000000240)=0x43) (async)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000000)={0x1}) (async)
ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080)={0x1, r3}) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) (async)
ioctl$VHOST_GET_VRING_BASE(r5, 0xc008af12, &(0x7f0000000200)) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_VRING_CALL(r6, 0x4008af21, &(0x7f0000000300)) (async)

01:37:10 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x110, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x2, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/79, 0x4f, 0x0, 0x12}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}, 0x1000}, @increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x2, 0xc}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x3}, @decrefs, @decrefs={0x40046307, 0x2}, @release={0x40046306, 0x2}, @increfs={0x40046304, 0x2}], 0xc6, 0x0, &(0x7f00000005c0)="f116dd511d555204726cb683256b182b1c3fd4883dcb8ab6aedfa9d82391889a2ff3c99e9ca0adb0923386509c5df601253738cc85440ffc37c3d0998b98b1deb285babff9b72f035b086ad9ec97438c0ef2adfc7d35861c4536fc5c5f1b1c735f6602d43d3d6bd8716bfbf9d8c4b009f7d3c06ac43fdc0e5051796e7a437bab24bf280e9e74828aab408b5f57a3ba48aa1e2e8b9c3f2939353092fbfcfb8738cdbbd9dc9957afd3819ae639d74e35d59c60604b623f0b639ad6b4785370ba0c3b18f92cbc47"})
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r5, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}}, 0x0)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1f8, 0x12, 0xfdf524f791567e57, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x1, 0x5, {0x4e24, 0x4e22, [0x2, 0x63, 0x7, 0x200], [0x0, 0x5, 0x7fff, 0x4], r7, [0x9, 0x8000]}, 0x0, 0x7fff}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "b489fa3800f6f446"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "3de1ecb168aedc7fb3d7ee7dade32ac6821fe881ed68cbde29"}, @INET_DIAG_REQ_BYTECODE={0x90, 0x1, "596ad76530a5df9612756b77864c610235bdfda0c4fec462494b0b153ab7c2ad6b4a7cb4aba0e260108d1e8d8717ec5683bd476505c7c16529fb28e4daa4817960552dbaa75006457e536bc09aa36ef4c77e2e1132d59ad347f92135fef35a83c088ca661c2eb127fdf1ecf9fa64267b9b54aa67d26a10a3ad9d31c94a5f815b76a4307a17526f248d51be1a"}, @INET_DIAG_REQ_BYTECODE={0x57, 0x1, "a122fe5f9cf6d40454769fffab53cf38e33786d66ca41b762f1743e86fb181b676d526d9e2c1b51baa7c1f766bb3d5497cf26a6bd3eb50d8d02299e2cae5352707ea5846b1e494608f169fa13bf728d686e3ef"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "43268118fc88d546ff290b6a0ece4360ade611b4674f148df2da7fb9df47f0914aef43659d5e7d9c41f4537615abbfe2504ebdae53d5043a8b5ec5e7b8b2b4adc66a961671fd8a742af97d21dc6517a634ab751a3cb8088e83741700f7afc1c3961c"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "141fd748b586936649cbc1c48099f6b056e43e8e7b59eb14583d965e2f8afe86af30fbe7b32ad2667b656b"}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40c0}, 0x1)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0xd2200c9d50bcc4eb}, 0x44045)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0) (async)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000006c0)={0x110, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000200)={@fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x1, 0x2, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f0000000180)=""/79, 0x4f, 0x0, 0x12}}, &(0x7f0000000280)={0x0, 0x18, 0x38}}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000002c0)={@fd={0x66642a85, 0x0, r0}, @flat=@handle={0x73682a85, 0xa, 0x2}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000340)={0x0, 0x18, 0x30}}, 0x1000}, @increfs, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000380)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r0}, @fda={0x66646185, 0x6, 0x2, 0xc}}, &(0x7f0000000440)={0x0, 0x18, 0x30}}}, @increfs_done={0x40106308, 0x3}, @decrefs, @decrefs={0x40046307, 0x2}, @release={0x40046306, 0x2}, @increfs={0x40046304, 0x2}], 0xc6, 0x0, &(0x7f00000005c0)="f116dd511d555204726cb683256b182b1c3fd4883dcb8ab6aedfa9d82391889a2ff3c99e9ca0adb0923386509c5df601253738cc85440ffc37c3d0998b98b1deb285babff9b72f035b086ad9ec97438c0ef2adfc7d35861c4536fc5c5f1b1c735f6602d43d3d6bd8716bfbf9d8c4b009f7d3c06ac43fdc0e5051796e7a437bab24bf280e9e74828aab408b5f57a3ba48aa1e2e8b9c3f2939353092fbfcfb8738cdbbd9dc9957afd3819ae639d74e35d59c60604b623f0b639ad6b4785370ba0c3b18f92cbc47"}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r5, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}}, 0x0) (async)
sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f0000000980)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x1f8, 0x12, 0xfdf524f791567e57, 0x70bd2b, 0x25dfdbfd, {0xa, 0x0, 0x1, 0x5, {0x4e24, 0x4e22, [0x2, 0x63, 0x7, 0x200], [0x0, 0x5, 0x7fff, 0x4], r7, [0x9, 0x8000]}, 0x0, 0x7fff}, [@INET_DIAG_REQ_BYTECODE={0xc, 0x1, "b489fa3800f6f446"}, @INET_DIAG_REQ_BYTECODE={0x1d, 0x1, "3de1ecb168aedc7fb3d7ee7dade32ac6821fe881ed68cbde29"}, @INET_DIAG_REQ_BYTECODE={0x90, 0x1, "596ad76530a5df9612756b77864c610235bdfda0c4fec462494b0b153ab7c2ad6b4a7cb4aba0e260108d1e8d8717ec5683bd476505c7c16529fb28e4daa4817960552dbaa75006457e536bc09aa36ef4c77e2e1132d59ad347f92135fef35a83c088ca661c2eb127fdf1ecf9fa64267b9b54aa67d26a10a3ad9d31c94a5f815b76a4307a17526f248d51be1a"}, @INET_DIAG_REQ_BYTECODE={0x57, 0x1, "a122fe5f9cf6d40454769fffab53cf38e33786d66ca41b762f1743e86fb181b676d526d9e2c1b51baa7c1f766bb3d5497cf26a6bd3eb50d8d02299e2cae5352707ea5846b1e494608f169fa13bf728d686e3ef"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "43268118fc88d546ff290b6a0ece4360ade611b4674f148df2da7fb9df47f0914aef43659d5e7d9c41f4537615abbfe2504ebdae53d5043a8b5ec5e7b8b2b4adc66a961671fd8a742af97d21dc6517a634ab751a3cb8088e83741700f7afc1c3961c"}, @INET_DIAG_REQ_BYTECODE={0x2f, 0x1, "141fd748b586936649cbc1c48099f6b056e43e8e7b59eb14583d965e2f8afe86af30fbe7b32ad2667b656b"}]}, 0x1f8}, 0x1, 0x0, 0x0, 0x40c0}, 0x1) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x800, 0x70bd26, 0x25dfdbff, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @broadcast}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x4}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x9}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0xd2200c9d50bcc4eb}, 0x44045) (async)

01:37:10 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0})

01:37:10 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x4c00000000000000, 0x0, 0x0})

[ 1577.908137][ T3347] binder: 3346:3347 ioctl 400c620e 20000400 returned -22
[ 1577.998937][ T3356] binder: 3352:3356 ioctl 40046205 0 returned -22
[ 1578.036684][ T3363] binder: 3361:3363 ioctl 400c620e 20000400 returned -22
[ 1578.041065][ T3365] binder: 3354:3365 ioctl 400c620e 20000400 returned -22
01:37:10 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', <r2=>0x0, 0x29, 0x2e, 0xff, 0x800, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x10, 0x7800, 0xff, 0x100}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'gre0\x00', r2, 0x80, 0x8, 0xff, 0x0, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x68, 0x0, 0x8b, 0x4, 0x0, @empty, @broadcast, {[@end, @noop, @timestamp_prespec={0x44, 0x24, 0x54, 0x3, 0x5, [{@rand_addr=0x64010102, 0x2}, {@multicast1, 0x5}, {@private=0xa010102, 0x2}, {@multicast2, 0x3}]}, @ssrr={0x89, 0x7, 0xcf, [@broadcast]}, @ssrr={0x89, 0x3, 0xd1}]}}}}}) (async)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040))

01:37:10 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={<r1=>0x0}) (async, rerun: 32)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r2=>0x0}) (rerun: 32)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000180)={&(0x7f0000000140)=[r1, 0x0, 0x0, 0x0, 0x0, r2], 0x2, 0x6, 0x1}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:10 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6800000000000000, 0x0, 0x0})

01:37:10 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0})

01:37:10 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x800, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000006c0))
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00'})
ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0)

01:37:10 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f00000000c0)={0x39, 0x0, 0x0, 0x56, 0x0, 0x0})
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
socketpair(0x6, 0x1, 0x802c, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000240)=0x20, 0x4)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x1b, 0xd, "5eb44a3a1842a0a7af1d59d53fab19ec9d9ed4a493d935e827d14e568011099a511182fbeaf511567d76c42523ccf9c7264d49c65ea36870e161973d3da05758", "23688652bbb463c48be426db276a4e1324d605b5574558f38772ffa8061d2f936a8f5983308fea40a8b5b4febce11c4d475dcf3c0c928fc928abf8d1855b805b", "b6b896bf941a4747ac9d6d3d19f658e531733712c3da38f8d4e1d5885730ebdd", [0x7, 0x6]})

[ 1578.106084][ T3372] binder: 3352:3372 ioctl 40046205 0 returned -22
01:37:10 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', <r2=>0x0, 0x29, 0x2e, 0xff, 0x800, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x10, 0x7800, 0xff, 0x100}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'gre0\x00', r2, 0x80, 0x8, 0xff, 0x0, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x68, 0x0, 0x8b, 0x4, 0x0, @empty, @broadcast, {[@end, @noop, @timestamp_prespec={0x44, 0x24, 0x54, 0x3, 0x5, [{@rand_addr=0x64010102, 0x2}, {@multicast1, 0x5}, {@private=0xa010102, 0x2}, {@multicast2, 0x3}]}, @ssrr={0x89, 0x7, 0xcf, [@broadcast]}, @ssrr={0x89, 0x3, 0xd1}]}}}}})
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040))

01:37:10 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6c00000000000000, 0x0, 0x0})

[ 1578.164141][ T3387] binder: 3383:3387 ioctl 400c620e 20000400 returned -22
[ 1578.179669][ T3391] binder: 3390:3391 ioctl 400c620e 20000400 returned -22
01:37:10 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000180)={&(0x7f0000000140)=[r1, 0x0, 0x0, 0x0, 0x0, r2], 0x2, 0x6, 0x1})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(0xffffffffffffffff, 0xc02064c3, &(0x7f0000000180)={&(0x7f0000000140)=[r1, 0x0, 0x0, 0x0, 0x0, r2], 0x2, 0x6, 0x1}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

01:37:10 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0) (async)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x800, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000006c0)) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00'})
ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0)

01:37:11 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f00000000c0)={0x39, 0x0, 0x0, 0x56, 0x0, 0x0})
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000040)) (async, rerun: 64)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async, rerun: 64)
socketpair(0x6, 0x1, 0x802c, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000240)=0x20, 0x4) (async)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x1b, 0xd, "5eb44a3a1842a0a7af1d59d53fab19ec9d9ed4a493d935e827d14e568011099a511182fbeaf511567d76c42523ccf9c7264d49c65ea36870e161973d3da05758", "23688652bbb463c48be426db276a4e1324d605b5574558f38772ffa8061d2f936a8f5983308fea40a8b5b4febce11c4d475dcf3c0c928fc928abf8d1855b805b", "b6b896bf941a4747ac9d6d3d19f658e531733712c3da38f8d4e1d5885730ebdd", [0x7, 0x6]})

01:37:11 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7400000000000000, 0x0, 0x0})

[ 1578.290074][ T3403] binder: 3401:3403 ioctl 400c620e 20000400 returned -22
[ 1578.396043][ T3420] binder: 3419:3420 ioctl 400c620e 20000400 returned -22
01:37:11 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', <r2=>0x0, 0x29, 0x2e, 0xff, 0x800, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x10, 0x7800, 0xff, 0x100}})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'gre0\x00', r2, 0x80, 0x8, 0xff, 0x0, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x68, 0x0, 0x8b, 0x4, 0x0, @empty, @broadcast, {[@end, @noop, @timestamp_prespec={0x44, 0x24, 0x54, 0x3, 0x5, [{@rand_addr=0x64010102, 0x2}, {@multicast1, 0x5}, {@private=0xa010102, 0x2}, {@multicast2, 0x3}]}, @ssrr={0x89, 0x7, 0xcf, [@broadcast]}, @ssrr={0x89, 0x3, 0xd1}]}}}}})
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x802, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
getsockopt$inet_udp_int(r1, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(0xffffffffffffffff, 0x89f4, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x29, 0x2e, 0xff, 0x800, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @loopback, 0x10, 0x7800, 0xff, 0x100}}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f0000000140)={'gre0\x00', r2, 0x80, 0x8, 0xff, 0x0, {{0x11, 0x4, 0x1, 0x7, 0x44, 0x68, 0x0, 0x8b, 0x4, 0x0, @empty, @broadcast, {[@end, @noop, @timestamp_prespec={0x44, 0x24, 0x54, 0x3, 0x5, [{@rand_addr=0x64010102, 0x2}, {@multicast1, 0x5}, {@private=0xa010102, 0x2}, {@multicast2, 0x3}]}, @ssrr={0x89, 0x7, 0xcf, [@broadcast]}, @ssrr={0x89, 0x3, 0xd1}]}}}}}) (async)
ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) (async)

01:37:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0})

01:37:11 executing program 5:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder0\x00', 0x802, 0x0) (async)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) (async, rerun: 64)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x800, 0x0) (async, rerun: 64)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000006c0)) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg2\x00'})
ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0)

01:37:11 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)=0xc)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:11 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x7a00000000000000, 0x0, 0x0})

01:37:11 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f00000000c0)={0x39, 0x0, 0x0, 0x56, 0x0, 0x0})
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
socketpair(0x6, 0x1, 0x802c, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000240)=0x20, 0x4)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x1b, 0xd, "5eb44a3a1842a0a7af1d59d53fab19ec9d9ed4a493d935e827d14e568011099a511182fbeaf511567d76c42523ccf9c7264d49c65ea36870e161973d3da05758", "23688652bbb463c48be426db276a4e1324d605b5574558f38772ffa8061d2f936a8f5983308fea40a8b5b4febce11c4d475dcf3c0c928fc928abf8d1855b805b", "b6b896bf941a4747ac9d6d3d19f658e531733712c3da38f8d4e1d5885730ebdd", [0x7, 0x6]})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f00000000c0)={0x39, 0x0, 0x0, 0x56, 0x0, 0x0}) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async)
socketpair(0x6, 0x1, 0x802c, &(0x7f0000000080)) (async)
setsockopt$bt_l2cap_L2CAP_LM(r2, 0x6, 0x3, &(0x7f0000000240)=0x20, 0x4) (async)
ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x9, 0x0, 0x0, 0x1b, 0xd, "5eb44a3a1842a0a7af1d59d53fab19ec9d9ed4a493d935e827d14e568011099a511182fbeaf511567d76c42523ccf9c7264d49c65ea36870e161973d3da05758", "23688652bbb463c48be426db276a4e1324d605b5574558f38772ffa8061d2f936a8f5983308fea40a8b5b4febce11c4d475dcf3c0c928fc928abf8d1855b805b", "b6b896bf941a4747ac9d6d3d19f658e531733712c3da38f8d4e1d5885730ebdd", [0x7, 0x6]}) (async)

01:37:11 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000000))
r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x1708, 0x80042)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x8008551d, &(0x7f00000003c0)=ANY=[@ANYBLOB="84e800000b0000000d0d0f8c818903818c870d66521f6b"])
r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
mmap$usbfs(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2000001, 0x11, r1, 0x4)
ioctl$USBDEVFS_CONNECTINFO(0xffffffffffffffff, 0x40085511, &(0x7f0000000440))
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000480)={<r5=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000380)={r5})
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x0, r6})
ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000400)={0x3f, 0x5})
ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, &(0x7f0000000200)={0x944, 0x0, "6fd37293e2774f6618a6f60d94e4b871e3fab3b6440c1dcbf0e02053052deb908f32c92b8dba16b5cee2dd151874cdbc4056e4c8b9761ea375485afdda9cccddf9d6a0d2824eb85c5d58f4ff45684739345645fb35f5beb3b0a7fb842e18babaa67cc5de27506e718ad4820e7fef8c0a4dc65319d1d189280f6c31ad747c18d60959b3ca3a52c2a6b94267f4622f3504091d48a7d188cd3a21a4c5714574e0ed9edf66327f051d13b654ff94ebba50a97618884e40c5529353df8d95fcb6d826f04b33b6cb1bb97d88c43b3b5935af856ca7faba59159b54a1b6f15709d3d4abc2162779b0aa612b5317af0e25938b8069290393fc7da32708a1a416d7370c72"})
ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080))

01:37:11 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)=0xc)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) (async)
ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)=0xc) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

01:37:11 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x877e000000000000, 0x0, 0x0})

[ 1578.523050][ T3428] binder: 3423:3428 ioctl 400c620e 20000400 returned -22
[ 1578.524902][ T3429] binder: 3426:3429 ioctl 400c620e 20000400 returned -22
01:37:11 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000040)=""/250)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:11 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0xffffffffffffffd3, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:11 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x8f7e000000000000, 0x0, 0x0})

[ 1578.635705][ T3447] binder: 3445:3447 ioctl 400c620e 20000400 returned -22
[ 1578.692568][ T3459] binder: 3453:3459 ioctl 40046205 0 returned -22
01:37:11 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x2, 0x0)

01:37:11 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0) (async)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000040)=""/250)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:11 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04)
ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000000)=0xc) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0xc, 0x0, &(0x7f00000002c0)=[@register_looper, @enter_looper, @register_looper], 0xab, 0x0, &(0x7f0000000340)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52fa02e99af69a2ecc77688155622cb680bd7eb0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4bbb86855d42f53fc9516283fcd37c084260f580ec"})

01:37:11 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0xffffffffffffffd3, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0xffffffffffffffd3, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

01:37:11 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x2, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000040)=""/250) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:11 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x907e000000000000, 0x0, 0x0})

[ 1578.821450][ T3471] binder: 3470:3471 ioctl 40046205 0 returned -22
[ 1578.837588][ T3473] binder: 3468:3473 ioctl 400c620e 20000400 returned -22
01:37:11 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4d0802, 0x0)
r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)

01:37:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0})

01:37:11 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x2, 0x0)

01:37:11 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0xffffffffffffffd3, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:11 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x805, 0x40040)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x7fff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg0\x00', <r2=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000300)={'syztnl1\x00', <r3=>0x0, 0x80, 0x10, 0x9, 0x8a, {{0x3c, 0x4, 0x0, 0x0, 0xf0, 0x66, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x4c, 0xe7, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x6}, {@empty, 0x461}, {@broadcast, 0x4}, {@loopback, 0x8}, {@remote, 0x2}, {@remote, 0x9a}, {@remote, 0xffffffff}, {@multicast1, 0x401}, {@multicast2, 0x200}]}, @timestamp_prespec={0x44, 0x4c, 0x24, 0x3, 0x4, [{@multicast1, 0x7}, {@multicast2}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@loopback, 0x1}, {@rand_addr=0x64010100, 0x7}, {@multicast1, 0x7}, {@private=0xa010102, 0x7}, {@empty, 0x7fffffff}]}, @rr={0x7, 0x23, 0xa8, [@local, @loopback, @local, @multicast2, @private=0xa010101, @empty, @broadcast, @rand_addr=0x64010100]}, @timestamp={0x44, 0x18, 0x55, 0x0, 0xe, [0x3ff, 0x764, 0x6, 0x101, 0x9]}, @rr={0x7, 0x7, 0x28, [@local]}]}}}}})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r4, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x160, 0x0, 0x400, 0xfffffff8, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000804}, 0x4008840)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000000))
mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x2040010, r1, 0x8)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r1, &(0x7f0000000000)="e70e61525b39d619a69fdfb357ea", &(0x7f0000000140)=""/203}, 0x20)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:11 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0xff00000000000000, 0x0, 0x0})

[ 1578.923509][ T3486] binder: 3482:3486 ioctl 40046205 0 returned -22
[ 1578.968213][ T3488] binder: 3484:3488 ioctl 400c620e 20000400 returned -22
01:37:11 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4d0802, 0x0)
r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)

01:37:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0})

01:37:11 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8000000000000001)

[ 1579.004423][ T3492] binder: 3491:3492 ioctl 400c620e 20000400 returned -22
01:37:11 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async, rerun: 64)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x2, 0x0) (rerun: 64)

[ 1579.085668][ T3501] binder: 3498:3501 ioctl 40046205 0 returned -22
[ 1579.086637][ T3500] binder: 3494:3500 ioctl 400c620e 20000400 returned -22
01:37:11 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2, 0x0})

01:37:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0})

01:37:11 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4d0802, 0x0)
r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x4d0802, 0x0) (async)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async)
ioctl$LOOP_SET_FD(r1, 0x4c00, r2) (async)

01:37:11 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x805, 0x40040)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x7fff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg0\x00', <r2=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000300)={'syztnl1\x00', <r3=>0x0, 0x80, 0x10, 0x9, 0x8a, {{0x3c, 0x4, 0x0, 0x0, 0xf0, 0x66, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x4c, 0xe7, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x6}, {@empty, 0x461}, {@broadcast, 0x4}, {@loopback, 0x8}, {@remote, 0x2}, {@remote, 0x9a}, {@remote, 0xffffffff}, {@multicast1, 0x401}, {@multicast2, 0x200}]}, @timestamp_prespec={0x44, 0x4c, 0x24, 0x3, 0x4, [{@multicast1, 0x7}, {@multicast2}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@loopback, 0x1}, {@rand_addr=0x64010100, 0x7}, {@multicast1, 0x7}, {@private=0xa010102, 0x7}, {@empty, 0x7fffffff}]}, @rr={0x7, 0x23, 0xa8, [@local, @loopback, @local, @multicast2, @private=0xa010101, @empty, @broadcast, @rand_addr=0x64010100]}, @timestamp={0x44, 0x18, 0x55, 0x0, 0xe, [0x3ff, 0x764, 0x6, 0x101, 0x9]}, @rr={0x7, 0x7, 0x28, [@local]}]}}}}})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r4, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x160, 0x0, 0x400, 0xfffffff8, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000804}, 0x4008840)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000000))
mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x2040010, r1, 0x8)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r1, &(0x7f0000000000)="e70e61525b39d619a69fdfb357ea", &(0x7f0000000140)=""/203}, 0x20)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
syz_open_dev$mouse(&(0x7f00000000c0), 0x805, 0x40040) (async)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x7fff) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg0\x00'}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x80, 0x10, 0x9, 0x8a, {{0x3c, 0x4, 0x0, 0x0, 0xf0, 0x66, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x4c, 0xe7, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x6}, {@empty, 0x461}, {@broadcast, 0x4}, {@loopback, 0x8}, {@remote, 0x2}, {@remote, 0x9a}, {@remote, 0xffffffff}, {@multicast1, 0x401}, {@multicast2, 0x200}]}, @timestamp_prespec={0x44, 0x4c, 0x24, 0x3, 0x4, [{@multicast1, 0x7}, {@multicast2}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@loopback, 0x1}, {@rand_addr=0x64010100, 0x7}, {@multicast1, 0x7}, {@private=0xa010102, 0x7}, {@empty, 0x7fffffff}]}, @rr={0x7, 0x23, 0xa8, [@local, @loopback, @local, @multicast2, @private=0xa010101, @empty, @broadcast, @rand_addr=0x64010100]}, @timestamp={0x44, 0x18, 0x55, 0x0, 0xe, [0x3ff, 0x764, 0x6, 0x101, 0x9]}, @rr={0x7, 0x7, 0x28, [@local]}]}}}}}) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r4, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x34}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x160, 0x0, 0x400, 0xfffffff8, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000804}, 0x4008840) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) (async)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000000)) (async)
mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x2040010, r1, 0x8) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r1, &(0x7f0000000000)="e70e61525b39d619a69fdfb357ea", &(0x7f0000000140)=""/203}, 0x20) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)

01:37:11 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8000000000000001) (rerun: 32)

[ 1579.098006][ T3503] binder: 3499:3503 ioctl 400c620e 20000400 returned -22
01:37:11 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3, 0x0})

01:37:11 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0})

[ 1579.224585][ T3515] binder: 3508:3515 ioctl 400c620e 20000400 returned -22
[ 1579.225581][ T3512] binder: 3509:3512 ioctl 400c620e 20000400 returned -22
01:37:12 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000000)={'sit0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x7, 0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x40, 0x7fffffff, 0x9}})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0)

01:37:12 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
socketpair(0x27, 0x80000, 0x2, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x8, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}, @mcast2, 0x7, 0x1, 0xa9, 0x1}})
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000000)={0x8, 0x1})
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x3f, 0x140)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000001c0)={0x3, r5})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040))

01:37:12 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8000000000000001)

[ 1579.273291][ T3522] binder: 3514:3522 ioctl 40046205 0 returned -22
[ 1579.311323][ T3522] binder: 3514:3522 ioctl 40046205 0 returned -22
01:37:12 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = syz_open_dev$mouse(&(0x7f00000000c0), 0x805, 0x40040)
mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x7fff) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg0\x00', <r2=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000440)={'erspan0\x00', &(0x7f0000000300)={'syztnl1\x00', <r3=>0x0, 0x80, 0x10, 0x9, 0x8a, {{0x3c, 0x4, 0x0, 0x0, 0xf0, 0x66, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback, {[@timestamp_addr={0x44, 0x4c, 0xe7, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x1f}, 0x6}, {@empty, 0x461}, {@broadcast, 0x4}, {@loopback, 0x8}, {@remote, 0x2}, {@remote, 0x9a}, {@remote, 0xffffffff}, {@multicast1, 0x401}, {@multicast2, 0x200}]}, @timestamp_prespec={0x44, 0x4c, 0x24, 0x3, 0x4, [{@multicast1, 0x7}, {@multicast2}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x401}, {@loopback, 0x1}, {@rand_addr=0x64010100, 0x7}, {@multicast1, 0x7}, {@private=0xa010102, 0x7}, {@empty, 0x7fffffff}]}, @rr={0x7, 0x23, 0xa8, [@local, @loopback, @local, @multicast2, @private=0xa010101, @empty, @broadcast, @rand_addr=0x64010100]}, @timestamp={0x44, 0x18, 0x55, 0x0, 0xe, [0x3ff, 0x764, 0x6, 0x101, 0x9]}, @rr={0x7, 0x7, 0x28, [@local]}]}}}}})
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r6=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r4, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x34}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000640)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000480)={0x160, 0x0, 0x400, 0xfffffff8, 0x25dfdbfc, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x160}, 0x1, 0x0, 0x0, 0x4000804}, 0x4008840) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x10) (async)
ioctl$HIDIOCGRAWINFO(r1, 0x80084803, &(0x7f0000000000)) (async)
mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xc, 0x2040010, r1, 0x8) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000240)={r1, &(0x7f0000000000)="e70e61525b39d619a69fdfb357ea", &(0x7f0000000140)=""/203}, 0x20) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:12 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0})

[ 1579.356534][ T3533] binder: 3532:3533 ioctl 400c620e 20000400 returned -22
[ 1579.358607][ T3534] binder: 3530:3534 ioctl 400c620e 20000400 returned -22
01:37:12 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)

01:37:12 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000000)={'sit0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x7, 0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x40, 0x7fffffff, 0x9}})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000000)={'sit0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x7, 0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x40, 0x7fffffff, 0x9}}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) (async)

01:37:12 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000000)={0x4, &(0x7f0000000180)="1d0e39bc3d34db61787e31c1e6e3f1fd65d0619c388eb8ed202653c384b1f5d1e5f517b96ceda4b1908af07b5f925e0c2dba146d9c6c35245171c2daae0c9784a9603e15bb028b0a283c3013087e6277cd1f3b4d7081e5161315cca1b33c784f7c7c0d7347dc4db72f4f3d5faaf647220ec345169fc97f40f2998a27211c3c77199465982169ad"})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4})
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r5})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000300)={0x0, 0x0, r5})
connect$caif(r4, &(0x7f0000000080)=@rfm={0x25, 0xd25, "c9cecd66abb441e02d36af43c3703fab"}, 0x18)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000280)={0x0, 0x1, <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000002c0)={"01c5be30e8502aedf1167244492fe7f443dd17560552797943225d24d6b60315", r6})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)={0xffffffffffffff78, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:12 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
socketpair(0x27, 0x80000, 0x2, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x8, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}, @mcast2, 0x7, 0x1, 0xa9, 0x1}})
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000000)={0x8, 0x1})
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x3f, 0x140)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000001c0)={0x3, r5})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
socketpair(0x27, 0x80000, 0x2, &(0x7f0000000200)) (async)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x8, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}, @mcast2, 0x7, 0x1, 0xa9, 0x1}}) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000000)={0x8, 0x1}) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async)
syz_open_dev$mouse(&(0x7f0000000180), 0x3f, 0x140) (async)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000001c0)={0x3, r5}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)) (async)

01:37:12 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5, 0x0})

[ 1579.469668][ T3550] binder: 3548:3550 ioctl 400c620e 20000400 returned -22
01:37:12 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)

01:37:12 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0})

01:37:12 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000000)={0x4, &(0x7f0000000180)="1d0e39bc3d34db61787e31c1e6e3f1fd65d0619c388eb8ed202653c384b1f5d1e5f517b96ceda4b1908af07b5f925e0c2dba146d9c6c35245171c2daae0c9784a9603e15bb028b0a283c3013087e6277cd1f3b4d7081e5161315cca1b33c784f7c7c0d7347dc4db72f4f3d5faaf647220ec345169fc97f40f2998a27211c3c77199465982169ad"})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async, rerun: 64)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 64)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4})
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r5}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000300)={0x0, 0x0, r5})
connect$caif(r4, &(0x7f0000000080)=@rfm={0x25, 0xd25, "c9cecd66abb441e02d36af43c3703fab"}, 0x18) (async, rerun: 64)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (rerun: 64)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000280)={0x0, 0x1, <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000002c0)={"01c5be30e8502aedf1167244492fe7f443dd17560552797943225d24d6b60315", r6}) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)={0xffffffffffffff78, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:12 executing program 5:
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)={0x2c, 0x0, 0x501, 0x0, 0xfffffffe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x2c}}, 0x4000000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', <r1=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'ip_vti0\x00', <r2=>0x0, 0x10, 0x700, 0x2, 0x7fff, {{0x2c, 0x4, 0x1, 0x8, 0xb0, 0x66, 0x0, 0x86, 0x29, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x45, 0x3, 0x7, [{@remote, 0x401}, {@local, 0x4}, {@rand_addr=0x64010101, 0x6fa8}]}, @timestamp_addr={0x44, 0xc, 0xe6, 0x1, 0x3, [{@empty, 0x8}]}, @cipso={0x86, 0x50, 0x0, [{0x0, 0x9, "0a99405c6d3dec"}, {0x0, 0xa, "8b03681878d294ee"}, {0x6, 0xe, "b7f89edd2d5eab0b0ab66934"}, {0x0, 0x5, "041292"}, {0x6, 0x8, "9e24c5ab1f7b"}, {0x0, 0xc, "85a80711259099f68d73"}, {0x2, 0x10, "162d239d87590c0672d82fe8e1f2"}]}, @timestamp_addr={0x44, 0xc, 0x8c, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @ssrr={0x89, 0x17, 0xbf, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}, @remote, @empty]}]}}}}})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r3, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r7, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x34}}, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0105000000000000000006000000200001801400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r12, @ANYBLOB="a1e547cf4cd105ece140baee6037928db767915b1a24cf6285a1845a0852e78b7a8f01048bb9e8aaaf5d32ec5a5acbf129f57b30cad9ce532cda7b6e64ed02437fca5518ef5d1f8842a57f5df0e75d06a2ed9a9915b9f0cd52beb053fbd985c73d83c3"], 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1e8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4004}, 0xd0)
r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r13, 0x40046205, 0x0)

01:37:12 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000000)={'sit0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x7, 0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x40, 0x7fffffff, 0x9}})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000040))
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) (async)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f0000000000)={'sit0\x00', &(0x7f00000000c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x7, 0x7, 0x0, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x20, 0x40, 0x7fffffff, 0x9}}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$SOUND_PCM_READ_CHANNELS(0xffffffffffffffff, 0x80045006, &(0x7f0000000040)) (async)
ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) (async)

01:37:12 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)

[ 1579.599406][ T3558] binder: 3557:3558 ioctl 400c620e 20000400 returned -22
01:37:12 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async, rerun: 64)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 64)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async, rerun: 64)
socketpair(0x27, 0x80000, 0x2, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff}) (rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r3, 0x89f4, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000240)={'ip6tnl0\x00', 0x0, 0x29, 0x2, 0x8, 0x0, 0x2, @dev={0xfe, 0x80, '\x00', 0x24}, @mcast2, 0x7, 0x1, 0xa9, 0x1}}) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, &(0x7f0000000000)={0x8, 0x1})
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async)
r5 = syz_open_dev$mouse(&(0x7f0000000180), 0x3f, 0x140)
ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f00000001c0)={0x3, r5}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040))

01:37:12 executing program 5:
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)={0x2c, 0x0, 0x501, 0x0, 0xfffffffe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x2c}}, 0x4000000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', <r1=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'ip_vti0\x00', <r2=>0x0, 0x10, 0x700, 0x2, 0x7fff, {{0x2c, 0x4, 0x1, 0x8, 0xb0, 0x66, 0x0, 0x86, 0x29, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x45, 0x3, 0x7, [{@remote, 0x401}, {@local, 0x4}, {@rand_addr=0x64010101, 0x6fa8}]}, @timestamp_addr={0x44, 0xc, 0xe6, 0x1, 0x3, [{@empty, 0x8}]}, @cipso={0x86, 0x50, 0x0, [{0x0, 0x9, "0a99405c6d3dec"}, {0x0, 0xa, "8b03681878d294ee"}, {0x6, 0xe, "b7f89edd2d5eab0b0ab66934"}, {0x0, 0x5, "041292"}, {0x6, 0x8, "9e24c5ab1f7b"}, {0x0, 0xc, "85a80711259099f68d73"}, {0x2, 0x10, "162d239d87590c0672d82fe8e1f2"}]}, @timestamp_addr={0x44, 0xc, 0x8c, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @ssrr={0x89, 0x17, 0xbf, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}, @remote, @empty]}]}}}}})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r3, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r7, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x34}}, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0105000000000000000006000000200001801400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r12, @ANYBLOB="a1e547cf4cd105ece140baee6037928db767915b1a24cf6285a1845a0852e78b7a8f01048bb9e8aaaf5d32ec5a5acbf129f57b30cad9ce532cda7b6e64ed02437fca5518ef5d1f8842a57f5df0e75d06a2ed9a9915b9f0cd52beb053fbd985c73d83c3"], 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1e8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4004}, 0xd0)
r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r13, 0x40046205, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)={0x2c, 0x0, 0x501, 0x0, 0xfffffffe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x2c}}, 0x4000000) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x10, 0x700, 0x2, 0x7fff, {{0x2c, 0x4, 0x1, 0x8, 0xb0, 0x66, 0x0, 0x86, 0x29, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x45, 0x3, 0x7, [{@remote, 0x401}, {@local, 0x4}, {@rand_addr=0x64010101, 0x6fa8}]}, @timestamp_addr={0x44, 0xc, 0xe6, 0x1, 0x3, [{@empty, 0x8}]}, @cipso={0x86, 0x50, 0x0, [{0x0, 0x9, "0a99405c6d3dec"}, {0x0, 0xa, "8b03681878d294ee"}, {0x6, 0xe, "b7f89edd2d5eab0b0ab66934"}, {0x0, 0x5, "041292"}, {0x6, 0x8, "9e24c5ab1f7b"}, {0x0, 0xc, "85a80711259099f68d73"}, {0x2, 0x10, "162d239d87590c0672d82fe8e1f2"}]}, @timestamp_addr={0x44, 0xc, 0x8c, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @ssrr={0x89, 0x17, 0xbf, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}, @remote, @empty]}]}}}}}) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r3, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}}, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r7, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x34}}, 0x0) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0105000000000000000006000000200001801400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r12, @ANYBLOB="a1e547cf4cd105ece140baee6037928db767915b1a24cf6285a1845a0852e78b7a8f01048bb9e8aaaf5d32ec5a5acbf129f57b30cad9ce532cda7b6e64ed02437fca5518ef5d1f8842a57f5df0e75d06a2ed9a9915b9f0cd52beb053fbd985c73d83c3"], 0x34}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1e8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4004}, 0xd0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r13, 0x40046205, 0x0) (async)

01:37:12 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0})

01:37:12 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000000)=0x8001)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3})
openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x30d901, 0x0)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x20008)

01:37:12 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0})

[ 1579.733267][ T3588] binder: 3583:3588 ioctl 400c620e 20000400 returned -22
01:37:12 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000000)=0x8001)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3})
openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x30d901, 0x0)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x20008)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000000)=0x8001) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3}) (async)
openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x30d901, 0x0) (async)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x20008) (async)

01:37:12 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x48, 0x0})

01:37:12 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0})

[ 1579.881826][ T3663] binder: 3627:3663 ioctl 400c620e 20000400 returned -22
01:37:12 executing program 5:
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)={0x2c, 0x0, 0x501, 0x0, 0xfffffffe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x2c}}, 0x4000000) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', <r1=>0x0}) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'ip_vti0\x00', <r2=>0x0, 0x10, 0x700, 0x2, 0x7fff, {{0x2c, 0x4, 0x1, 0x8, 0xb0, 0x66, 0x0, 0x86, 0x29, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x45, 0x3, 0x7, [{@remote, 0x401}, {@local, 0x4}, {@rand_addr=0x64010101, 0x6fa8}]}, @timestamp_addr={0x44, 0xc, 0xe6, 0x1, 0x3, [{@empty, 0x8}]}, @cipso={0x86, 0x50, 0x0, [{0x0, 0x9, "0a99405c6d3dec"}, {0x0, 0xa, "8b03681878d294ee"}, {0x6, 0xe, "b7f89edd2d5eab0b0ab66934"}, {0x0, 0x5, "041292"}, {0x6, 0x8, "9e24c5ab1f7b"}, {0x0, 0xc, "85a80711259099f68d73"}, {0x2, 0x10, "162d239d87590c0672d82fe8e1f2"}]}, @timestamp_addr={0x44, 0xc, 0x8c, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @ssrr={0x89, 0x17, 0xbf, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}, @remote, @empty]}]}}}}}) (async)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r3, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}}, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) (async)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r7, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x34}}, 0x0) (async)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0105000000000000000006000000200001801400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r12, @ANYBLOB="a1e547cf4cd105ece140baee6037928db767915b1a24cf6285a1845a0852e78b7a8f01048bb9e8aaaf5d32ec5a5acbf129f57b30cad9ce532cda7b6e64ed02437fca5518ef5d1f8842a57f5df0e75d06a2ed9a9915b9f0cd52beb053fbd985c73d83c3"], 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1e8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4004}, 0xd0)
r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r13, 0x40046205, 0x0)

01:37:12 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000000)={0x4, &(0x7f0000000180)="1d0e39bc3d34db61787e31c1e6e3f1fd65d0619c388eb8ed202653c384b1f5d1e5f517b96ceda4b1908af07b5f925e0c2dba146d9c6c35245171c2daae0c9784a9603e15bb028b0a283c3013087e6277cd1f3b4d7081e5161315cca1b33c784f7c7c0d7347dc4db72f4f3d5faaf647220ec345169fc97f40f2998a27211c3c77199465982169ad"})
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4})
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r5})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000300)={0x0, 0x0, r5})
connect$caif(r4, &(0x7f0000000080)=@rfm={0x25, 0xd25, "c9cecd66abb441e02d36af43c3703fab"}, 0x18)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000280)={0x0, 0x1, <r6=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000002c0)={"01c5be30e8502aedf1167244492fe7f443dd17560552797943225d24d6b60315", r6})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)={0xffffffffffffff78, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)) (async)
ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000000)={0x4, &(0x7f0000000180)="1d0e39bc3d34db61787e31c1e6e3f1fd65d0619c388eb8ed202653c384b1f5d1e5f517b96ceda4b1908af07b5f925e0c2dba146d9c6c35245171c2daae0c9784a9603e15bb028b0a283c3013087e6277cd1f3b4d7081e5161315cca1b33c784f7c7c0d7347dc4db72f4f3d5faaf647220ec345169fc97f40f2998a27211c3c77199465982169ad"}) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000140)={0x0, r4}) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r5}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000300)={0x0, 0x0, r5}) (async)
connect$caif(r4, &(0x7f0000000080)=@rfm={0x25, 0xd25, "c9cecd66abb441e02d36af43c3703fab"}, 0x18) (async)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(r2, 0xc01064c1, &(0x7f0000000280)) (async)
ioctl$SYNC_IOC_MERGE(r2, 0xc0303e03, &(0x7f00000002c0)={"01c5be30e8502aedf1167244492fe7f443dd17560552797943225d24d6b60315", r6}) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046210, &(0x7f0000000040)={0xffffffffffffff78, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

01:37:12 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4c, 0x0})

[ 1579.969345][ T3669] binder: 3668:3669 ioctl 400c620e 20000400 returned -22
01:37:12 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x7d, 0x1f, "bf9467", "dddc41", 0x6, 0x0, 0x3f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x7, 0x5, 0x3, 0x4, 0x5, 0x80}}}, 0x1d)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x8b)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

01:37:12 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000000)=0x8001)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r3})
openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x30d901, 0x0)
ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000040)=0x20008)

01:37:12 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0})

01:37:12 executing program 5:
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:12 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x68, 0x0})

[ 1580.085059][ T3688] binder: 3685:3688 ioctl 400c620e 20000400 returned -22
01:37:12 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x7d, 0x1f, "bf9467", "dddc41", 0x6, 0x0, 0x3f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x7, 0x5, 0x3, 0x4, 0x5, 0x80}}}, 0x1d)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x8b) (async)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

01:37:12 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0})

01:37:12 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6c, 0x0})

01:37:12 executing program 5:
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)

[ 1580.181880][ T3710] binder: 3706:3710 ioctl 400c620e 20000400 returned -22
[ 1580.189181][ T3711] binder: 3709:3711 ioctl 40046205 0 returned -22
01:37:12 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x111000)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:12 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)

01:37:12 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0})

01:37:13 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x7d, 0x1f, "bf9467", "dddc41", 0x6, 0x0, 0x3f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x7, 0x5, 0x3, 0x4, 0x5, 0x80}}}, 0x1d)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x8b)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1}) (async)
write$bt_hci(r1, &(0x7f00000000c0)={0x1, @le_set_ext_adv_params={{0x2036, 0x19}, {0x7d, 0x1f, "bf9467", "dddc41", 0x6, 0x0, 0x3f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x7, 0x5, 0x3, 0x4, 0x5, 0x80}}}, 0x1d) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/custom1\x00', 0x800, 0x0) (async)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x8b) (async)
getsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)

01:37:13 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x74, 0x0})

[ 1580.315162][ T3724] binder: 3721:3724 ioctl 40046205 0 returned -22
[ 1580.318072][ T3726] binder: 3721:3726 ioctl 40046205 0 returned -22
[ 1580.349430][ T3727] binder: 3722:3727 ioctl 400c620e 20000400 returned -22
01:37:13 executing program 5:
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:13 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)

01:37:13 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0})

01:37:13 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7a, 0x0})

01:37:13 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x111000) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1580.411088][ T3737] binder: 3736:3737 ioctl 400c620e 20000400 returned -22
01:37:13 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x806, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:13 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, 0x0)

01:37:13 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x300, 0x0})

01:37:13 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x111000)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
syz_open_dev$mouse(&(0x7f0000000000), 0x7, 0x111000) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

[ 1580.514737][ T3757] binder: 3750:3757 ioctl 40046205 0 returned -22
[ 1580.519993][ T3756] binder: 3749:3756 ioctl 400c620e 20000400 returned -22
01:37:13 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x30, r1, 0x0)

01:37:13 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x806, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x806, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)

01:37:13 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
ioctl$VHOST_RESET_OWNER(r1, 0xaf02, 0x0) (async)

01:37:13 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, 0x0)

01:37:13 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x500, 0x0})

[ 1580.592956][ T3769] binder: 3765:3769 ioctl 400c620e 0 returned -14
[ 1580.599714][ T3768] binder: 3767:3768 ioctl 400c620e 20000400 returned -22
[ 1580.686508][ T3775] binder: 3772:3775 ioctl 40046205 0 returned -22
[ 1580.725197][ T3788] binder: 3774:3788 ioctl 400c620e 0 returned -14
01:37:13 executing program 4:
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000000c0)={0x2c, 0x0, 0x501, 0x0, 0xfffffffe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x2c}}, 0x4000000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={0xffffffffffffffff, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], ""/16, <r0=>0x0, 0x0, 0x0, 0x0, 0x7, 0x7, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'team0\x00', <r1=>0x0})
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'ip_vti0\x00', <r2=>0x0, 0x10, 0x700, 0x2, 0x7fff, {{0x2c, 0x4, 0x1, 0x8, 0xb0, 0x66, 0x0, 0x86, 0x29, 0x0, @empty, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x45, 0x3, 0x7, [{@remote, 0x401}, {@local, 0x4}, {@rand_addr=0x64010101, 0x6fa8}]}, @timestamp_addr={0x44, 0xc, 0xe6, 0x1, 0x3, [{@empty, 0x8}]}, @cipso={0x86, 0x50, 0x0, [{0x0, 0x9, "0a99405c6d3dec"}, {0x0, 0xa, "8b03681878d294ee"}, {0x6, 0xe, "b7f89edd2d5eab0b0ab66934"}, {0x0, 0x5, "041292"}, {0x6, 0x8, "9e24c5ab1f7b"}, {0x0, 0xc, "85a80711259099f68d73"}, {0x2, 0x10, "162d239d87590c0672d82fe8e1f2"}]}, @timestamp_addr={0x44, 0xc, 0x8c, 0x1, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}]}, @ssrr={0x89, 0x17, 0xbf, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x36}, @remote, @empty]}]}}}}})
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r3, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x34}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000540)=[0x0, 0x0, 0x0], ""/16, <r6=>0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000580)=[0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000600)=[{}], 0x8, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x10, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10)
r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r9=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x34, r7, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0x34}}, 0x0)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r12=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0105000000000000000006000000200001801400020076657468305f746f5f7465616d00000008000100", @ANYRES32=r12, @ANYBLOB="a1e547cf4cd105ece140baee6037928db767915b1a24cf6285a1845a0852e78b7a8f01048bb9e8aaaf5d32ec5a5acbf129f57b30cad9ce532cda7b6e64ed02437fca5518ef5d1f8842a57f5df0e75d06a2ed9a9915b9f0cd52beb053fbd985c73d83c3"], 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000840)={0x1e8, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1e8}, 0x1, 0x0, 0x0, 0x4004}, 0xd0)
r13 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r13, 0x40046205, 0x0)

01:37:13 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x806, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x806, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)

01:37:13 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x30, r1, 0x0)

01:37:13 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x600, 0x0})

[ 1580.747538][ T3789] binder: 3779:3789 ioctl 400c620e 20000400 returned -22
01:37:13 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:13 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000000))
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001400), 0x0)
syz_open_dev$mouse(&(0x7f0000001480), 0x81, 0x20002)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:13 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:13 executing program 4:
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x82800)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$LOOP_SET_FD(r0, 0x4c00, r1)
ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x4)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0)
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080)={&(0x7f0000000040)="93a956d6a08f751787138da025a27f555522dbf98c38d00b945ef9c0d1ceb2f0f2ffa6c9a2e9e22fc4bddc1e1be5a27730", 0x31, <r4=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r3, 0xc01064ac, &(0x7f0000001140)={r4, 0x100c, &(0x7f00000031c0)=""/4108})
ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0)

01:37:13 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x700, 0x0})

[ 1580.882791][ T3799] binder: 3797:3799 ioctl 400c620e 20000400 returned -22
[ 1580.929743][ T3810] binder: 3809:3810 ioctl 40046205 0 returned -22
01:37:13 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000000))
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001400), 0x0)
syz_open_dev$mouse(&(0x7f0000001480), 0x81, 0x20002)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1}) (async)
ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000000)) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001400), 0x0) (async)
syz_open_dev$mouse(&(0x7f0000001480), 0x81, 0x20002) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

01:37:13 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:13 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:13 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000000))
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001400), 0x0)
syz_open_dev$mouse(&(0x7f0000001480), 0x81, 0x20002)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:13 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4800, 0x0})

[ 1580.979155][ T3820] binder: 3818:3820 ioctl 400c620e 20000400 returned -22
01:37:13 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0)
mmap$dsp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x30, r1, 0x0)

01:37:13 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x802, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)

01:37:13 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4c00, 0x0})

01:37:13 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

01:37:13 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x907e, 0x0, 0x0})

[ 1581.102920][ T3841] binder: 3839:3841 ioctl 40046205 0 returned -22
[ 1581.118226][ T3842] binder: 3840:3842 ioctl 400c620e 20000400 returned -22
01:37:13 executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$HIDIOCGRDESCSIZE(r1, 0x80044801, &(0x7f0000000000)) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000001400), 0x0)
syz_open_dev$mouse(&(0x7f0000001480), 0x81, 0x20002) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:13 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

01:37:13 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0))
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x20001, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000240)={&(0x7f00000001c0)="035996a04b4e22e01ab449960f1179df76d9c3b2d569c74f3b9b0e3ac5410a5589b415330a5a1de5e1ae886747358132558464e182c497436b7050bc238e1665cf340cce417820ac3467f402c87cb2d96f5e7e4d151d9daaa03b38d0f77337a038f1bf84a81a7fd34812a3f50e", 0x6d})
setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000140)={0x1, "b2bae9"}, 0x6)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000006c0))
bind(r2, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3, 0x3}}, 0x80)

01:37:13 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000))
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @remote}, 0x0, 0x3, 0x1, 0x1}}, 0x80)

01:37:13 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6800, 0x0})

[ 1581.229098][ T3855] binder: 3854:3855 ioctl 400c620e 20000400 returned -22
[ 1581.232179][ T3853] binder: 3852:3853 ioctl 400c620e 20000400 returned -22
01:37:14 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:14 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (async)

[ 1581.281045][ T3859] binder: 3857:3859 ioctl 40046205 0 returned -22
01:37:14 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

[ 1581.352718][ T3865] binder: 3861:3865 ioctl 400c620e 20000400 returned -22
[ 1581.393703][ T3869] binder: 3868:3869 ioctl 40046205 0 returned -22
01:37:14 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6c00, 0x0})

01:37:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) (async, rerun: 64)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x20001, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000240)={&(0x7f00000001c0)="035996a04b4e22e01ab449960f1179df76d9c3b2d569c74f3b9b0e3ac5410a5589b415330a5a1de5e1ae886747358132558464e182c497436b7050bc238e1665cf340cce417820ac3467f402c87cb2d96f5e7e4d151d9daaa03b38d0f77337a038f1bf84a81a7fd34812a3f50e", 0x6d}) (async)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000140)={0x1, "b2bae9"}, 0x6) (async, rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000006c0)) (rerun: 64)
bind(r2, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3, 0x3}}, 0x80)

01:37:14 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

[ 1581.398924][ T3871] binder_alloc: binder_alloc_mmap_handler: 3868 20fff000-21000000 already mapped failed -16
01:37:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

01:37:14 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

01:37:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7400, 0x0})

01:37:14 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

[ 1581.399939][ T3870] binder: 3868:3870 ioctl 40046205 0 returned -22
[ 1581.465349][ T3878] binder: 3872:3878 ioctl 40046205 0 returned -22
01:37:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{r1, r2+10000000}, {0x0, 0x3938700}}, &(0x7f00000000c0))

01:37:14 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

[ 1581.469662][ T3876] binder: 3875:3876 ioctl 400c620e 20000400 returned -22
[ 1581.526646][ T3885] binder: 3884:3885 ioctl 40046205 0 returned -22
01:37:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x800, 0x0) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async)
r3 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0xe, 0x80800) (async, rerun: 32)
r4 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000180), 0x20001, 0x0) (rerun: 32)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000240)={&(0x7f00000001c0)="035996a04b4e22e01ab449960f1179df76d9c3b2d569c74f3b9b0e3ac5410a5589b415330a5a1de5e1ae886747358132558464e182c497436b7050bc238e1665cf340cce417820ac3467f402c87cb2d96f5e7e4d151d9daaa03b38d0f77337a038f1bf84a81a7fd34812a3f50e", 0x6d}) (async)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, &(0x7f0000000140)={0x1, "b2bae9"}, 0x6) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000006c0)) (async)
bind(r2, &(0x7f0000000000)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x0, 0x3, 0x3}}, 0x80)

01:37:14 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

01:37:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7a00, 0x0})

[ 1581.594602][ T3892] binder: 3890:3892 ioctl 400c620e 20000400 returned -22
01:37:14 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hidraw(&(0x7f0000000840), 0x6, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000880)={0x58, "446cc3fab5f5d8151dcc03e0a5d214f735b498fb467b48508f9009d0d3c74523984376e5627226199a34c9989493a4dea75381a367e2ddc2fd74ba355b4fa13e"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0xd8, 0x0, &(0x7f0000000680)=[@free_buffer, @clear_death={0x400c630f, 0x4d}, @acquire_done={0x40106309, 0x1}, @exit_looper, @increfs_done={0x40106308, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000500)={@flat=@weak_binder={0x77622a85, 0x110f}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/140, 0x8c, 0x2, 0x37}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000580)={0x0, 0x18, 0x40}}, 0x40}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x288b1a0dce5b22e3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b00)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r4, @ANYBLOB="000000000000000000000000852a68730110000000000000000000000000000000000000856164660000000004000000000000000100000000000000260000000000000011893fe5d831d3a5529c6ba52c926181718889b4e81295f94e48894a5327913041d1cbf6e0563fced761840f69b9370591b456526c680b4e98923c49df238ffac0ec79185e868e51a63450bd50d3c29876d9ed4682c8060364f3070acf8211158a2cd9c12c582f4700006532d2c3259641578ee686f58b2679133bd5471e0bf84a4c48cce522019e4022f1"], &(0x7f0000000640)={0x0, 0x18, 0x30}}}], 0x57, 0x0, &(0x7f0000000780)="683cd4c5b34eaf19cc81f9c804b68345ca647837539d6d738eeaa126619d88c05f29a78adec89f64e6d7d93cac57cbf3ab5ae026a7c2f624498efd63fff78205783598d0b654889c9a47e874505db49a7720fdd8514bd7"})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f00000002c0)="dc42c3294beeb3b1449ea496570507caa31aa5975f7acc59f333617669f9b26614b93a372c0f7fe8dc9de0af010d50a3e274cf151c243a17ba8d9300a4459a98063c5d98010bb2d949809ea46ab217d119fdfdc9aa09c88adf5965c8fffb53e73b73da2bea1a9899d3fccf1946b18fecb6d6f3d23f211710c31d2918a5631924c23b71ee2d717397", &(0x7f0000000380)=@udp, 0x2}, 0x20)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'gretap0\x00', <r6=>0x0, 0x10, 0x8, 0x1899, 0x80000000, {{0xb, 0x4, 0x2, 0x2, 0x2c, 0x68, 0x0, 0x7f, 0x29, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@end, @ssrr={0x89, 0x17, 0xc9, [@remote, @rand_addr=0x64010102, @rand_addr=0x64010102, @multicast1, @broadcast]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8020}, 0x804)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r2)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000980)={'team0\x00', <r9=>0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f00000005c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB="020028bd7000fcdbdf25060000007400018008000100", @ANYRES32=r6, @ANYBLOB="ffffff7f", @ANYRESDEC=r9, @ANYBLOB="1400020064766d727030000000000000000000001400020070696d367265673000000000000000001400020076657468305f746f5f62726964676500080003000000000008000100", @ANYRES32=r9, @ANYBLOB="1400020064766d72703000"/20], 0x88}, 0x1, 0x0, 0x0, 0x24004001}, 0x4800)

01:37:14 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x3, 0x5})
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x40)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0)

01:37:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{r1, r2+10000000}, {0x0, 0x3938700}}, &(0x7f00000000c0))

[ 1581.598426][ T3893] binder: 3891:3893 ioctl 40046205 0 returned -22
[ 1581.673824][ T3901] binder: 3900:3901 ioctl 40046205 0 returned -22
01:37:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7e87, 0x0})

[ 1581.734000][ T3903] binder: 3902:3903 ioctl 40046205 0 returned -22
[ 1581.745571][ T3910] binder: 3905:3910 ioctl 400c620e 20000400 returned -22
01:37:14 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

01:37:14 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_open_dev$hidraw(&(0x7f0000000840), 0x6, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000880)={0x58, "446cc3fab5f5d8151dcc03e0a5d214f735b498fb467b48508f9009d0d3c74523984376e5627226199a34c9989493a4dea75381a367e2ddc2fd74ba355b4fa13e"})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0xd8, 0x0, &(0x7f0000000680)=[@free_buffer, @clear_death={0x400c630f, 0x4d}, @acquire_done={0x40106309, 0x1}, @exit_looper, @increfs_done={0x40106308, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000500)={@flat=@weak_binder={0x77622a85, 0x110f}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/140, 0x8c, 0x2, 0x37}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000580)={0x0, 0x18, 0x40}}, 0x40}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x288b1a0dce5b22e3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b00)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r4, @ANYBLOB="000000000000000000000000852a68730110000000000000000000000000000000000000856164660000000004000000000000000100000000000000260000000000000011893fe5d831d3a5529c6ba52c926181718889b4e81295f94e48894a5327913041d1cbf6e0563fced761840f69b9370591b456526c680b4e98923c49df238ffac0ec79185e868e51a63450bd50d3c29876d9ed4682c8060364f3070acf8211158a2cd9c12c582f4700006532d2c3259641578ee686f58b2679133bd5471e0bf84a4c48cce522019e4022f1"], &(0x7f0000000640)={0x0, 0x18, 0x30}}}], 0x57, 0x0, &(0x7f0000000780)="683cd4c5b34eaf19cc81f9c804b68345ca647837539d6d738eeaa126619d88c05f29a78adec89f64e6d7d93cac57cbf3ab5ae026a7c2f624498efd63fff78205783598d0b654889c9a47e874505db49a7720fdd8514bd7"})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f00000002c0)="dc42c3294beeb3b1449ea496570507caa31aa5975f7acc59f333617669f9b26614b93a372c0f7fe8dc9de0af010d50a3e274cf151c243a17ba8d9300a4459a98063c5d98010bb2d949809ea46ab217d119fdfdc9aa09c88adf5965c8fffb53e73b73da2bea1a9899d3fccf1946b18fecb6d6f3d23f211710c31d2918a5631924c23b71ee2d717397", &(0x7f0000000380)=@udp, 0x2}, 0x20)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'gretap0\x00', <r6=>0x0, 0x10, 0x8, 0x1899, 0x80000000, {{0xb, 0x4, 0x2, 0x2, 0x2c, 0x68, 0x0, 0x7f, 0x29, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@end, @ssrr={0x89, 0x17, 0xc9, [@remote, @rand_addr=0x64010102, @rand_addr=0x64010102, @multicast1, @broadcast]}]}}}}})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8020}, 0x804) (async)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, 0x0, 0x0)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r2)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000980)={'team0\x00', <r9=>0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f00000005c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB="020028bd7000fcdbdf25060000007400018008000100", @ANYRES32=r6, @ANYBLOB="ffffff7f", @ANYRESDEC=r9, @ANYBLOB="1400020064766d727030000000000000000000001400020070696d367265673000000000000000001400020076657468305f746f5f62726964676500080003000000000008000100", @ANYRES32=r9, @ANYBLOB="1400020064766d72703000"/20], 0x88}, 0x1, 0x0, 0x0, 0x24004001}, 0x4800)

01:37:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xb3)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:14 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x3, 0x5})
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x40) (async, rerun: 32)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (rerun: 32)
ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0)

01:37:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
clock_gettime(0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000080)={{r1, r2+10000000}, {0x0, 0x3938700}}, &(0x7f00000000c0))

[ 1581.784261][ T3916] binder: 3913:3916 ioctl 40046205 0 returned -22
01:37:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xb3)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7e8f, 0x0})

01:37:14 executing program 4:
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

01:37:14 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$hidraw(&(0x7f0000000840), 0x6, 0x0)
ioctl$HIDIOCGFEATURE(r1, 0xc0404807, &(0x7f0000000880)={0x58, "446cc3fab5f5d8151dcc03e0a5d214f735b498fb467b48508f9009d0d3c74523984376e5627226199a34c9989493a4dea75381a367e2ddc2fd74ba355b4fa13e"}) (async, rerun: 32)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, 0x0, 0x0)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000800)={0xd8, 0x0, &(0x7f0000000680)=[@free_buffer, @clear_death={0x400c630f, 0x4d}, @acquire_done={0x40106309, 0x1}, @exit_looper, @increfs_done={0x40106308, 0x2}, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000500)={@flat=@weak_binder={0x77622a85, 0x110f}, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/140, 0x8c, 0x2, 0x37}, @fd={0x66642a85, 0x0, r3}}, &(0x7f0000000580)={0x0, 0x18, 0x40}}, 0x40}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x288b1a0dce5b22e3, 0x0, 0x0, 0x50, 0x18, &(0x7f0000000b00)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r4, @ANYBLOB="000000000000000000000000852a68730110000000000000000000000000000000000000856164660000000004000000000000000100000000000000260000000000000011893fe5d831d3a5529c6ba52c926181718889b4e81295f94e48894a5327913041d1cbf6e0563fced761840f69b9370591b456526c680b4e98923c49df238ffac0ec79185e868e51a63450bd50d3c29876d9ed4682c8060364f3070acf8211158a2cd9c12c582f4700006532d2c3259641578ee686f58b2679133bd5471e0bf84a4c48cce522019e4022f1"], &(0x7f0000000640)={0x0, 0x18, 0x30}}}], 0x57, 0x0, &(0x7f0000000780)="683cd4c5b34eaf19cc81f9c804b68345ca647837539d6d738eeaa126619d88c05f29a78adec89f64e6d7d93cac57cbf3ab5ae026a7c2f624498efd63fff78205783598d0b654889c9a47e874505db49a7720fdd8514bd7"}) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f00000002c0)="dc42c3294beeb3b1449ea496570507caa31aa5975f7acc59f333617669f9b26614b93a372c0f7fe8dc9de0af010d50a3e274cf151c243a17ba8d9300a4459a98063c5d98010bb2d949809ea46ab217d119fdfdc9aa09c88adf5965c8fffb53e73b73da2bea1a9899d3fccf1946b18fecb6d6f3d23f211710c31d2918a5631924c23b71ee2d717397", &(0x7f0000000380)=@udp, 0x2}, 0x20)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'erspan0\x00', &(0x7f0000000080)={'gretap0\x00', <r6=>0x0, 0x10, 0x8, 0x1899, 0x80000000, {{0xb, 0x4, 0x2, 0x2, 0x2c, 0x68, 0x0, 0x7f, 0x29, 0x0, @rand_addr=0x64010100, @private=0xa010100, {[@end, @ssrr={0x89, 0x17, 0xc9, [@remote, @rand_addr=0x64010102, @rand_addr=0x64010102, @multicast1, @broadcast]}]}}}}}) (rerun: 32)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8020}, 0x804)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, 0x0, 0x0) (async, rerun: 64)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r2) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000980)={'team0\x00', <r9=>0x0})
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f00000005c0)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r7, &(0x7f0000000ac0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000a80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB="020028bd7000fcdbdf25060000007400018008000100", @ANYRES32=r6, @ANYBLOB="ffffff7f", @ANYRESDEC=r9, @ANYBLOB="1400020064766d727030000000000000000000001400020070696d367265673000000000000000001400020076657468305f746f5f62726964676500080003000000000008000100", @ANYRES32=r9, @ANYBLOB="1400020064766d72703000"/20], 0x88}, 0x1, 0x0, 0x0, 0x24004001}, 0x4800)

01:37:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

[ 1581.886939][ T3926] binder: 3922:3926 ioctl 400c620e 20000400 returned -22
[ 1581.904438][ T3928] binder: 3924:3928 ioctl 40046205 0 returned -22
01:37:14 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x3, 0x5}) (async)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x40) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0)

01:37:14 executing program 4:
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

01:37:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xb3)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0x800, 0x0) (async)
mmap$binder(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xb3) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

01:37:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7e90, 0x0})

01:37:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

[ 1582.006482][ T3938] binder: 3937:3938 ioctl 400c620e 20000400 returned -22
[ 1582.034142][ T3944] binder: 3942:3944 ioctl 40046205 0 returned -22
01:37:14 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0xc02, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000180))
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000400)={&(0x7f00000001c0)="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", &(0x7f0000000100)=""/86, &(0x7f00000002c0)="dc7039fec275c8b86b294a4eb074abc8dc5c9279ef82210b8fbbd3da04c71f14c2bc751264452b39b49dfc94b8e84f9e774e1290ef799db88e0580c29b0c51ee3e871b86e9f108dbe07ec0ca7e0bad2506256945929525b562e975b3c84705759a6bc2b859beb95c0d108cdd33862996f32c10405e2acdaad9acb9af8cf88d9a82530e2eefd792fc0ccb0cb82a0ccb5a956423b5bc2e1c63afe68247c34c49c7b043d89810bdb7e75d6a2391b85c1ecff7fe863ef1ea85155c3ea08ba5c0c7a2358d63ba1f79a4226f6ff0f0a1742ab0cb06db76fb6cd88ea13f4722e358e7fc75ff4b5121578c99", &(0x7f00000003c0)="d7ef37b3a193d46f45c90f9cf181bff2e473fd82b4c169d59ab9dd4f", 0x3}, 0x38)
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000440)="9b287566d06af2d500000000000c328e70e26dd71a6208a11d64ccf823fc9b8381a066f5")
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xb8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x410140, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000480)={0x1, r2})

01:37:14 executing program 4:
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

01:37:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x877e, 0x0})

01:37:14 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

[ 1582.130588][ T3956] binder: 3950:3956 ioctl 400c620e 20000400 returned -22
01:37:14 executing program 1:
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000440)={0xcb9, "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"})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:14 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='Xtack ,\x00'], 0x8)

[ 1582.170959][ T3961] binder: 3954:3961 ioctl 40046205 0 returned -22
01:37:14 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x8f7e, 0x0})

[ 1582.210870][ T3963] binder: 3962:3963 ioctl 400c620e 20000400 returned -22
01:37:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

01:37:15 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0xfffffff9, 0x7ff, 0xfffffff9, 0x8480cc41c475dee9, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r0, &(0x7f00000000c0)="22378f1b1afee89e42097e6ea519de", &(0x7f00000001c0)=""/186}, 0x20)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0)

01:37:15 executing program 1:
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000440)={0xcb9, "6d95350b878cd3da91cb70e4e1d77ff74d753e07a5ce2233d1f6c4ba602c5e0887daa5092a1f89b2b3b7b42a60946145781db23611b1c8b1ffc1354a98af73ed08b4270181055e1ba77ce62c1e082056fa060c3494a3a15f0c0ee2f44a688741d0df85e4023e1b2acb75d9411314cc8cfe5022343ae117639d128776cf626480769666a9dd29a669d6be636f27f3942dcbed19e585d09f90c8dcc6c385574bec428a771f8ca7ad54b7dcb5da2708228567cff747083cfa4703e5bdd4ff9a1581fe315b1c7d3a5f2c4ae1bb55c65c2ff8c5f9ac3309278bbb4d421f88cb4d94fe97940f463c9d757a079d069b8471779f17ed77ea5ef6a28400bd87d76233a1058995d80088d70902d56b241ae7584c9ccd551b4357e53bd48d257075c18024267a25245e84389698bfa2a86403a680c33945a5a6c35379e2704df5aa457f030afbcc943cd986714129e0f4932ea939b2d2e1e5fba6d3a1c9c0d30f47ad9090a90ae319a22de3ec2baa603574248c395237b136c4b3d9a09f3a352f1134a4c822de6bb82d83d27454ad7d3516708f4ede99d51cf4fb845ef627279226079ecc82744db520e8eac3a79b985fd8d90f8324ad6fe31276f6b913878aa0db706860b16ceec4836d8150351c4b04c8cd49e65d4ee3535dbbbd5c50ad6b9aa4d6da6cee9d9ab42ab9d766547d6d894d0bd309e53686a971f4791298af7bed151cc14fe0c71f3cca839777e93cfc4e024039fb61ad9843dfbdcd9c7a7cf1f89111fdeb982f2d1bf2cdf07420324ded80f4c8e7960af3192c8ccd91bdd334a506afdfe01ddaedf629321a573e678b1cc42b900c5ecbccc4f7e59c1b2f28469117928f62a74808ec6c877aad329531b7f01f2d87dd1e49ebbe705016bd216e1b95a08394c02dddba60e43c8b5356ef608fa596ea413f90a1cade4b847415e2c8cdc6e37d5792c1d69ef95a9f05730d54b02f27f4c789818149c38a49d0b57d8ca940605154043254e5509121848861cbb3f03df45e028e23fe6485e5ed48a4c1d32b32c95df4b48d31866227330e11dac1976b0837dbb67f39fa58682f3044300ea456c04c70aea53519a2cec9746455141e3e46b7afbe6644077ddf7bcef9d14d9c55baf99208b5c11a1df9e65c3846beed41f6b091db61251958abc16252d5b9ce89c67e2a1a3956c90148995adacf2978277ef70b51d85420d49e57fbee637ff8cc9695f4a4cd4dcfef9ef09a4c60786fdf2c2ffc634c4452c34e3b5806a679714354020342a76ff707e8d660c9d21f3c2146ce05d2847eb35d1ffca14c99a50fa9a0e60dd4cd7a50508dae540a75f677ff96503877bc7d729b2360d983550141bfd0ffaba223ae2cb0b5f330eaf2b13579b389053af707bef1315bbab7720058b860d3c9babca6d1d8d9926b7dbb31637910633210a988b5e4594e5ba038e16064ed7c8490d76823beff03c7901c0a1e287b6ebb53c01c2bd2b555541440c57c7ef0b2a67441d4c657b3fcc6d2c29e9783b308dce566707e766da752f6dd1d995a2f934a46051afd80ac292eeba0e18dd76ffc04d48b2ed0dc99f71447efebebc7074616481c5bec97bdda544af0a3b8f32e432e38838b1a6b691be193de72755a775b5d18551934c6e3818846869b4158da5ef51d6f333c89c5bb0b05d082fe1c3e21bcfcfcb6980a9c8688be11c5351b086cb3d1cbb2176b80b6f5e5210786daa7de5824e444f720cdb9919174752ec99dee48966094fe436ed6624c809234ca39e167c09adb444a44874a1a47189642f9a0636b849bf2554cee74334b8115e0d0a22408afa2e355eacc5caf516708542b76fe05da9bf26d8eb48153395c6b707c7fa1103911ae4c573db61fc8300271ddf241c972a659ac45fba087a6eed060e0a7bd6a17ecd2a5aa7cb92cb87488a2910a4aca80007365afdd6e5ffa44384e24dfaaaa09a4d19ea60e5c6a5b0e2a327fb7057d8d23d9cb138cd426988cf972ecc04ce3f99ea81452c5542852ccb46c0b0936be3d6f71e08846d45e00552407d604792f74393484221f96da2f48a97d134a7294501c8b36629874eb3d0992cbb1fd10801f9ba1b55c1b02555e91e6b20aa341a4683608465b26bf370be5b982cba130f005589ce71acea0356bbcb37b983fb3eb3e4d396347e6d4e4bf56c23729077430e6d4eb8004a1f9ea2ac381ab31091ae186213d07b5c450b1b19327d854d61922b4074ba761bf9f73046ed61ef982b99817f702dfa811f5292020e96344a7adfd70447f333eb0795bb90a67e1c312b766f3cdd12bf4061df10d18d8761e169b2133a3be7369776d8b69196cb3bcdf336ac7357786f4fa239c30d88d1be5252b4752537a8cc7d95e97c42f10ac7bc9a6b253771516bba4bc3145eb26e3ff564f3cd93af01e0ab732743f8e2c9304dbd8055e4515ce7c376785c61b10b1c32a928ff03db44911b7e3658ff5fcc00fdf35940b39060bd13eaee0c8d4eb5d0d67bb97be9dfdecc8e46c46d34d3e93e1c1bea02342e161a325d470b869d9f29c553cb0a2d758d5eacfa4e5aaf572caa4dcd940e3fd406b36f9861bf1b19d288a892dff257e410bc04756c426df5dc4c69c6c7ab6b34bb97ec30b1f06393910ff614354745b424767f32b3c41b763e203a8133198629acb22b3e4c4ddceeb3883e81b6709d622bcf850b56f58166d04ed1d1b76bc25114c28eacba7e7d589e9335ef06d7b7582cec4ab19ebcd33496a0d26ef9eedacffc087686105859590f0533933bd9f261dbf9374d174a6ce8db7ee4920cf3c4c9f9ffc78162db977dc5073ae86e2aa2fe3bbdcd8a1c394f14d8f69c8a81fb2c909c7d5e6dd7bf28968e8805bc22e32b44e58d0266600ac7c40f7674425f9072f7e85329c426d9bf85415975af033d958c70480390003b862e6ed3d0eea8ccc2d0ebb6d5ebbe2ee3cc123c7b55cf8db85b39d86394fe5acd863a7cccc2e96362ec49d327f7f61aadf622965f78c72d2529a65881ef976dcb9b4d250b34c81a2adbf892d3bd8eb9303ee8cea77d9f90684e39e6d1b9d0f875f7a1c419ec9a18946ddd880490266037feec1db063fd07d07cd720bc75ecf16bef3836cedf607647e542adfb9d4390cb6968e12ba2460e36cdf3e7101c41b0fed7654030b9f268a715211c6b166de8d7f44accd8a6b5473fbc009176a038046262b9930a7184d1721b5d8b5ff75d19b210c32b5950ffa732d55d1a1347ea2ab0235e4b2270e16a647ca0afd8d58acecd360404db780ff33f74e893d651082fbc88c58f070604e78ee27433be8bfc61ec913a917cf9ddaca81761f7250c44bd8ebfcd103fd4a6831e29185dc341a18b99835710e8863ec34331a8c819fc652aee87344ea2497b0b5b4b43e8a5c8fb1dfb5ac50278c63ef58fb83a959d22182e105ce9368c3b8bdf747ef1997f3368ec0258804a56f9def20cb529d1fd70d28466044b55e4880f583c8c14c3616e764094fcef3e4af416a63a7c5bb1e0bf616f06f99993625ecbdc37d3801f156c5a1e9fa26fa3c1e72a8fdad2d4b627b20bef5fb8332c9e90027798548e8f3e211eb55d00f5ef7211494c299ef7a83cfea4204e48c1959a534fda673eddd39023903383cf3891de5e5ad3dc4075e7fce02fe7a798a4e8a6e86bd4cd3974b025492c9fad818000777530a7d5caa031bdcab53b76c597c72c0ef50a3d3484c0650ccb6d440d47c2dc62b7c1c803b62ab4334c694f98f9db534816a1cb3b94d29c40c614a03fd0b9fdb5771097cb835778b604813c5a2e95f1119301d66b6f00815b410bea2299548c4bb9442abe57553e7d9e36624cd54d0d306d31de568841d9f38b708a989aaadebba53481e2e4a6a2f8dc31ebd211fa73131e3182230f2f7f6f68a19dffb83110f1ff341a61ba51d8e654d016416689906c0fcefda86ae9464e2233ee3bd5e3908b97e2f47f754af51b227aa49537c4bed28791217c4ce335808f6f99a729ed47d05176986b15fdefd1d48f1af90f695bd0c701e8fd6cd0fe5ad907dbf2658d8f5c2fab80cdcaeb505d4d9ef257149a720c56a2b33345f0291ae4674c39e0f1281ba627df9a4ea8084f278b90a2586a43bdcd2c4e78a38ef03ef2199f53adc543633b5626a3cf6b23a460829d65cee7bff29cf6030bff31d36517f11276fbab9fdece3b194862941cc608cfbba742c92922ded76d330c1aa6dff927b9c95dcdd34bf3b073772ea24e3f1e79f7ced74ce459c6f07fd5cb9a6f9e16c79ca0e49ab0a208ade9bcc8ac51878d790e8726447cacc173b30c0b399541d26728968bcd836f5e0c74178a685a18c298482991ca6b9fe3d47f1932e6b96b5bb77793d382c8c588c20d7d3e2d92a6ef9669334a9c4c13ac894a287a3b5a49f074317a9cd150865091d4cdb38492fa3a28b00f2f041d91c3c7f01f4d090c7f12aa9ff83686abcb488041aadb82fedd3b22b01ddf8b4467f61d56bd6deedba882ab4ac94436c89e91996cc450906f1026a9a2444c44bdbf37f88f9b63e4a450441e042d66365ce09a72c0a34dbd0c88909eb6aa4e27ba84e8fb7fae08d790e8335cdcf37a1f2be0f4a6db135dc04df34948c0a3a4b105e9fdceec1849bae3045"}) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:15 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='Xtack ,\x00'], 0x8)

01:37:15 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0xc02, 0x0) (async, rerun: 32)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 32)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000180)) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000400)={&(0x7f00000001c0)="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", &(0x7f0000000100)=""/86, &(0x7f00000002c0)="dc7039fec275c8b86b294a4eb074abc8dc5c9279ef82210b8fbbd3da04c71f14c2bc751264452b39b49dfc94b8e84f9e774e1290ef799db88e0580c29b0c51ee3e871b86e9f108dbe07ec0ca7e0bad2506256945929525b562e975b3c84705759a6bc2b859beb95c0d108cdd33862996f32c10405e2acdaad9acb9af8cf88d9a82530e2eefd792fc0ccb0cb82a0ccb5a956423b5bc2e1c63afe68247c34c49c7b043d89810bdb7e75d6a2391b85c1ecff7fe863ef1ea85155c3ea08ba5c0c7a2358d63ba1f79a4226f6ff0f0a1742ab0cb06db76fb6cd88ea13f4722e358e7fc75ff4b5121578c99", &(0x7f00000003c0)="d7ef37b3a193d46f45c90f9cf181bff2e473fd82b4c169d59ab9dd4f", 0x3}, 0x38) (async)
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000440)="9b287566d06af2d500000000000c328e70e26dd71a6208a11d64ccf823fc9b8381a066f5") (async)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xb8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x410140, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000480)={0x1, r2})

[ 1582.276718][ T3973] binder: 3969:3973 ioctl 40046205 0 returned -22
[ 1582.318676][ T3977] binder: 3975:3977 ioctl 400c620e 20000400 returned -22
01:37:15 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x907e, 0x0})

01:37:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

01:37:15 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0xfffffff9, 0x7ff, 0xfffffff9, 0x8480cc41c475dee9, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r0, &(0x7f00000000c0)="22378f1b1afee89e42097e6ea519de", &(0x7f00000001c0)=""/186}, 0x20)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080))
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0xfffffff9, 0x7ff, 0xfffffff9, 0x8480cc41c475dee9, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r0, &(0x7f00000000c0)="22378f1b1afee89e42097e6ea519de", &(0x7f00000001c0)=""/186}, 0x20) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0) (async)

01:37:15 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='Xtack ,\x00'], 0x8)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='Xtack ,\x00'], 0x8) (async)

01:37:15 executing program 1:
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000440)={0xcb9, "6d95350b878cd3da91cb70e4e1d77ff74d753e07a5ce2233d1f6c4ba602c5e0887daa5092a1f89b2b3b7b42a60946145781db23611b1c8b1ffc1354a98af73ed08b4270181055e1ba77ce62c1e082056fa060c3494a3a15f0c0ee2f44a688741d0df85e4023e1b2acb75d9411314cc8cfe5022343ae117639d128776cf626480769666a9dd29a669d6be636f27f3942dcbed19e585d09f90c8dcc6c385574bec428a771f8ca7ad54b7dcb5da2708228567cff747083cfa4703e5bdd4ff9a1581fe315b1c7d3a5f2c4ae1bb55c65c2ff8c5f9ac3309278bbb4d421f88cb4d94fe97940f463c9d757a079d069b8471779f17ed77ea5ef6a28400bd87d76233a1058995d80088d70902d56b241ae7584c9ccd551b4357e53bd48d257075c18024267a25245e84389698bfa2a86403a680c33945a5a6c35379e2704df5aa457f030afbcc943cd986714129e0f4932ea939b2d2e1e5fba6d3a1c9c0d30f47ad9090a90ae319a22de3ec2baa603574248c395237b136c4b3d9a09f3a352f1134a4c822de6bb82d83d27454ad7d3516708f4ede99d51cf4fb845ef627279226079ecc82744db520e8eac3a79b985fd8d90f8324ad6fe31276f6b913878aa0db706860b16ceec4836d8150351c4b04c8cd49e65d4ee3535dbbbd5c50ad6b9aa4d6da6cee9d9ab42ab9d766547d6d894d0bd309e53686a971f4791298af7bed151cc14fe0c71f3cca839777e93cfc4e024039fb61ad9843dfbdcd9c7a7cf1f89111fdeb982f2d1bf2cdf07420324ded80f4c8e7960af3192c8ccd91bdd334a506afdfe01ddaedf629321a573e678b1cc42b900c5ecbccc4f7e59c1b2f28469117928f62a74808ec6c877aad329531b7f01f2d87dd1e49ebbe705016bd216e1b95a08394c02dddba60e43c8b5356ef608fa596ea413f90a1cade4b847415e2c8cdc6e37d5792c1d69ef95a9f05730d54b02f27f4c789818149c38a49d0b57d8ca940605154043254e5509121848861cbb3f03df45e028e23fe6485e5ed48a4c1d32b32c95df4b48d31866227330e11dac1976b0837dbb67f39fa58682f3044300ea456c04c70aea53519a2cec9746455141e3e46b7afbe6644077ddf7bcef9d14d9c55baf99208b5c11a1df9e65c3846beed41f6b091db61251958abc16252d5b9ce89c67e2a1a3956c90148995adacf2978277ef70b51d85420d49e57fbee637ff8cc9695f4a4cd4dcfef9ef09a4c60786fdf2c2ffc634c4452c34e3b5806a679714354020342a76ff707e8d660c9d21f3c2146ce05d2847eb35d1ffca14c99a50fa9a0e60dd4cd7a50508dae540a75f677ff96503877bc7d729b2360d983550141bfd0ffaba223ae2cb0b5f330eaf2b13579b389053af707bef1315bbab7720058b860d3c9babca6d1d8d9926b7dbb31637910633210a988b5e4594e5ba038e16064ed7c8490d76823beff03c7901c0a1e287b6ebb53c01c2bd2b555541440c57c7ef0b2a67441d4c657b3fcc6d2c29e9783b308dce566707e766da752f6dd1d995a2f934a46051afd80ac292eeba0e18dd76ffc04d48b2ed0dc99f71447efebebc7074616481c5bec97bdda544af0a3b8f32e432e38838b1a6b691be193de72755a775b5d18551934c6e3818846869b4158da5ef51d6f333c89c5bb0b05d082fe1c3e21bcfcfcb6980a9c8688be11c5351b086cb3d1cbb2176b80b6f5e5210786daa7de5824e444f720cdb9919174752ec99dee48966094fe436ed6624c809234ca39e167c09adb444a44874a1a47189642f9a0636b849bf2554cee74334b8115e0d0a22408afa2e355eacc5caf516708542b76fe05da9bf26d8eb48153395c6b707c7fa1103911ae4c573db61fc8300271ddf241c972a659ac45fba087a6eed060e0a7bd6a17ecd2a5aa7cb92cb87488a2910a4aca80007365afdd6e5ffa44384e24dfaaaa09a4d19ea60e5c6a5b0e2a327fb7057d8d23d9cb138cd426988cf972ecc04ce3f99ea81452c5542852ccb46c0b0936be3d6f71e08846d45e00552407d604792f74393484221f96da2f48a97d134a7294501c8b36629874eb3d0992cbb1fd10801f9ba1b55c1b02555e91e6b20aa341a4683608465b26bf370be5b982cba130f005589ce71acea0356bbcb37b983fb3eb3e4d396347e6d4e4bf56c23729077430e6d4eb8004a1f9ea2ac381ab31091ae186213d07b5c450b1b19327d854d61922b4074ba761bf9f73046ed61ef982b99817f702dfa811f5292020e96344a7adfd70447f333eb0795bb90a67e1c312b766f3cdd12bf4061df10d18d8761e169b2133a3be7369776d8b69196cb3bcdf336ac7357786f4fa239c30d88d1be5252b4752537a8cc7d95e97c42f10ac7bc9a6b253771516bba4bc3145eb26e3ff564f3cd93af01e0ab732743f8e2c9304dbd8055e4515ce7c376785c61b10b1c32a928ff03db44911b7e3658ff5fcc00fdf35940b39060bd13eaee0c8d4eb5d0d67bb97be9dfdecc8e46c46d34d3e93e1c1bea02342e161a325d470b869d9f29c553cb0a2d758d5eacfa4e5aaf572caa4dcd940e3fd406b36f9861bf1b19d288a892dff257e410bc04756c426df5dc4c69c6c7ab6b34bb97ec30b1f06393910ff614354745b424767f32b3c41b763e203a8133198629acb22b3e4c4ddceeb3883e81b6709d622bcf850b56f58166d04ed1d1b76bc25114c28eacba7e7d589e9335ef06d7b7582cec4ab19ebcd33496a0d26ef9eedacffc087686105859590f0533933bd9f261dbf9374d174a6ce8db7ee4920cf3c4c9f9ffc78162db977dc5073ae86e2aa2fe3bbdcd8a1c394f14d8f69c8a81fb2c909c7d5e6dd7bf28968e8805bc22e32b44e58d0266600ac7c40f7674425f9072f7e85329c426d9bf85415975af033d958c70480390003b862e6ed3d0eea8ccc2d0ebb6d5ebbe2ee3cc123c7b55cf8db85b39d86394fe5acd863a7cccc2e96362ec49d327f7f61aadf622965f78c72d2529a65881ef976dcb9b4d250b34c81a2adbf892d3bd8eb9303ee8cea77d9f90684e39e6d1b9d0f875f7a1c419ec9a18946ddd880490266037feec1db063fd07d07cd720bc75ecf16bef3836cedf607647e542adfb9d4390cb6968e12ba2460e36cdf3e7101c41b0fed7654030b9f268a715211c6b166de8d7f44accd8a6b5473fbc009176a038046262b9930a7184d1721b5d8b5ff75d19b210c32b5950ffa732d55d1a1347ea2ab0235e4b2270e16a647ca0afd8d58acecd360404db780ff33f74e893d651082fbc88c58f070604e78ee27433be8bfc61ec913a917cf9ddaca81761f7250c44bd8ebfcd103fd4a6831e29185dc341a18b99835710e8863ec34331a8c819fc652aee87344ea2497b0b5b4b43e8a5c8fb1dfb5ac50278c63ef58fb83a959d22182e105ce9368c3b8bdf747ef1997f3368ec0258804a56f9def20cb529d1fd70d28466044b55e4880f583c8c14c3616e764094fcef3e4af416a63a7c5bb1e0bf616f06f99993625ecbdc37d3801f156c5a1e9fa26fa3c1e72a8fdad2d4b627b20bef5fb8332c9e90027798548e8f3e211eb55d00f5ef7211494c299ef7a83cfea4204e48c1959a534fda673eddd39023903383cf3891de5e5ad3dc4075e7fce02fe7a798a4e8a6e86bd4cd3974b025492c9fad818000777530a7d5caa031bdcab53b76c597c72c0ef50a3d3484c0650ccb6d440d47c2dc62b7c1c803b62ab4334c694f98f9db534816a1cb3b94d29c40c614a03fd0b9fdb5771097cb835778b604813c5a2e95f1119301d66b6f00815b410bea2299548c4bb9442abe57553e7d9e36624cd54d0d306d31de568841d9f38b708a989aaadebba53481e2e4a6a2f8dc31ebd211fa73131e3182230f2f7f6f68a19dffb83110f1ff341a61ba51d8e654d016416689906c0fcefda86ae9464e2233ee3bd5e3908b97e2f47f754af51b227aa49537c4bed28791217c4ce335808f6f99a729ed47d05176986b15fdefd1d48f1af90f695bd0c701e8fd6cd0fe5ad907dbf2658d8f5c2fab80cdcaeb505d4d9ef257149a720c56a2b33345f0291ae4674c39e0f1281ba627df9a4ea8084f278b90a2586a43bdcd2c4e78a38ef03ef2199f53adc543633b5626a3cf6b23a460829d65cee7bff29cf6030bff31d36517f11276fbab9fdece3b194862941cc608cfbba742c92922ded76d330c1aa6dff927b9c95dcdd34bf3b073772ea24e3f1e79f7ced74ce459c6f07fd5cb9a6f9e16c79ca0e49ab0a208ade9bcc8ac51878d790e8726447cacc173b30c0b399541d26728968bcd836f5e0c74178a685a18c298482991ca6b9fe3d47f1932e6b96b5bb77793d382c8c588c20d7d3e2d92a6ef9669334a9c4c13ac894a287a3b5a49f074317a9cd150865091d4cdb38492fa3a28b00f2f041d91c3c7f01f4d090c7f12aa9ff83686abcb488041aadb82fedd3b22b01ddf8b4467f61d56bd6deedba882ab4ac94436c89e91996cc450906f1026a9a2444c44bdbf37f88f9b63e4a450441e042d66365ce09a72c0a34dbd0c88909eb6aa4e27ba84e8fb7fae08d790e8335cdcf37a1f2be0f4a6db135dc04df34948c0a3a4b105e9fdceec1849bae3045"}) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:15 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xff00, 0x0})

[ 1582.415143][ T3986] binder: 3979:3986 ioctl 40046205 0 returned -22
[ 1582.445650][ T3990] binder: 3989:3990 ioctl 400c620e 20000400 returned -22
01:37:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

01:37:15 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0xc02, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000180))
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000400)={&(0x7f00000001c0)="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", &(0x7f0000000100)=""/86, &(0x7f00000002c0)="dc7039fec275c8b86b294a4eb074abc8dc5c9279ef82210b8fbbd3da04c71f14c2bc751264452b39b49dfc94b8e84f9e774e1290ef799db88e0580c29b0c51ee3e871b86e9f108dbe07ec0ca7e0bad2506256945929525b562e975b3c84705759a6bc2b859beb95c0d108cdd33862996f32c10405e2acdaad9acb9af8cf88d9a82530e2eefd792fc0ccb0cb82a0ccb5a956423b5bc2e1c63afe68247c34c49c7b043d89810bdb7e75d6a2391b85c1ecff7fe863ef1ea85155c3ea08ba5c0c7a2358d63ba1f79a4226f6ff0f0a1742ab0cb06db76fb6cd88ea13f4722e358e7fc75ff4b5121578c99", &(0x7f00000003c0)="d7ef37b3a193d46f45c90f9cf181bff2e473fd82b4c169d59ab9dd4f", 0x3}, 0x38)
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000440)="9b287566d06af2d500000000000c328e70e26dd71a6208a11d64ccf823fc9b8381a066f5")
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xb8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x410140, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000480)={0x1, r2})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom0\x00', 0xc02, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(r1, 0x4008af23, &(0x7f0000000180)) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000400)={&(0x7f00000001c0)="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", &(0x7f0000000100)=""/86, &(0x7f00000002c0)="dc7039fec275c8b86b294a4eb074abc8dc5c9279ef82210b8fbbd3da04c71f14c2bc751264452b39b49dfc94b8e84f9e774e1290ef799db88e0580c29b0c51ee3e871b86e9f108dbe07ec0ca7e0bad2506256945929525b562e975b3c84705759a6bc2b859beb95c0d108cdd33862996f32c10405e2acdaad9acb9af8cf88d9a82530e2eefd792fc0ccb0cb82a0ccb5a956423b5bc2e1c63afe68247c34c49c7b043d89810bdb7e75d6a2391b85c1ecff7fe863ef1ea85155c3ea08ba5c0c7a2358d63ba1f79a4226f6ff0f0a1742ab0cb06db76fb6cd88ea13f4722e358e7fc75ff4b5121578c99", &(0x7f00000003c0)="d7ef37b3a193d46f45c90f9cf181bff2e473fd82b4c169d59ab9dd4f", 0x3}, 0x38) (async)
ioctl$HIDIOCSFEATURE(0xffffffffffffffff, 0xc0404806, &(0x7f0000000440)="9b287566d06af2d500000000000c328e70e26dd71a6208a11d64ccf823fc9b8381a066f5") (async)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xb8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x7ff}, 0xe) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x410140, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000480)={0x1, r2}) (async)

01:37:15 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0})

[ 1582.516961][ T3997] binder: 3996:3997 ioctl 40046205 0 returned -22
[ 1582.540000][ T4004] binder: 4001:4004 ioctl 400c620e 20000400 returned -22
01:37:15 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
write$damon_monitor_on(r2, &(0x7f0000000000), 0x3)

01:37:15 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:15 executing program 5:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x11, 0xfffffff9, 0x7ff, 0xfffffff9, 0x8480cc41c475dee9, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x3}, 0x48)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000280)={r0, &(0x7f00000000c0)="22378f1b1afee89e42097e6ea519de", &(0x7f00000001c0)=""/186}, 0x20) (async)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000080)) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0)

01:37:15 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

01:37:15 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000140)={0x9, 0x1, "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"})
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:15 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:15 executing program 5:
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002140)={&(0x7f0000002200)="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", &(0x7f0000000000)=""/131, &(0x7f00000000c0)="42ab6ef1a70ebfcd2706eb9c218b8fb1358e5aba0ba3266717393bfcd71d", &(0x7f0000001140)="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", 0xffffff44, 0x1}, 0x38)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000021c0)={&(0x7f0000002180)='./file0\x00', 0x1}, 0x10)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

[ 1582.674953][ T4022] binder: 4018:4022 ioctl 400c620e 20000400 returned -22
[ 1582.689169][ T4025] binder: 4023:4025 ioctl 40046205 0 returned -22
01:37:15 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0})

01:37:15 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
write$damon_monitor_on(r2, &(0x7f0000000000), 0x3)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
write$damon_monitor_on(r2, &(0x7f0000000000), 0x3) (async)

01:37:15 executing program 5:
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002140)={&(0x7f0000002200)="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", &(0x7f0000000000)=""/131, &(0x7f00000000c0)="42ab6ef1a70ebfcd2706eb9c218b8fb1358e5aba0ba3266717393bfcd71d", &(0x7f0000001140)="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", 0xffffff44, 0x1}, 0x38) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000021c0)={&(0x7f0000002180)='./file0\x00', 0x1}, 0x10) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:15 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

01:37:15 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

01:37:15 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async, rerun: 32)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (rerun: 32)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async, rerun: 32)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000140)={0x9, 0x1, "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"}) (async, rerun: 32)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:15 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0})

[ 1582.832022][ T4039] binder: 4037:4039 ioctl 400c620e 20000400 returned -22
01:37:15 executing program 5:
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000002140)={&(0x7f0000002200)="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", &(0x7f0000000000)=""/131, &(0x7f00000000c0)="42ab6ef1a70ebfcd2706eb9c218b8fb1358e5aba0ba3266717393bfcd71d", &(0x7f0000001140)="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", 0xffffff44, 0x1}, 0x38) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x0, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000021c0)={&(0x7f0000002180)='./file0\x00', 0x1}, 0x10) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:15 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

01:37:15 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
write$damon_monitor_on(r2, &(0x7f0000000000), 0x3)

01:37:15 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:15 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0})

01:37:15 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000140)={0x9, 0x1, "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"}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

[ 1582.922551][ T4055] binder: 4052:4055 ioctl 400c620e 20000400 returned -22
01:37:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

01:37:15 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x8, 0x4a200)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02064c3, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x5, 0x3, 0x6})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r1, 0x501, 0x0, 0x0, {0x3}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x2c}}, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0x40046205, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6)

01:37:15 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:15 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x400000)
ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000080))

[ 1583.016587][ T4074] binder: 4072:4074 ioctl 400c620e 20000400 returned -22
01:37:15 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0})

01:37:15 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000140)={{0xffffffffffffffff, 0x2, 0x7f, 0x1, 0x8}, 0x80000001, 0x1, 'id0\x00', 'timer1\x00', 0x0, 0xcb4, 0x6, 0x7ff, 0x3})

01:37:15 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:15 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:15 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x8, 0x4a200)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02064c3, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x5, 0x3, 0x6})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r1, 0x501, 0x0, 0x0, {0x3}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x2c}}, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0x40046205, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6)
syz_open_dev$mouse(&(0x7f0000000140), 0x8, 0x4a200) (async)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02064c3, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x5, 0x3, 0x6}) (async)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r1, 0x501, 0x0, 0x0, {0x3}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x2c}}, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r3, 0x40046205, 0x0) (async)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6) (async)

01:37:15 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0})

[ 1583.133495][ T4084] binder: 4082:4084 ioctl 400c620e 20000400 returned -22
01:37:15 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x400000)
ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000080))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x400000) (async)
ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000080)) (async)

01:37:15 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000140)={{0xffffffffffffffff, 0x2, 0x7f, 0x1, 0x8}, 0x80000001, 0x1, 'id0\x00', 'timer1\x00', 0x0, 0xcb4, 0x6, 0x7ff, 0x3})

01:37:15 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x6)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x3, 0x8080)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000180)={&(0x7f00000000c0)="495f2bf9fb574c837655a42142ef9c74fd7ccf569336c79fc9e9e11038e4cd4d9ea0b275ba5de8e787cab5db0b0379d945a3290079f908a96d9a55eeb4817f29c17d1db90dd5ac8b65a76b441f1ef466518c7e842b3935da606a376c7e0efecd8a79b664350acb885be461126c863d40f256dcdccf91d431f7ea25e0f300ce89c6e78e814413", 0x86})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})

01:37:15 executing program 4:
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x8, 0x4a200)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02064c3, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x5, 0x3, 0x6})
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r1, 0x501, 0x0, 0x0, {0x3}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x2c}}, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0x40046205, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6)

01:37:15 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0})

[ 1583.241404][ T4099] binder: 4096:4099 ioctl 400c620e 20000400 returned -22
01:37:16 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x4, 0x400000)
ioctl$HIDIOCGRAWPHYS(r1, 0x80404805, &(0x7f0000000080))

01:37:16 executing program 4:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x3, 0x5})
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x40)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0)

01:37:16 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x6)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x3, 0x8080)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000180)={&(0x7f00000000c0)="495f2bf9fb574c837655a42142ef9c74fd7ccf569336c79fc9e9e11038e4cd4d9ea0b275ba5de8e787cab5db0b0379d945a3290079f908a96d9a55eeb4817f29c17d1db90dd5ac8b65a76b441f1ef466518c7e842b3935da606a376c7e0efecd8a79b664350acb885be461126c863d40f256dcdccf91d431f7ea25e0f300ce89c6e78e814413", 0x86})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc) (async)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc) (async)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x6) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
syz_open_dev$mouse(&(0x7f0000000080), 0x3, 0x8080) (async)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000180)={&(0x7f00000000c0)="495f2bf9fb574c837655a42142ef9c74fd7ccf569336c79fc9e9e11038e4cd4d9ea0b275ba5de8e787cab5db0b0379d945a3290079f908a96d9a55eeb4817f29c17d1db90dd5ac8b65a76b441f1ef466518c7e842b3935da606a376c7e0efecd8a79b664350acb885be461126c863d40f256dcdccf91d431f7ea25e0f300ce89c6e78e814413", 0x86}) (async)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'}) (async)

01:37:16 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x48000000, 0x0})

01:37:16 executing program 5:
r0 = syz_open_dev$mouse(&(0x7f0000000140), 0x8, 0x4a200)
ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r0, 0xc02064c3, &(0x7f0000000240)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x5, 0x3, 0x6}) (async)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x2c, r1, 0x501, 0x0, 0x0, {0x3}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x2c}}, 0x0) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0x40046205, 0x0)
getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000), &(0x7f0000000040)=0x6)

01:37:16 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000140)={{0xffffffffffffffff, 0x2, 0x7f, 0x1, 0x8}, 0x80000001, 0x1, 'id0\x00', 'timer1\x00', 0x0, 0xcb4, 0x6, 0x7ff, 0x3})

[ 1583.354170][ T4117] binder: 4115:4117 ioctl 400c620e 20000400 returned -22
01:37:16 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000))

01:37:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:16 executing program 5:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r0, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004014)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x54800, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000480)={{0x1, 0x2, 0x6724c1c2, 0x1, 0x7}, 0x1, 0x5, 'id1\x00', 'timer0\x00', 0x0, 0x7, 0x1f, 0x2, 0x9})
ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000240))
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127bd7000fedbdf2503000000050005000000000008001800e000000200000000000000050c001000040000000000000006001d00650b00000500140003000000"], 0x48}, 0x1, 0x0, 0x0, 0xc004}, 0x41)
r4 = syz_open_dev$mouse(&(0x7f0000000400), 0x3, 0x280)
openat$cgroup_procs(r4, &(0x7f0000000440)='tasks\x00', 0x2, 0x0)
ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0)

01:37:16 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4c000000, 0x0})

01:37:16 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0xff, 0x0, &(0x7f0000000000)="28ee3d7a6bba159b6eaf855e26ca8e2c1e95f85e43df6b41dc8559babca17b2e644d16c04e2c1df0d175d6a3522ea9e803606b3e67b862368545cbba7af8b7d26cf82713b5e72b0b409b2b75ed0d03c8fdef0329e2532a32a68c0313a594f4570adcf03e506e55b0ba880797ea176d87a42fad3c9c059543345ae3dbd24c224230f1160ed5650d095733871fb515049d378b0fd688479751ac9a742ded6c061d2d14579c12632cf6cf5fca1706de01766eaff11f3f3ae892e103d7fefde2"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc)
connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffff8}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xd4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004818}, 0x4001)

[ 1583.480758][ T4133] binder: 4124:4133 ioctl 400c620e 20000400 returned -22
01:37:16 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc) (async)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc)
getsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x6)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x3, 0x8080)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r3, 0xc01064bd, &(0x7f0000000180)={&(0x7f00000000c0)="495f2bf9fb574c837655a42142ef9c74fd7ccf569336c79fc9e9e11038e4cd4d9ea0b275ba5de8e787cab5db0b0379d945a3290079f908a96d9a55eeb4817f29c17d1db90dd5ac8b65a76b441f1ef466518c7e842b3935da606a376c7e0efecd8a79b664350acb885be461126c863d40f256dcdccf91d431f7ea25e0f300ce89c6e78e814413", 0x86})
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan1\x00'})

01:37:16 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async, rerun: 64)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (rerun: 64)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000))

01:37:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:16 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x68000000, 0x0})

01:37:16 executing program 5:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r0, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004014)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x54800, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000480)={{0x1, 0x2, 0x6724c1c2, 0x1, 0x7}, 0x1, 0x5, 'id1\x00', 'timer0\x00', 0x0, 0x7, 0x1f, 0x2, 0x9})
ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000240))
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127bd7000fedbdf2503000000050005000000000008001800e000000200000000000000050c001000040000000000000006001d00650b00000500140003000000"], 0x48}, 0x1, 0x0, 0x0, 0xc004}, 0x41)
r4 = syz_open_dev$mouse(&(0x7f0000000400), 0x3, 0x280)
openat$cgroup_procs(r4, &(0x7f0000000440)='tasks\x00', 0x2, 0x0)
ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r0, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004014) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x54800, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000480)={{0x1, 0x2, 0x6724c1c2, 0x1, 0x7}, 0x1, 0x5, 'id1\x00', 'timer0\x00', 0x0, 0x7, 0x1f, 0x2, 0x9}) (async)
ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000240)) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127bd7000fedbdf2503000000050005000000000008001800e000000200000000000000050c001000040000000000000006001d00650b00000500140003000000"], 0x48}, 0x1, 0x0, 0x0, 0xc004}, 0x41) (async)
syz_open_dev$mouse(&(0x7f0000000400), 0x3, 0x280) (async)
openat$cgroup_procs(r4, &(0x7f0000000440)='tasks\x00', 0x2, 0x0) (async)
ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) (async)

[ 1583.596244][ T4151] binder: 4145:4151 ioctl 400c620e 20000400 returned -22
[ 1583.597552][ T4147] binder: 4144:4147 ioctl 40046205 0 returned -22
01:37:16 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0xff, 0x0, &(0x7f0000000000)="28ee3d7a6bba159b6eaf855e26ca8e2c1e95f85e43df6b41dc8559babca17b2e644d16c04e2c1df0d175d6a3522ea9e803606b3e67b862368545cbba7af8b7d26cf82713b5e72b0b409b2b75ed0d03c8fdef0329e2532a32a68c0313a594f4570adcf03e506e55b0ba880797ea176d87a42fad3c9c059543345ae3dbd24c224230f1160ed5650d095733871fb515049d378b0fd688479751ac9a742ded6c061d2d14579c12632cf6cf5fca1706de01766eaff11f3f3ae892e103d7fefde2"}) (async, rerun: 32)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (rerun: 32)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc) (async)
connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffff8}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xd4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004818}, 0x4001)

01:37:16 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs2/custom0\x00', 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000000)=0x9)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x18, 0x0, &(0x7f00000001c0)=[@enter_looper, @enter_looper, @acquire, @decrefs={0x40046307, 0x1001}], 0x197, 0x0, &(0x7f0000000440)="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"})
ioctl$SNDCTL_DSP_GETIPTR(r2, 0x800c5011, &(0x7f0000000080))
ioctl$RNDADDENTROPY(0xffffffffffffffff, 0x40085203, &(0x7f0000000040)={0x9, 0xd, "2a4109000000000000000b9ecf"})

01:37:16 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)) (async)

01:37:16 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6c000000, 0x0})

[ 1583.705074][ T4162] binder: 4159:4162 ioctl 400c620e 20000400 returned -22
[ 1583.727972][ T4165] binder: 4160:4165 ioctl 40046205 0 returned -22
01:37:16 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x802, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

[ 1583.773767][ T4168] binder: 4160:4168 ioctl 40046205 0 returned -22
[ 1583.803904][ T4183] binder: 4180:4183 ioctl 400c620e 20000400 returned -22
01:37:16 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x74000000, 0x0})

01:37:16 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0xff, 0x0, &(0x7f0000000000)="28ee3d7a6bba159b6eaf855e26ca8e2c1e95f85e43df6b41dc8559babca17b2e644d16c04e2c1df0d175d6a3522ea9e803606b3e67b862368545cbba7af8b7d26cf82713b5e72b0b409b2b75ed0d03c8fdef0329e2532a32a68c0313a594f4570adcf03e506e55b0ba880797ea176d87a42fad3c9c059543345ae3dbd24c224230f1160ed5650d095733871fb515049d378b0fd688479751ac9a742ded6c061d2d14579c12632cf6cf5fca1706de01766eaff11f3f3ae892e103d7fefde2"})
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc)
connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffff8}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xd4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004818}, 0x4001)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f00000000c0)=@usbdevfs_driver={0xff, 0x0, &(0x7f0000000000)="28ee3d7a6bba159b6eaf855e26ca8e2c1e95f85e43df6b41dc8559babca17b2e644d16c04e2c1df0d175d6a3522ea9e803606b3e67b862368545cbba7af8b7d26cf82713b5e72b0b409b2b75ed0d03c8fdef0329e2532a32a68c0313a594f4570adcf03e506e55b0ba880797ea176d87a42fad3c9c059543345ae3dbd24c224230f1160ed5650d095733871fb515049d378b0fd688479751ac9a742ded6c061d2d14579c12632cf6cf5fca1706de01766eaff11f3f3ae892e103d7fefde2"}) (async)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000), &(0x7f0000000100)=0xc) (async)
connect$bt_l2cap(r1, &(0x7f0000000140)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8}, 0xe) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x38, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0xfffffffffffffff8}, @L2TP_ATTR_VLAN_ID={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0xd4}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004818}, 0x4001) (async)

01:37:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:16 executing program 5:
r0 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r0, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004014)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x54800, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000480)={{0x1, 0x2, 0x6724c1c2, 0x1, 0x7}, 0x1, 0x5, 'id1\x00', 'timer0\x00', 0x0, 0x7, 0x1f, 0x2, 0x9})
ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000240))
r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127bd7000fedbdf2503000000050005000000000008001800e000000200000000000000050c001000040000000000000006001d00650b00000500140003000000"], 0x48}, 0x1, 0x0, 0x0, 0xc004}, 0x41)
r4 = syz_open_dev$mouse(&(0x7f0000000400), 0x3, 0x280)
openat$cgroup_procs(r4, &(0x7f0000000440)='tasks\x00', 0x2, 0x0)
ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0)
syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r0, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20004014) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000200), 0x54800, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000480)={{0x1, 0x2, 0x6724c1c2, 0x1, 0x7}, 0x1, 0x5, 'id1\x00', 'timer0\x00', 0x0, 0x7, 0x1f, 0x2, 0x9}) (async)
ioctl$SNDCTL_DSP_GETOPTR(r2, 0x800c5012, &(0x7f0000000240)) (async)
syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000127bd7000fedbdf2503000000050005000000000008001800e000000200000000000000050c001000040000000000000006001d00650b00000500140003000000"], 0x48}, 0x1, 0x0, 0x0, 0xc004}, 0x41) (async)
syz_open_dev$mouse(&(0x7f0000000400), 0x3, 0x280) (async)
openat$cgroup_procs(r4, &(0x7f0000000440)='tasks\x00', 0x2, 0x0) (async)
ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000000)) (async)
ioctl$BINDER_WRITE_READ(r1, 0x40046205, 0x0) (async)

01:37:16 executing program 2:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0xc0, 0x0, &(0x7f0000001600)=[@exit_looper, @register_looper, @increfs_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x0, 0x1, 0xd}, @fd, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000015c0)={0x0, 0x20, 0x38}}, 0x1000}, @free_buffer, @increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0xa, 0x1, 0x3f}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/4096, 0x1000, 0x2, 0x36}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}], 0xbd, 0x0, &(0x7f0000001500)="aca2aa594ec03e55b83e94da23ca8216a529ec1e65721b57e210fa7ea363c8893cade5f3f1caac7892e062dae2e4cac677b48807ad43e5d9e5699f3ecad00e56bfcb0c0644457421166c1373d3f254ad2ad5bd672b097a9f1bbc3d462dec83964fa52d22d321a7c5de44e522bd487796258e71271723a531d5f82d2b5543df116c1b5b18e56ab5d3523bd40359223051a4f4063489deb46a143280c88943dcac80c86135bbf6ded2eb3657aca52ee2006a301fb304f08b73742de4b44b"})
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x311040, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_ext={0x1c, 0x5, &(0x7f0000000100)=@raw=[@ldst={0x3, 0x2, 0x3, 0x1, 0xb, 0x40, 0xfffffffffffffff0}, @ldst={0x0, 0x0, 0x0, 0x3, 0x0, 0x10, 0x10}, @map_fd={0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x39}], &(0x7f0000000240)='GPL\x00', 0x9, 0xcb, &(0x7f0000000280)=""/203, 0x41100, 0x16, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000003c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001440)={0x4, 0x9, 0x7, 0x5}, 0x10, 0x14878}, 0x80)

01:37:16 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x80086601, 0x0)

01:37:16 executing program 2:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0xc0, 0x0, &(0x7f0000001600)=[@exit_looper, @register_looper, @increfs_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x0, 0x1, 0xd}, @fd, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000015c0)={0x0, 0x20, 0x38}}, 0x1000}, @free_buffer, @increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0xa, 0x1, 0x3f}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/4096, 0x1000, 0x2, 0x36}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}], 0xbd, 0x0, &(0x7f0000001500)="aca2aa594ec03e55b83e94da23ca8216a529ec1e65721b57e210fa7ea363c8893cade5f3f1caac7892e062dae2e4cac677b48807ad43e5d9e5699f3ecad00e56bfcb0c0644457421166c1373d3f254ad2ad5bd672b097a9f1bbc3d462dec83964fa52d22d321a7c5de44e522bd487796258e71271723a531d5f82d2b5543df116c1b5b18e56ab5d3523bd40359223051a4f4063489deb46a143280c88943dcac80c86135bbf6ded2eb3657aca52ee2006a301fb304f08b73742de4b44b"})
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x311040, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_ext={0x1c, 0x5, &(0x7f0000000100)=@raw=[@ldst={0x3, 0x2, 0x3, 0x1, 0xb, 0x40, 0xfffffffffffffff0}, @ldst={0x0, 0x0, 0x0, 0x3, 0x0, 0x10, 0x10}, @map_fd={0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x39}], &(0x7f0000000240)='GPL\x00', 0x9, 0xcb, &(0x7f0000000280)=""/203, 0x41100, 0x16, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000003c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001440)={0x4, 0x9, 0x7, 0x5}, 0x10, 0x14878}, 0x80)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0xc0, 0x0, &(0x7f0000001600)=[@exit_looper, @register_looper, @increfs_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x0, 0x1, 0xd}, @fd, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000015c0)={0x0, 0x20, 0x38}}, 0x1000}, @free_buffer, @increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0xa, 0x1, 0x3f}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/4096, 0x1000, 0x2, 0x36}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}], 0xbd, 0x0, &(0x7f0000001500)="aca2aa594ec03e55b83e94da23ca8216a529ec1e65721b57e210fa7ea363c8893cade5f3f1caac7892e062dae2e4cac677b48807ad43e5d9e5699f3ecad00e56bfcb0c0644457421166c1373d3f254ad2ad5bd672b097a9f1bbc3d462dec83964fa52d22d321a7c5de44e522bd487796258e71271723a531d5f82d2b5543df116c1b5b18e56ab5d3523bd40359223051a4f4063489deb46a143280c88943dcac80c86135bbf6ded2eb3657aca52ee2006a301fb304f08b73742de4b44b"}) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x311040, 0x0) (async)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_ext={0x1c, 0x5, &(0x7f0000000100)=@raw=[@ldst={0x3, 0x2, 0x3, 0x1, 0xb, 0x40, 0xfffffffffffffff0}, @ldst={0x0, 0x0, 0x0, 0x3, 0x0, 0x10, 0x10}, @map_fd={0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x39}], &(0x7f0000000240)='GPL\x00', 0x9, 0xcb, &(0x7f0000000280)=""/203, 0x41100, 0x16, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000003c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001440)={0x4, 0x9, 0x7, 0x5}, 0x10, 0x14878}, 0x80) (async)

01:37:16 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/custom1\x00', 0x802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1583.948371][ T4194] binder: 4190:4194 ioctl 400c620e 20000400 returned -22
01:37:16 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7a000000, 0x0})

01:37:16 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1801, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@increfs, @increfs={0x40046304, 0x3}], 0x9f, 0x0, &(0x7f0000000080)="f25deccc888edca6c0152107fb6b5016e5d25d6540d0788515d1c5498b92a242ae06b35089c339abbcd219b18418627831bf6936de14609f01a30ec0c6aee59af9677f3fb79878fd61ab6072a097fff5229735648f0d931bc8cdf0d89027390e6b2ae75f02562bd4dd98b61bff74c42021e3b277d2a97f2276611504dc79585c049b13ec1fc81ff66278fcfc453da41088d8c376b3d3591278cb7e289f5f74"})

[ 1584.001790][ T4200] binder: 4195:4200 ioctl 40046205 0 returned -22
01:37:16 executing program 4:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x802, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/binder1\x00', 0x0, 0x0)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r0, 0x80045006, &(0x7f0000000040))
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SOUND_PCM_READ_CHANNELS(r1, 0x80045006, &(0x7f0000000040))
ioctl$SOUND_PCM_READ_BITS(r1, 0x80045005, &(0x7f0000000200))
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000080))
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080), 0xad, 0x0, &(0x7f0000000140)="977e22bca319e8ad824e5318a628d0da54a9322470cf70f56e12f2a922ab5a2a60b807206a87d8a3a9ebac86db52ba02e99af69a2ecc77688155b0ee95995d581c4f9a466fba26704e34d3480876cb7625b40015ff97a0d0c89f0dc286ab9e2480428ca30c2cb38c018afbf5a43188f07a86ade3112ce4a4d1303f171b95bbcbe69d369efb189385a7527f1bbf53c61e4b0800000042f53fc9516283fcd37c084260f580ec7bdd695d7fd8bd1e"})

01:37:16 executing program 2:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0xc0, 0x0, &(0x7f0000001600)=[@exit_looper, @register_looper, @increfs_done, @reply_sg={0x40486312, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x0, 0x1, 0xd}, @fd, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f00000015c0)={0x0, 0x20, 0x38}}, 0x1000}, @free_buffer, @increfs={0x40046304, 0x1}, @transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000000)={@fda={0x66646185, 0xa, 0x1, 0x3f}, @fd, @ptr={0x70742a85, 0x1, &(0x7f0000000440)=""/4096, 0x1000, 0x2, 0x36}}, &(0x7f0000000080)={0x0, 0x20, 0x38}}}], 0xbd, 0x0, &(0x7f0000001500)="aca2aa594ec03e55b83e94da23ca8216a529ec1e65721b57e210fa7ea363c8893cade5f3f1caac7892e062dae2e4cac677b48807ad43e5d9e5699f3ecad00e56bfcb0c0644457421166c1373d3f254ad2ad5bd672b097a9f1bbc3d462dec83964fa52d22d321a7c5de44e522bd487796258e71271723a531d5f82d2b5543df116c1b5b18e56ab5d3523bd40359223051a4f4063489deb46a143280c88943dcac80c86135bbf6ded2eb3657aca52ee2006a301fb304f08b73742de4b44b"}) (async)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000380), 0x311040, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001480)=@bpf_ext={0x1c, 0x5, &(0x7f0000000100)=@raw=[@ldst={0x3, 0x2, 0x3, 0x1, 0xb, 0x40, 0xfffffffffffffff0}, @ldst={0x0, 0x0, 0x0, 0x3, 0x0, 0x10, 0x10}, @map_fd={0x18, 0x1}, @call={0x85, 0x0, 0x0, 0x39}], &(0x7f0000000240)='GPL\x00', 0x9, 0xcb, &(0x7f0000000280)=""/203, 0x41100, 0x16, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000003c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001440)={0x4, 0x9, 0x7, 0x5}, 0x10, 0x14878}, 0x80)

01:37:16 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x801, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
r2 = syz_open_dev$mouse(&(0x7f0000000480), 0x0, 0x107000)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f0000000540)='./file0\x00'}, 0x10)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x111282, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000140)={0x0, r6})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f0000000380)=@raw=[@alu={0x3, 0x0, 0x9, 0x8, 0x2, 0x0, 0xfffffffffffffff0}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff9}, @alu={0x4, 0x1, 0xa, 0x9, 0x2, 0x2, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x1, 0x9, 0x5, 0x9, 0x40, 0xfffffffffffffff0}], &(0x7f00000003c0)='GPL\x00', 0x0, 0x47, &(0x7f0000000400)=""/71, 0x41100, 0x10, '\x00', r1, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x10, 0x3ca4, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, r3, r4, r6, 0x1]}, 0x80)

01:37:16 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x877e0000, 0x0})

[ 1584.058179][ T4225] binder: 4218:4225 ioctl 80086601 0 returned -22
[ 1584.082990][ T4227] binder: 4221:4227 ioctl 400c620e 20000400 returned -22
01:37:16 executing program 1:
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000040)={0x0, 0x739})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x31596732a30fb2dd, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000004c0)={&(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x27030686, 0x2865, 0x0, 0xffffffff], 0x5, 0x2, 0x6})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000180)="e8d4c6cb535547a8c0897a0724b99178730be04bcfe7d23bf7ab9955e9e4e4702a327f4a6545220ef698c3a2c4b2f174b8c082eba57a0644059df1e86ed6367fef7f56a45fc9fe92b2fb97405639e0ef1fe4edff676099579becb37d97c95b3cf78fb2281b28f6f7e50ceb9b40d7eb8383d7c2db7d55e5955237b6da5c800b5f55e118cc67cfd57f66d74f2079b9749fa4fae7bf79519e3ab378cbb1b4238774655bda43e8175b0844dcbd976b187dd0c1a11e4884f04e6a40223f9154836211889c9ca910a1393cf3", &(0x7f0000000280)=""/128, &(0x7f0000000540)="520e15c938c34ff3e9c025abd68d9ad30556a28636101ea20b456d03ed82a7bf8c67c5c3ae68b24366424a360f1ec1e3287f9cdae85460bcb2560acf9882aa190b3ac02d92d28b3f77f946c7c9946565adfd210d29dcef0742afbb9973b20aa793b462c641f8723301b60d70c6d5f4baed38b5e32a877faf5bdd0f65313eb05803333c31bca7b65e0a5b253d8887f827b7", &(0x7f0000000080)="ef93109e402810fc98447cdc", 0x1, r2, 0x4}, 0x38)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000000)=0x1)

01:37:16 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1801, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@increfs, @increfs={0x40046304, 0x3}], 0x9f, 0x0, &(0x7f0000000080)="f25deccc888edca6c0152107fb6b5016e5d25d6540d0788515d1c5498b92a242ae06b35089c339abbcd219b18418627831bf6936de14609f01a30ec0c6aee59af9677f3fb79878fd61ab6072a097fff5229735648f0d931bc8cdf0d89027390e6b2ae75f02562bd4dd98b61bff74c42021e3b277d2a97f2276611504dc79585c049b13ec1fc81ff66278fcfc453da41088d8c376b3d3591278cb7e289f5f74"})

01:37:16 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
mmap$binder(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x100)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1584.179698][ T4234] binder: 4231:4234 ioctl 400c620e 20000400 returned -22
01:37:16 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x8f7e0000, 0x0})

01:37:16 executing program 1:
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000040)={0x0, 0x739}) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 32)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x31596732a30fb2dd, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000004c0)={&(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x27030686, 0x2865, 0x0, 0xffffffff], 0x5, 0x2, 0x6})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000180)="e8d4c6cb535547a8c0897a0724b99178730be04bcfe7d23bf7ab9955e9e4e4702a327f4a6545220ef698c3a2c4b2f174b8c082eba57a0644059df1e86ed6367fef7f56a45fc9fe92b2fb97405639e0ef1fe4edff676099579becb37d97c95b3cf78fb2281b28f6f7e50ceb9b40d7eb8383d7c2db7d55e5955237b6da5c800b5f55e118cc67cfd57f66d74f2079b9749fa4fae7bf79519e3ab378cbb1b4238774655bda43e8175b0844dcbd976b187dd0c1a11e4884f04e6a40223f9154836211889c9ca910a1393cf3", &(0x7f0000000280)=""/128, &(0x7f0000000540)="520e15c938c34ff3e9c025abd68d9ad30556a28636101ea20b456d03ed82a7bf8c67c5c3ae68b24366424a360f1ec1e3287f9cdae85460bcb2560acf9882aa190b3ac02d92d28b3f77f946c7c9946565adfd210d29dcef0742afbb9973b20aa793b462c641f8723301b60d70c6d5f4baed38b5e32a877faf5bdd0f65313eb05803333c31bca7b65e0a5b253d8887f827b7", &(0x7f0000000080)="ef93109e402810fc98447cdc", 0x1, r2, 0x4}, 0x38) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000000)=0x1)

[ 1584.218483][ T4236] binder: 4230:4236 ioctl 40046205 0 returned -22
01:37:16 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x801, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
r2 = syz_open_dev$mouse(&(0x7f0000000480), 0x0, 0x107000)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f0000000540)='./file0\x00'}, 0x10) (async)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x111282, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) (async)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000140)={0x0, r6}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f0000000380)=@raw=[@alu={0x3, 0x0, 0x9, 0x8, 0x2, 0x0, 0xfffffffffffffff0}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff9}, @alu={0x4, 0x1, 0xa, 0x9, 0x2, 0x2, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x1, 0x9, 0x5, 0x9, 0x40, 0xfffffffffffffff0}], &(0x7f00000003c0)='GPL\x00', 0x0, 0x47, &(0x7f0000000400)=""/71, 0x41100, 0x10, '\x00', r1, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x10, 0x3ca4, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, r3, r4, r6, 0x1]}, 0x80)

01:37:17 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1801, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@increfs, @increfs={0x40046304, 0x3}], 0x9f, 0x0, &(0x7f0000000080)="f25deccc888edca6c0152107fb6b5016e5d25d6540d0788515d1c5498b92a242ae06b35089c339abbcd219b18418627831bf6936de14609f01a30ec0c6aee59af9677f3fb79878fd61ab6072a097fff5229735648f0d931bc8cdf0d89027390e6b2ae75f02562bd4dd98b61bff74c42021e3b277d2a97f2276611504dc79585c049b13ec1fc81ff66278fcfc453da41088d8c376b3d3591278cb7e289f5f74"})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0x1801, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x10, 0x0, &(0x7f0000000000)=[@increfs, @increfs={0x40046304, 0x3}], 0x9f, 0x0, &(0x7f0000000080)="f25deccc888edca6c0152107fb6b5016e5d25d6540d0788515d1c5498b92a242ae06b35089c339abbcd219b18418627831bf6936de14609f01a30ec0c6aee59af9677f3fb79878fd61ab6072a097fff5229735648f0d931bc8cdf0d89027390e6b2ae75f02562bd4dd98b61bff74c42021e3b277d2a97f2276611504dc79585c049b13ec1fc81ff66278fcfc453da41088d8c376b3d3591278cb7e289f5f74"}) (async)

01:37:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x801, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
r2 = syz_open_dev$mouse(&(0x7f0000000480), 0x0, 0x107000)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f0000000540)='./file0\x00'}, 0x10)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x111282, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000140)={0x0, r6})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f0000000380)=@raw=[@alu={0x3, 0x0, 0x9, 0x8, 0x2, 0x0, 0xfffffffffffffff0}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff9}, @alu={0x4, 0x1, 0xa, 0x9, 0x2, 0x2, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x1, 0x9, 0x5, 0x9, 0x40, 0xfffffffffffffff0}], &(0x7f00000003c0)='GPL\x00', 0x0, 0x47, &(0x7f0000000400)=""/71, 0x41100, 0x10, '\x00', r1, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x10, 0x3ca4, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, r3, r4, r6, 0x1]}, 0x80)

01:37:17 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x907e0000, 0x0})

01:37:17 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
mmap$binder(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x100)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1584.333028][ T4251] binder: 4244:4251 ioctl 400c620e 20000400 returned -22
[ 1584.358305][ T4252] binder: 4250:4252 ioctl 40046205 0 returned -22
01:37:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x801, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, <r1=>0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10)
r2 = syz_open_dev$mouse(&(0x7f0000000480), 0x0, 0x107000)
r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f0000000540)='./file0\x00'}, 0x10)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x111282, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000140)={0x0, r6})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f0000000380)=@raw=[@alu={0x3, 0x0, 0x9, 0x8, 0x2, 0x0, 0xfffffffffffffff0}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff9}, @alu={0x4, 0x1, 0xa, 0x9, 0x2, 0x2, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x1, 0x9, 0x5, 0x9, 0x40, 0xfffffffffffffff0}], &(0x7f00000003c0)='GPL\x00', 0x0, 0x47, &(0x7f0000000400)=""/71, 0x41100, 0x10, '\x00', r1, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x10, 0x3ca4, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, r3, r4, r6, 0x1]}, 0x80)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x801, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}], 0x10, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) (async)
syz_open_dev$mouse(&(0x7f0000000480), 0x0, 0x107000) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000580)={&(0x7f0000000540)='./file0\x00'}, 0x10) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0), 0x111282, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000140)={0x0, r6}) (async)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0x7, &(0x7f0000000380)=@raw=[@alu={0x3, 0x0, 0x9, 0x8, 0x2, 0x0, 0xfffffffffffffff0}, @exit, @initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffff9}, @alu={0x4, 0x1, 0xa, 0x9, 0x2, 0x2, 0xfffffffffffffff0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @jmp={0x5, 0x1, 0x9, 0x5, 0x9, 0x40, 0xfffffffffffffff0}], &(0x7f00000003c0)='GPL\x00', 0x0, 0x47, &(0x7f0000000400)=""/71, 0x41100, 0x10, '\x00', r1, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000500)={0x2, 0x10, 0x3ca4, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[0xffffffffffffffff, r3, r4, r6, 0x1]}, 0x80) (async)

01:37:17 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000340), 0x544881, 0x20)
write$damon_monitor_on(r3, &(0x7f0000000080), 0x3)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x0, r5})
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000180)="aae2c772552bf151cb655e86eb428ce3dd92f8d7f420bb5cfb322039334a6a77e1d13905ab36841385e264053e73237d27744066b3cd42a785dd672846db0b3c8d4e7ae556f8b3bb9346d5d6278621c15ac6890c7ab79a58f216a0d8ce0486def7014ed175b13e223844669c788370864b84134ae44b3d00d0df4ba6916ad2582b3c0a1ae3e27dc7a837ad23e6091056919b11b1208327d7091f03955c4793cd13d3f457c9cf6e6868e3d099d813883fb091c70e787b2830d1b382d2ee96dbce6f24c7bb67f1a2e8121779d3a62a7e9f33bdc048e090e62d4ea49d1743df", &(0x7f0000000280)=@tcp=r2, 0x2}, 0x20)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$HIDIOCGRAWINFO(r2, 0x80084803, &(0x7f0000000000)=""/56)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000140)={0x0, r7})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000300)=r7, 0x4)

[ 1584.404184][ T4258] binder: 4254:4258 ioctl 40046205 0 returned -22
[ 1584.429778][ T4263] binder: 4257:4263 ioctl c0306201 20000140 returned -11
01:37:17 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0)
mmap$binder(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x100)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r0) (async)
mmap$binder(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x100) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

01:37:17 executing program 1:
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000040)={0x0, 0x739})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x31596732a30fb2dd, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000004c0)={&(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x27030686, 0x2865, 0x0, 0xffffffff], 0x5, 0x2, 0x6})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000180)="e8d4c6cb535547a8c0897a0724b99178730be04bcfe7d23bf7ab9955e9e4e4702a327f4a6545220ef698c3a2c4b2f174b8c082eba57a0644059df1e86ed6367fef7f56a45fc9fe92b2fb97405639e0ef1fe4edff676099579becb37d97c95b3cf78fb2281b28f6f7e50ceb9b40d7eb8383d7c2db7d55e5955237b6da5c800b5f55e118cc67cfd57f66d74f2079b9749fa4fae7bf79519e3ab378cbb1b4238774655bda43e8175b0844dcbd976b187dd0c1a11e4884f04e6a40223f9154836211889c9ca910a1393cf3", &(0x7f0000000280)=""/128, &(0x7f0000000540)="520e15c938c34ff3e9c025abd68d9ad30556a28636101ea20b456d03ed82a7bf8c67c5c3ae68b24366424a360f1ec1e3287f9cdae85460bcb2560acf9882aa190b3ac02d92d28b3f77f946c7c9946565adfd210d29dcef0742afbb9973b20aa793b462c641f8723301b60d70c6d5f4baed38b5e32a877faf5bdd0f65313eb05803333c31bca7b65e0a5b253d8887f827b7", &(0x7f0000000080)="ef93109e402810fc98447cdc", 0x1, r2, 0x4}, 0x38)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000040)={0x0, 0x739}) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000500)='./binderfs/binder0\x00', 0x31596732a30fb2dd, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(r2, 0xc02864ca, &(0x7f00000004c0)={&(0x7f0000000440)=[0x0, 0x0], &(0x7f0000000480)=[0x27030686, 0x2865, 0x0, 0xffffffff], 0x5, 0x2, 0x6}) (async)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000003c0)={&(0x7f0000000180)="e8d4c6cb535547a8c0897a0724b99178730be04bcfe7d23bf7ab9955e9e4e4702a327f4a6545220ef698c3a2c4b2f174b8c082eba57a0644059df1e86ed6367fef7f56a45fc9fe92b2fb97405639e0ef1fe4edff676099579becb37d97c95b3cf78fb2281b28f6f7e50ceb9b40d7eb8383d7c2db7d55e5955237b6da5c800b5f55e118cc67cfd57f66d74f2079b9749fa4fae7bf79519e3ab378cbb1b4238774655bda43e8175b0844dcbd976b187dd0c1a11e4884f04e6a40223f9154836211889c9ca910a1393cf3", &(0x7f0000000280)=""/128, &(0x7f0000000540)="520e15c938c34ff3e9c025abd68d9ad30556a28636101ea20b456d03ed82a7bf8c67c5c3ae68b24366424a360f1ec1e3287f9cdae85460bcb2560acf9882aa190b3ac02d92d28b3f77f946c7c9946565adfd210d29dcef0742afbb9973b20aa793b462c641f8723301b60d70c6d5f4baed38b5e32a877faf5bdd0f65313eb05803333c31bca7b65e0a5b253d8887f827b7", &(0x7f0000000080)="ef93109e402810fc98447cdc", 0x1, r2, 0x4}, 0x38) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000000)=0x1) (async)

01:37:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:17 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xff000000, 0x0})

[ 1584.479623][ T4270] binder: 4266:4270 ioctl 400c620e 20000400 returned -22
[ 1584.522045][ T4272] binder: 4271:4272 ioctl 40046205 0 returned -22
01:37:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:17 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046210, &(0x7f0000000400)={0xffffffffffffff12, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)

01:37:17 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0})

01:37:17 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x4, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x3ff, 0xc200)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xffffffffffffffff)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@hyper})

[ 1584.622560][ T4303] binder: 4294:4303 ioctl 400c620e 20000400 returned -22
01:37:17 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r3 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000340), 0x544881, 0x20)
write$damon_monitor_on(r3, &(0x7f0000000080), 0x3) (async)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x0, r5}) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000180)="aae2c772552bf151cb655e86eb428ce3dd92f8d7f420bb5cfb322039334a6a77e1d13905ab36841385e264053e73237d27744066b3cd42a785dd672846db0b3c8d4e7ae556f8b3bb9346d5d6278621c15ac6890c7ab79a58f216a0d8ce0486def7014ed175b13e223844669c788370864b84134ae44b3d00d0df4ba6916ad2582b3c0a1ae3e27dc7a837ad23e6091056919b11b1208327d7091f03955c4793cd13d3f457c9cf6e6868e3d099d813883fb091c70e787b2830d1b382d2ee96dbce6f24c7bb67f1a2e8121779d3a62a7e9f33bdc048e090e62d4ea49d1743df", &(0x7f0000000280)=@tcp=r2, 0x2}, 0x20) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$HIDIOCGRAWINFO(r2, 0x80084803, &(0x7f0000000000)=""/56) (async)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) (async)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000140)={0x0, r7}) (async)
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000300)=r7, 0x4)

01:37:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40186366, 0x0)

01:37:17 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046210, &(0x7f0000000400)={0xffffffffffffff12, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046210, &(0x7f0000000400)={0xffffffffffffff12, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

01:37:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07) (async)

01:37:17 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0})

[ 1584.716565][ T4310] binder: 4304:4310 ioctl 40046205 0 returned -22
[ 1584.756602][ T4312] binder: 4309:4312 ioctl 400c620e 20000400 returned -22
01:37:17 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0x40046210, &(0x7f0000000400)={0xffffffffffffff12, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1584.802197][ T4321] binder: 4315:4321 ioctl 40046205 0 returned -22
[ 1584.833448][ T4330] binder: 4315:4330 ioctl 40046205 0 returned -22
01:37:17 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x4, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x3ff, 0xc200)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xffffffffffffffff) (async)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@hyper})

01:37:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
ioctl$LOOP_SET_CAPACITY(0xffffffffffffffff, 0x4c07)

01:37:17 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async, rerun: 32)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 32)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async)
r3 = openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000340), 0x544881, 0x20)
write$damon_monitor_on(r3, &(0x7f0000000080), 0x3)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x0, r5}) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r5, &(0x7f0000000180)="aae2c772552bf151cb655e86eb428ce3dd92f8d7f420bb5cfb322039334a6a77e1d13905ab36841385e264053e73237d27744066b3cd42a785dd672846db0b3c8d4e7ae556f8b3bb9346d5d6278621c15ac6890c7ab79a58f216a0d8ce0486def7014ed175b13e223844669c788370864b84134ae44b3d00d0df4ba6916ad2582b3c0a1ae3e27dc7a837ad23e6091056919b11b1208327d7091f03955c4793cd13d3f457c9cf6e6868e3d099d813883fb091c70e787b2830d1b382d2ee96dbce6f24c7bb67f1a2e8121779d3a62a7e9f33bdc048e090e62d4ea49d1743df", &(0x7f0000000280)=@tcp=r2, 0x2}, 0x20) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async, rerun: 32)
ioctl$HIDIOCGRAWINFO(r2, 0x80084803, &(0x7f0000000000)=""/56) (async, rerun: 32)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0) (async)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000140)={0x0, r7})
bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000300)=r7, 0x4)

01:37:17 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:17 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0})

01:37:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0})

[ 1584.880045][ T4333] binder: 4332:4333 ioctl 40186366 0 returned -22
[ 1584.900973][ T4335] binder: 4334:4335 ioctl 400c620e 20000400 returned -22
01:37:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x88001, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000700)={0x8, 0x0, [{0x3000, 0xb5, &(0x7f0000000180)=""/181}, {0x0, 0x58, &(0x7f0000000240)=""/88}, {0x100000, 0x5a, &(0x7f00000002c0)=""/90}, {0x2, 0xf4, &(0x7f0000000340)=""/244}, {0x0, 0xfc, &(0x7f0000000440)=""/252}, {0x10000, 0x41, &(0x7f0000000540)=""/65}, {0xd000, 0x74, &(0x7f00000005c0)=""/116}, {0x2, 0xa3, &(0x7f0000000640)=""/163}]})
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r4})
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000880)={0x1, 0x7fff})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=r4)

01:37:17 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x4, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
r3 = syz_open_dev$mouse(&(0x7f0000000080), 0x3ff, 0xc200)
ioctl$LOOP_SET_DIRECT_IO(r3, 0x4c08, 0xffffffffffffffff)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000000)={@hyper})

[ 1584.968295][ T4349] binder: 4342:4349 ioctl 40046205 0 returned -22
[ 1584.996625][ T4353] binder: 4347:4353 ioctl 400c620e 20000400 returned -22
01:37:17 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x4020940d, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:17 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0})

01:37:17 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

[ 1585.027851][ T4358] binder: 4344:4358 ioctl 400c620e 20000400 returned -22
01:37:17 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:17 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)

01:37:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:17 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000000)={0x3, 0xca3})

[ 1585.137736][ T4370] binder: 4359:4370 ioctl 40046205 0 returned -22
[ 1585.167855][ T4372] binder: 4369:4372 ioctl 400c620e 20000400 returned -22
01:37:17 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x88001, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000700)={0x8, 0x0, [{0x3000, 0xb5, &(0x7f0000000180)=""/181}, {0x0, 0x58, &(0x7f0000000240)=""/88}, {0x100000, 0x5a, &(0x7f00000002c0)=""/90}, {0x2, 0xf4, &(0x7f0000000340)=""/244}, {0x0, 0xfc, &(0x7f0000000440)=""/252}, {0x10000, 0x41, &(0x7f0000000540)=""/65}, {0xd000, 0x74, &(0x7f00000005c0)=""/116}, {0x2, 0xa3, &(0x7f0000000640)=""/163}]})
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r4})
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000880)={0x1, 0x7fff})
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=r4)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x88001, 0x0) (async)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000700)={0x8, 0x0, [{0x3000, 0xb5, &(0x7f0000000180)=""/181}, {0x0, 0x58, &(0x7f0000000240)=""/88}, {0x100000, 0x5a, &(0x7f00000002c0)=""/90}, {0x2, 0xf4, &(0x7f0000000340)=""/244}, {0x0, 0xfc, &(0x7f0000000440)=""/252}, {0x10000, 0x41, &(0x7f0000000540)=""/65}, {0xd000, 0x74, &(0x7f00000005c0)=""/116}, {0x2, 0xa3, &(0x7f0000000640)=""/163}]}) (async)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r4}) (async)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) (async)
ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000880)={0x1, 0x7fff}) (async)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=r4) (async)

01:37:17 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0})

01:37:17 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0xc02, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x8)
ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000080)=0xfffffffb)

01:37:17 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc018620b, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:18 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000000)={0x3, 0xca3})

01:37:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0})

01:37:18 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x2, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)

[ 1585.272060][ T4384] binder: 4378:4384 ioctl 40046205 0 returned -22
[ 1585.287811][ T4387] binder: 4385:4387 ioctl 400c620e 20000400 returned -22
01:37:18 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0xc02, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x8)
ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000080)=0xfffffffb)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0xc02, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x8) (async)
ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000080)=0xfffffffb) (async)

[ 1585.352761][ T4388] binder: 4378:4388 ioctl 40046205 0 returned -22
01:37:18 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000000)={0x3, 0xca3})

01:37:18 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc00c620f, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:18 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async, rerun: 64)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async, rerun: 64)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080), 0x88001, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000700)={0x8, 0x0, [{0x3000, 0xb5, &(0x7f0000000180)=""/181}, {0x0, 0x58, &(0x7f0000000240)=""/88}, {0x100000, 0x5a, &(0x7f00000002c0)=""/90}, {0x2, 0xf4, &(0x7f0000000340)=""/244}, {0x0, 0xfc, &(0x7f0000000440)=""/252}, {0x10000, 0x41, &(0x7f0000000540)=""/65}, {0xd000, 0x74, &(0x7f00000005c0)=""/116}, {0x2, 0xa3, &(0x7f0000000640)=""/163}]})
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) (async, rerun: 32)
ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000140)={0x0, r4}) (async, rerun: 32)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000880)={0x1, 0x7fff}) (async)
ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000040)=r4)

01:37:18 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)=0x33af302b)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0)

[ 1585.398582][ T4403] binder: 4401:4403 ioctl 400c620e 20000400 returned -22
01:37:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0})

01:37:18 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder1\x00', 0xc02, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000000)=0x8)
ioctl$USBDEVFS_CLAIMINTERFACE(0xffffffffffffffff, 0x8004550f, &(0x7f0000000080)=0xfffffffb)

01:37:18 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0})

[ 1585.475611][ T4412] binder: 4411:4412 ioctl c00c620f 20000400 returned -22
01:37:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4800000000000000, 0x0})

01:37:18 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1}) (async)
ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)=0x33af302b) (async)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0)

[ 1585.527854][ T4421] binder: 4415:4421 ioctl 400c620e 20000400 returned -22
[ 1585.530816][ T4419] binder: 4416:4419 ioctl 40046205 0 returned -22
01:37:18 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000580))
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={<r2=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r5=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000140)=[r2, r3, r4, 0x0, 0x0, r5], 0x6})
socket$inet_tcp(0x2, 0x1, 0x0)

01:37:18 executing program 2:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x359103, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x1, 0x0, 0x1ff, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:18 executing program 5:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000140)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, r1], &(0x7f00000000c0)=[0x9, 0x1, 0x9, 0x43, 0xffffffffffffff01], 0x5})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000580))
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x0, r5})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000180)={0x0, 0x0, r5})
ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0)

[ 1585.626742][ T4430] binder: 4424:4430 ioctl 400c620e 20000400 returned -22
01:37:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x4c00000000000000, 0x0})

01:37:18 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000580))
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={<r2=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r5=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000140)=[r2, r3, r4, 0x0, 0x0, r5], 0x6})
socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000580)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000140)=[r2, r3, r4, 0x0, 0x0, r5], 0x6}) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)

01:37:18 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x8933, 0x0)

[ 1585.675126][ T4434] binder: 4429:4434 ioctl 400c620e 20000400 returned -22
01:37:18 executing program 0:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)=0x33af302b)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1}) (async)
ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)=0x33af302b) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r2, 0x40046208, 0x0) (async)

01:37:18 executing program 2:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x359103, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x1, 0x0, 0x1ff, 0x0, 0x2})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:18 executing program 5:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={<r1=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000140)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, r1], &(0x7f00000000c0)=[0x9, 0x1, 0x9, 0x43, 0xffffffffffffff01], 0x5})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000580)) (async)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x0, r5})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000180)={0x0, 0x0, r5}) (async)
ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0)

01:37:18 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0045878, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6800000000000000, 0x0})

[ 1585.789774][ T4456] binder: 4446:4456 ioctl 400c620e 20000400 returned -22
[ 1585.808973][ T4444] binder: 4441:4444 ioctl 40046205 0 returned -22
01:37:18 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000580))
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={<r2=>0x0, 0x0, r0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={<r3=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)={<r4=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)={<r5=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000140)=[r2, r3, r4, 0x0, 0x0, r5], 0x6})
socket$inet_tcp(0x2, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000580)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0, 0x0, r0}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000000c0)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r1, 0xc01064c4, &(0x7f0000000180)={&(0x7f0000000140)=[r2, r3, r4, 0x0, 0x0, r5], 0x6}) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)

01:37:18 executing program 2:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x359103, 0x0)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x1, 0x0, 0x1ff, 0x0, 0x2}) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1585.840984][ T4457] binder: 4450:4457 ioctl 8933 0 returned -22
01:37:18 executing program 0:
socketpair(0x23, 0x1, 0x6b7d, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x48080)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0)

01:37:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x6c00000000000000, 0x0})

[ 1585.916954][ T4472] binder: 4471:4472 ioctl 400c620e 20000400 returned -22
01:37:18 executing program 5:
r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async, rerun: 64)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={<r1=>0x0}) (rerun: 64)
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r0, 0xc01864cb, &(0x7f0000000140)={&(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, r1], &(0x7f00000000c0)=[0x9, 0x1, 0x9, 0x43, 0xffffffffffffff01], 0x5})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async, rerun: 64)
r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (rerun: 64)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000580))
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async)
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r4, 0x4008af22, &(0x7f0000000140)={0x0, r5}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000180)={0x0, 0x0, r5})
ioctl$BINDER_WRITE_READ(r2, 0x40046205, 0x0)

01:37:18 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046215, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1585.961075][ T4469] binder: 4467:4469 ioctl 40046205 0 returned -22
01:37:18 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/custom0\x00', 0x2, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={&(0x7f0000000140)="e6d8c584d6b6e49bbdf6de537cc147f86de724cc3dc6eca4ea0934b944371887a67521de190cf190dd821ddf4f797deb7ab4db141537ddfe8c5bde13ff453ee18fd3bbd1638a434ed607d727d08810fd1b6f12d5c0e3c3783eae895d5d85a04645a1c4cdacd636db3ef029c5816b0229baa44d28e563662f60c11e92219259dc2d5f40cc", &(0x7f0000000200)=""/230, &(0x7f0000000300)="c727663242d0cd21a6e49aba725d383ad0af922c81cb5c1cf55e96f76a6b03261b6eafee475cb9c5bec2db9817c043db9aaa67e0d8adbb6ac3bc76514098ce395e8b677bd4bb4764aadec34e9394e8e286bdce21eeb9557e4961b5184e94cd0fde3df1739299a27e668ac5fb356ff9151be52118b621fc1b7acba3a65ca550a4a679b3ed10cc9f328a28afe4a16a5696cf1196530198a726cfd0869e46957e932458fb14035024c223e480885465da37a2fe14e22e8d3108c864adb174d2a6606a2306240cbf80747f9142be23a4a2230f269829283fe40bb3b0", &(0x7f0000000440)="4b774014d15b8364ac33d57fc4fca0aeaf88f3bb0ea4f0800e2a05c31c31e1ee6bb60bfb1bf67f97e32fbaf4fbe16881618583c999f9b2bf911a28d5a34791347183613e6db1a8cd88780d7fea8118b6f8e63e9a4dbc18268eacd3353eb03d503b70526f8e2aba4deff72536ddb5bd5bfe34adc2a6aa9be74759aee7a7100c2d67aa4f1237b6553be6e606b428e6949482b3f44f9e", 0x2, 0xffffffffffffffff, 0x4}, 0x38)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000000), 0x288a40, 0x74)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)="49ded316662fb1f88719f72db136de85df7c341e2740bfb095cdd27f09943a12bcd2853233c792bd4b7edb39f4c3c4d37a", &(0x7f00000000c0)=@buf="7bc267eeba97a89eee0e679d8e71426522459cf5fe7d71999702fb7d06fecc56e536150a8f80596e55a575c8a9cd4e211784bed52b65", 0x1}, 0x20)

01:37:18 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0)

01:37:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7400000000000000, 0x0})

[ 1586.043940][ T4492] binder: 4490:4492 ioctl 400c620e 20000400 returned -22
01:37:18 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x5460, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1586.086857][ T4498] binder: 4494:4498 ioctl 40046215 20000400 returned -22
01:37:18 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0)

01:37:18 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/custom0\x00', 0x2, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={&(0x7f0000000140)="e6d8c584d6b6e49bbdf6de537cc147f86de724cc3dc6eca4ea0934b944371887a67521de190cf190dd821ddf4f797deb7ab4db141537ddfe8c5bde13ff453ee18fd3bbd1638a434ed607d727d08810fd1b6f12d5c0e3c3783eae895d5d85a04645a1c4cdacd636db3ef029c5816b0229baa44d28e563662f60c11e92219259dc2d5f40cc", &(0x7f0000000200)=""/230, &(0x7f0000000300)="c727663242d0cd21a6e49aba725d383ad0af922c81cb5c1cf55e96f76a6b03261b6eafee475cb9c5bec2db9817c043db9aaa67e0d8adbb6ac3bc76514098ce395e8b677bd4bb4764aadec34e9394e8e286bdce21eeb9557e4961b5184e94cd0fde3df1739299a27e668ac5fb356ff9151be52118b621fc1b7acba3a65ca550a4a679b3ed10cc9f328a28afe4a16a5696cf1196530198a726cfd0869e46957e932458fb14035024c223e480885465da37a2fe14e22e8d3108c864adb174d2a6606a2306240cbf80747f9142be23a4a2230f269829283fe40bb3b0", &(0x7f0000000440)="4b774014d15b8364ac33d57fc4fca0aeaf88f3bb0ea4f0800e2a05c31c31e1ee6bb60bfb1bf67f97e32fbaf4fbe16881618583c999f9b2bf911a28d5a34791347183613e6db1a8cd88780d7fea8118b6f8e63e9a4dbc18268eacd3353eb03d503b70526f8e2aba4deff72536ddb5bd5bfe34adc2a6aa9be74759aee7a7100c2d67aa4f1237b6553be6e606b428e6949482b3f44f9e", 0x2, 0xffffffffffffffff, 0x4}, 0x38)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000000), 0x288a40, 0x74)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)="49ded316662fb1f88719f72db136de85df7c341e2740bfb095cdd27f09943a12bcd2853233c792bd4b7edb39f4c3c4d37a", &(0x7f00000000c0)=@buf="7bc267eeba97a89eee0e679d8e71426522459cf5fe7d71999702fb7d06fecc56e536150a8f80596e55a575c8a9cd4e211784bed52b65", 0x1}, 0x20)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/custom0\x00', 0x2, 0x0) (async)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={&(0x7f0000000140)="e6d8c584d6b6e49bbdf6de537cc147f86de724cc3dc6eca4ea0934b944371887a67521de190cf190dd821ddf4f797deb7ab4db141537ddfe8c5bde13ff453ee18fd3bbd1638a434ed607d727d08810fd1b6f12d5c0e3c3783eae895d5d85a04645a1c4cdacd636db3ef029c5816b0229baa44d28e563662f60c11e92219259dc2d5f40cc", &(0x7f0000000200)=""/230, &(0x7f0000000300)="c727663242d0cd21a6e49aba725d383ad0af922c81cb5c1cf55e96f76a6b03261b6eafee475cb9c5bec2db9817c043db9aaa67e0d8adbb6ac3bc76514098ce395e8b677bd4bb4764aadec34e9394e8e286bdce21eeb9557e4961b5184e94cd0fde3df1739299a27e668ac5fb356ff9151be52118b621fc1b7acba3a65ca550a4a679b3ed10cc9f328a28afe4a16a5696cf1196530198a726cfd0869e46957e932458fb14035024c223e480885465da37a2fe14e22e8d3108c864adb174d2a6606a2306240cbf80747f9142be23a4a2230f269829283fe40bb3b0", &(0x7f0000000440)="4b774014d15b8364ac33d57fc4fca0aeaf88f3bb0ea4f0800e2a05c31c31e1ee6bb60bfb1bf67f97e32fbaf4fbe16881618583c999f9b2bf911a28d5a34791347183613e6db1a8cd88780d7fea8118b6f8e63e9a4dbc18268eacd3353eb03d503b70526f8e2aba4deff72536ddb5bd5bfe34adc2a6aa9be74759aee7a7100c2d67aa4f1237b6553be6e606b428e6949482b3f44f9e", 0x2, 0xffffffffffffffff, 0x4}, 0x38) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000000), 0x288a40, 0x74) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)="49ded316662fb1f88719f72db136de85df7c341e2740bfb095cdd27f09943a12bcd2853233c792bd4b7edb39f4c3c4d37a", &(0x7f00000000c0)=@buf="7bc267eeba97a89eee0e679d8e71426522459cf5fe7d71999702fb7d06fecc56e536150a8f80596e55a575c8a9cd4e211784bed52b65", 0x1}, 0x20) (async)

01:37:18 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x7a00000000000000, 0x0})

01:37:18 executing program 0:
socketpair(0x23, 0x1, 0x6b7d, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x48080)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0)

[ 1586.167304][ T4505] binder: 4504:4505 ioctl 400c620e 20000400 returned -22
01:37:18 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c625d, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:18 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r1})

01:37:18 executing program 2:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x800, 0x0)

01:37:19 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/custom0\x00', 0x2, 0x0)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={&(0x7f0000000140)="e6d8c584d6b6e49bbdf6de537cc147f86de724cc3dc6eca4ea0934b944371887a67521de190cf190dd821ddf4f797deb7ab4db141537ddfe8c5bde13ff453ee18fd3bbd1638a434ed607d727d08810fd1b6f12d5c0e3c3783eae895d5d85a04645a1c4cdacd636db3ef029c5816b0229baa44d28e563662f60c11e92219259dc2d5f40cc", &(0x7f0000000200)=""/230, &(0x7f0000000300)="c727663242d0cd21a6e49aba725d383ad0af922c81cb5c1cf55e96f76a6b03261b6eafee475cb9c5bec2db9817c043db9aaa67e0d8adbb6ac3bc76514098ce395e8b677bd4bb4764aadec34e9394e8e286bdce21eeb9557e4961b5184e94cd0fde3df1739299a27e668ac5fb356ff9151be52118b621fc1b7acba3a65ca550a4a679b3ed10cc9f328a28afe4a16a5696cf1196530198a726cfd0869e46957e932458fb14035024c223e480885465da37a2fe14e22e8d3108c864adb174d2a6606a2306240cbf80747f9142be23a4a2230f269829283fe40bb3b0", &(0x7f0000000440)="4b774014d15b8364ac33d57fc4fca0aeaf88f3bb0ea4f0800e2a05c31c31e1ee6bb60bfb1bf67f97e32fbaf4fbe16881618583c999f9b2bf911a28d5a34791347183613e6db1a8cd88780d7fea8118b6f8e63e9a4dbc18268eacd3353eb03d503b70526f8e2aba4deff72536ddb5bd5bfe34adc2a6aa9be74759aee7a7100c2d67aa4f1237b6553be6e606b428e6949482b3f44f9e", 0x2, 0xffffffffffffffff, 0x4}, 0x38)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000000), 0x288a40, 0x74)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)="49ded316662fb1f88719f72db136de85df7c341e2740bfb095cdd27f09943a12bcd2853233c792bd4b7edb39f4c3c4d37a", &(0x7f00000000c0)=@buf="7bc267eeba97a89eee0e679d8e71426522459cf5fe7d71999702fb7d06fecc56e536150a8f80596e55a575c8a9cd4e211784bed52b65", 0x1}, 0x20)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/custom0\x00', 0x2, 0x0) (async)
bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000500)={&(0x7f0000000140)="e6d8c584d6b6e49bbdf6de537cc147f86de724cc3dc6eca4ea0934b944371887a67521de190cf190dd821ddf4f797deb7ab4db141537ddfe8c5bde13ff453ee18fd3bbd1638a434ed607d727d08810fd1b6f12d5c0e3c3783eae895d5d85a04645a1c4cdacd636db3ef029c5816b0229baa44d28e563662f60c11e92219259dc2d5f40cc", &(0x7f0000000200)=""/230, &(0x7f0000000300)="c727663242d0cd21a6e49aba725d383ad0af922c81cb5c1cf55e96f76a6b03261b6eafee475cb9c5bec2db9817c043db9aaa67e0d8adbb6ac3bc76514098ce395e8b677bd4bb4764aadec34e9394e8e286bdce21eeb9557e4961b5184e94cd0fde3df1739299a27e668ac5fb356ff9151be52118b621fc1b7acba3a65ca550a4a679b3ed10cc9f328a28afe4a16a5696cf1196530198a726cfd0869e46957e932458fb14035024c223e480885465da37a2fe14e22e8d3108c864adb174d2a6606a2306240cbf80747f9142be23a4a2230f269829283fe40bb3b0", &(0x7f0000000440)="4b774014d15b8364ac33d57fc4fca0aeaf88f3bb0ea4f0800e2a05c31c31e1ee6bb60bfb1bf67f97e32fbaf4fbe16881618583c999f9b2bf911a28d5a34791347183613e6db1a8cd88780d7fea8118b6f8e63e9a4dbc18268eacd3353eb03d503b70526f8e2aba4deff72536ddb5bd5bfe34adc2a6aa9be74759aee7a7100c2d67aa4f1237b6553be6e606b428e6949482b3f44f9e", 0x2, 0xffffffffffffffff, 0x4}, 0x38) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000000000), 0x288a40, 0x74) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0x1, &(0x7f0000000080)="49ded316662fb1f88719f72db136de85df7c341e2740bfb095cdd27f09943a12bcd2853233c792bd4b7edb39f4c3c4d37a", &(0x7f00000000c0)=@buf="7bc267eeba97a89eee0e679d8e71426522459cf5fe7d71999702fb7d06fecc56e536150a8f80596e55a575c8a9cd4e211784bed52b65", 0x1}, 0x20) (async)

01:37:19 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x877e000000000000, 0x0})

01:37:19 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (fail_nth: 1)

[ 1586.300427][ T4517] binder: 4516:4517 ioctl 400c620e 20000400 returned -22
[ 1586.342341][ T4522] binder: 4521:4522 ioctl 400c625d 20000400 returned -22
01:37:19 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x4)

01:37:19 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r1})

01:37:19 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0xff, "26bcea"}, 0x6)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0)

[ 1586.391240][ T4528] binder: 4523:4528 ioctl 40046205 0 returned -22
[ 1586.421607][ T4533] binder: 4526:4533 ioctl 400c620e 20000400 returned -22
01:37:19 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x8f7e000000000000, 0x0})

01:37:19 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (fail_nth: 2)

01:37:19 executing program 0:
socketpair(0x23, 0x1, 0x6b7d, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x48, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_RECV_TIMEOUT={0xc}, @L2TP_ATTR_DATA_SEQ={0x5}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x24000000}, 0x48080) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0)

01:37:19 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x4)

01:37:19 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x103080, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r1})

01:37:19 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0xff, "26bcea"}, 0x6) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0)

01:37:19 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x907e000000000000, 0x0})

[ 1586.521655][ T4541] binder: 4536:4541 ioctl 40046205 0 returned -22
[ 1586.550672][ T4544] binder: 4539:4544 ioctl 400c620e 20000400 returned -22
01:37:19 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (fail_nth: 3)

01:37:19 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getsockopt$inet_udp_int(0xffffffffffffffff, 0x11, 0x66, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async)
mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x4)

01:37:19 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000040)={0xff, "26bcea"}, 0x6) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x10001, 0x0)

[ 1586.681379][ T4560] binder: 4553:4560 ioctl 40046205 0 returned -22
[ 1586.698814][ T4563] binder: 4556:4563 ioctl 400c620e 20000400 returned -22
01:37:19 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0xff00000000000000, 0x0})

01:37:19 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r1, &(0x7f0000000140)="5dd09ecc6cfb795e429808e81ce5966c19afc66c0c2712cfc6c2e4b64a9fcb35f8ecfb12840cfdb630fed51e15682cc182cc28bfed0b24d6ee5c2fcdb7fdc7695f81a825db20ca313312f68cb0ae479f6158f590564de9d1b669c28f998520449d4c9f6321be6476886e15427c2d57435550e17bb1c66ec7b8689adef35a3e82e665139ef587181cfcea49294daed3800aee0647919d5c18cd291ab0436d499b4028ce9950c20bdc058d34125d081c874504ff9d3342af26c2dc9d0c4feefd71f66e764bf312d8ffc00fcdc33b6f362345fd8e7747c9973622e3", &(0x7f0000000240)=""/149}, 0x20)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f00000000c0)='./file0/file0\x00', r1}, 0x10)

01:37:19 executing program 5:
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, <r0=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x26c, 0x13, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1a, 0x0, 0xd4, 0x0, {0x4e22, 0x4e21, [0x3, 0x9, 0x60, 0x6], [0x8, 0x100, 0x4, 0xffffffff], 0x0, [0x7ff, 0x89]}, 0x5, 0x7fffffff}, [@INET_DIAG_REQ_BYTECODE={0xf9, 0x1, "f91ae544403301cca1efcb89a10126d391a29880e4e6d0d41a2ed2212ae22b927f6340530dc41ca95f7d030ac8583c34178aba4bd0823041a3c6afc9502ce36e20fc1be23d401a98131d921be4333ef6a56716b2ca54bed8eb28f01cd5efd59af68313e43860098bcd5508019f50fefd1b5d8c04425fd8a732a662063249ce626fdc73fef0cf32308983e7d950153de2278f0deac68cd6cefa1fd74a606983b698cf27b9f48ee89ee04745760a93de4f8193848d2c365e48dbb95441a79b8af45f059b87dd9c66b972a2140c7aeb47ab31cd244cc89ee3a478b354ede1da33bc93305203ebd49d5fbd79638572de33bff0130f7516"}, @INET_DIAG_REQ_BYTECODE={0x27, 0x1, "02a7d740b59d7c19e27933407d8660a7da8e2c16c2cac05386150e1c2fb743ecda3445"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "883bb3149ea897089626af526f7ef6bffe0b343b5e9288c85ddd2643e01d06baa1005d99889dbd9f861bd9e1a3daa7176995d3f679175357bf669ee04e23"}, @INET_DIAG_REQ_BYTECODE={0x20, 0x1, "126184a696478f65ce75d1a9a3f1a711ad92379b082a744425a56df2"}, @INET_DIAG_REQ_BYTECODE={0x59, 0x1, "90619a5e8dab5ec05e8ca09aa1cf59f3f72eda9e49d7b53e3cbd9d84e9545ca87585c244adcce3dd16b7a8503ebaf721f5fa8f8f1ea8c35acdb6cf0b1482594b1db24fcca665328acc1675ad0a15de426012a47c5d"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "ca270f7ea9f650a9b3bf278468382ab92a76087ada698798f83aeb428dfdf11c1ac1cff2e3c8c7"}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "98192ab0bcc2431b56"}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40804}, 0x80)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x28000)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f00000007c0)=&(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r3, 0x40046205, 0x0)

01:37:19 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (fail_nth: 4)

01:37:19 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]})
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:19 executing program 2:
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000040))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)

01:37:19 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x801, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000180))
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000080)={0x1})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000200)=0x1)
ioctl$BINDER_WRITE_READ(r3, 0x400c620e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:19 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r1, &(0x7f0000000140)="5dd09ecc6cfb795e429808e81ce5966c19afc66c0c2712cfc6c2e4b64a9fcb35f8ecfb12840cfdb630fed51e15682cc182cc28bfed0b24d6ee5c2fcdb7fdc7695f81a825db20ca313312f68cb0ae479f6158f590564de9d1b669c28f998520449d4c9f6321be6476886e15427c2d57435550e17bb1c66ec7b8689adef35a3e82e665139ef587181cfcea49294daed3800aee0647919d5c18cd291ab0436d499b4028ce9950c20bdc058d34125d081c874504ff9d3342af26c2dc9d0c4feefd71f66e764bf312d8ffc00fcdc33b6f362345fd8e7747c9973622e3", &(0x7f0000000240)=""/149}, 0x20)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f00000000c0)='./file0/file0\x00', r1}, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r1, &(0x7f0000000140)="5dd09ecc6cfb795e429808e81ce5966c19afc66c0c2712cfc6c2e4b64a9fcb35f8ecfb12840cfdb630fed51e15682cc182cc28bfed0b24d6ee5c2fcdb7fdc7695f81a825db20ca313312f68cb0ae479f6158f590564de9d1b669c28f998520449d4c9f6321be6476886e15427c2d57435550e17bb1c66ec7b8689adef35a3e82e665139ef587181cfcea49294daed3800aee0647919d5c18cd291ab0436d499b4028ce9950c20bdc058d34125d081c874504ff9d3342af26c2dc9d0c4feefd71f66e764bf312d8ffc00fcdc33b6f362345fd8e7747c9973622e3", &(0x7f0000000240)=""/149}, 0x20) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f00000000c0)='./file0/file0\x00', r1}, 0x10) (async)

01:37:19 executing program 5:
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, <r0=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) (async)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x26c, 0x13, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1a, 0x0, 0xd4, 0x0, {0x4e22, 0x4e21, [0x3, 0x9, 0x60, 0x6], [0x8, 0x100, 0x4, 0xffffffff], 0x0, [0x7ff, 0x89]}, 0x5, 0x7fffffff}, [@INET_DIAG_REQ_BYTECODE={0xf9, 0x1, "f91ae544403301cca1efcb89a10126d391a29880e4e6d0d41a2ed2212ae22b927f6340530dc41ca95f7d030ac8583c34178aba4bd0823041a3c6afc9502ce36e20fc1be23d401a98131d921be4333ef6a56716b2ca54bed8eb28f01cd5efd59af68313e43860098bcd5508019f50fefd1b5d8c04425fd8a732a662063249ce626fdc73fef0cf32308983e7d950153de2278f0deac68cd6cefa1fd74a606983b698cf27b9f48ee89ee04745760a93de4f8193848d2c365e48dbb95441a79b8af45f059b87dd9c66b972a2140c7aeb47ab31cd244cc89ee3a478b354ede1da33bc93305203ebd49d5fbd79638572de33bff0130f7516"}, @INET_DIAG_REQ_BYTECODE={0x27, 0x1, "02a7d740b59d7c19e27933407d8660a7da8e2c16c2cac05386150e1c2fb743ecda3445"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "883bb3149ea897089626af526f7ef6bffe0b343b5e9288c85ddd2643e01d06baa1005d99889dbd9f861bd9e1a3daa7176995d3f679175357bf669ee04e23"}, @INET_DIAG_REQ_BYTECODE={0x20, 0x1, "126184a696478f65ce75d1a9a3f1a711ad92379b082a744425a56df2"}, @INET_DIAG_REQ_BYTECODE={0x59, 0x1, "90619a5e8dab5ec05e8ca09aa1cf59f3f72eda9e49d7b53e3cbd9d84e9545ca87585c244adcce3dd16b7a8503ebaf721f5fa8f8f1ea8c35acdb6cf0b1482594b1db24fcca665328acc1675ad0a15de426012a47c5d"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "ca270f7ea9f650a9b3bf278468382ab92a76087ada698798f83aeb428dfdf11c1ac1cff2e3c8c7"}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "98192ab0bcc2431b56"}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40804}, 0x80) (async)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x28000) (async)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f00000007c0)=&(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r3, 0x40046205, 0x0)

[ 1586.870739][ T4571] binder: 4569:4571 ioctl 40046205 0 returned -22
[ 1586.871952][ T4576] binder: 4575:4576 ioctl 400c620e 20000400 returned -22
01:37:19 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (fail_nth: 5)

01:37:19 executing program 2:
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000040))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)

01:37:19 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:19 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r1, &(0x7f0000000140)="5dd09ecc6cfb795e429808e81ce5966c19afc66c0c2712cfc6c2e4b64a9fcb35f8ecfb12840cfdb630fed51e15682cc182cc28bfed0b24d6ee5c2fcdb7fdc7695f81a825db20ca313312f68cb0ae479f6158f590564de9d1b669c28f998520449d4c9f6321be6476886e15427c2d57435550e17bb1c66ec7b8689adef35a3e82e665139ef587181cfcea49294daed3800aee0647919d5c18cd291ab0436d499b4028ce9950c20bdc058d34125d081c874504ff9d3342af26c2dc9d0c4feefd71f66e764bf312d8ffc00fcdc33b6f362345fd8e7747c9973622e3", &(0x7f0000000240)=""/149}, 0x20) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f00000000c0)='./file0/file0\x00', r1}, 0x10)

01:37:19 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x801, 0x0)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000180))
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000080)={0x1})
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000200)=0x1)
ioctl$BINDER_WRITE_READ(r3, 0x400c620e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x801, 0x0) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1}) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000180)) (async)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000080)={0x1}) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000200)=0x1) (async)
ioctl$BINDER_WRITE_READ(r3, 0x400c620e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

01:37:19 executing program 5:
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, <r0=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x26c, 0x13, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1a, 0x0, 0xd4, 0x0, {0x4e22, 0x4e21, [0x3, 0x9, 0x60, 0x6], [0x8, 0x100, 0x4, 0xffffffff], 0x0, [0x7ff, 0x89]}, 0x5, 0x7fffffff}, [@INET_DIAG_REQ_BYTECODE={0xf9, 0x1, "f91ae544403301cca1efcb89a10126d391a29880e4e6d0d41a2ed2212ae22b927f6340530dc41ca95f7d030ac8583c34178aba4bd0823041a3c6afc9502ce36e20fc1be23d401a98131d921be4333ef6a56716b2ca54bed8eb28f01cd5efd59af68313e43860098bcd5508019f50fefd1b5d8c04425fd8a732a662063249ce626fdc73fef0cf32308983e7d950153de2278f0deac68cd6cefa1fd74a606983b698cf27b9f48ee89ee04745760a93de4f8193848d2c365e48dbb95441a79b8af45f059b87dd9c66b972a2140c7aeb47ab31cd244cc89ee3a478b354ede1da33bc93305203ebd49d5fbd79638572de33bff0130f7516"}, @INET_DIAG_REQ_BYTECODE={0x27, 0x1, "02a7d740b59d7c19e27933407d8660a7da8e2c16c2cac05386150e1c2fb743ecda3445"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "883bb3149ea897089626af526f7ef6bffe0b343b5e9288c85ddd2643e01d06baa1005d99889dbd9f861bd9e1a3daa7176995d3f679175357bf669ee04e23"}, @INET_DIAG_REQ_BYTECODE={0x20, 0x1, "126184a696478f65ce75d1a9a3f1a711ad92379b082a744425a56df2"}, @INET_DIAG_REQ_BYTECODE={0x59, 0x1, "90619a5e8dab5ec05e8ca09aa1cf59f3f72eda9e49d7b53e3cbd9d84e9545ca87585c244adcce3dd16b7a8503ebaf721f5fa8f8f1ea8c35acdb6cf0b1482594b1db24fcca665328acc1675ad0a15de426012a47c5d"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "ca270f7ea9f650a9b3bf278468382ab92a76087ada698798f83aeb428dfdf11c1ac1cff2e3c8c7"}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "98192ab0bcc2431b56"}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40804}, 0x80)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x28000)
r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f00000007c0)=&(0x7f0000000780))
ioctl$BINDER_WRITE_READ(r3, 0x40046205, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0], 0x0, 0x8, &(0x7f00000000c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0) (async)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340)={r0}, 0x4) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0) (async)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async)
sendmsg$DCCPDIAG_GETSOCK(r2, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)={0x26c, 0x13, 0x100, 0x70bd2a, 0x25dfdbfd, {0x1a, 0x0, 0xd4, 0x0, {0x4e22, 0x4e21, [0x3, 0x9, 0x60, 0x6], [0x8, 0x100, 0x4, 0xffffffff], 0x0, [0x7ff, 0x89]}, 0x5, 0x7fffffff}, [@INET_DIAG_REQ_BYTECODE={0xf9, 0x1, "f91ae544403301cca1efcb89a10126d391a29880e4e6d0d41a2ed2212ae22b927f6340530dc41ca95f7d030ac8583c34178aba4bd0823041a3c6afc9502ce36e20fc1be23d401a98131d921be4333ef6a56716b2ca54bed8eb28f01cd5efd59af68313e43860098bcd5508019f50fefd1b5d8c04425fd8a732a662063249ce626fdc73fef0cf32308983e7d950153de2278f0deac68cd6cefa1fd74a606983b698cf27b9f48ee89ee04745760a93de4f8193848d2c365e48dbb95441a79b8af45f059b87dd9c66b972a2140c7aeb47ab31cd244cc89ee3a478b354ede1da33bc93305203ebd49d5fbd79638572de33bff0130f7516"}, @INET_DIAG_REQ_BYTECODE={0x27, 0x1, "02a7d740b59d7c19e27933407d8660a7da8e2c16c2cac05386150e1c2fb743ecda3445"}, @INET_DIAG_REQ_BYTECODE={0x42, 0x1, "883bb3149ea897089626af526f7ef6bffe0b343b5e9288c85ddd2643e01d06baa1005d99889dbd9f861bd9e1a3daa7176995d3f679175357bf669ee04e23"}, @INET_DIAG_REQ_BYTECODE={0x20, 0x1, "126184a696478f65ce75d1a9a3f1a711ad92379b082a744425a56df2"}, @INET_DIAG_REQ_BYTECODE={0x59, 0x1, "90619a5e8dab5ec05e8ca09aa1cf59f3f72eda9e49d7b53e3cbd9d84e9545ca87585c244adcce3dd16b7a8503ebaf721f5fa8f8f1ea8c35acdb6cf0b1482594b1db24fcca665328acc1675ad0a15de426012a47c5d"}, @INET_DIAG_REQ_BYTECODE={0x2b, 0x1, "ca270f7ea9f650a9b3bf278468382ab92a76087ada698798f83aeb428dfdf11c1ac1cff2e3c8c7"}, @INET_DIAG_REQ_BYTECODE={0xd, 0x1, "98192ab0bcc2431b56"}]}, 0x26c}, 0x1, 0x0, 0x0, 0x40804}, 0x80) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000380), 0x28000) (async)
openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) (async)
ioctl$VHOST_SET_LOG_BASE(r4, 0x4008af04, &(0x7f00000007c0)=&(0x7f0000000780)) (async)
ioctl$BINDER_WRITE_READ(r3, 0x40046205, 0x0) (async)

01:37:19 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (fail_nth: 6)

01:37:19 executing program 2:
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000040))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x800c5012, &(0x7f0000000040)) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x2, 0x0) (async)

01:37:19 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={0x0}}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0)

01:37:19 executing program 1:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$KVM_GET_MSR_INDEX_LIST(0xffffffffffffffff, 0xc004ae02, &(0x7f0000000000)={0x4, [0x0, 0x0, 0x0, 0x0]}) (async)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
ioctl$BINDER_WRITE_READ(r1, 0x40046205, &(0x7f0000000400)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:19 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x3f, 0x6, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x7800, 0x10, 0x101, 0x80000000}})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000000c0)={0x1, 0x0, [{0x10000, 0xab, &(0x7f0000000000)=""/171}]})

01:37:19 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (fail_nth: 7)

01:37:19 executing program 3:
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom1\x00', 0x801, 0x0) (async)
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1}) (async)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, &(0x7f0000000180)) (async)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0) (async)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000080)={0x1}) (async)
ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000200)=0x1) (async)
ioctl$BINDER_WRITE_READ(r3, 0x400c620e, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1587.185517][ T4624] binder: 4619:4624 ioctl 40046205 0 returned -22
01:37:19 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={0x0}}, 0x0) (async)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0)

01:37:20 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x801, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:20 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 64)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (rerun: 64)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2}) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x3f, 0x6, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x7800, 0x10, 0x101, 0x80000000}}) (async, rerun: 64)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000000c0)={0x1, 0x0, [{0x10000, 0xab, &(0x7f0000000000)=""/171}]})

01:37:20 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (fail_nth: 8)

01:37:20 executing program 0:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={0x0}}, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88) (async)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000004c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000480)={0x0}}, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r1, 0x40046208, 0x0) (async)

01:37:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000000)="1dd3dd3c768db9375f73b3c2310c89b20128ccc40d01bf5a0bf09acaf263fc629ab9470d9037a3f28c83fa5a1e9fb5148efcbdce0d24b34bf303edb20a98a302e12372c392d2216271a8d205cb63eb0814ee277ca6024b301a861c378d599b28415da3854ba778a89e17e64681b508ccf3870fcfda226704cdd2a6b22bdf0078efdf4f3bb288f3c07d2dee651ac93787eac514771bb21d607a63d2a176831fce4e71b6f5e42caceb803fa64768418753ad190469b6ab5b19df5af9ede7a3b9885a9ff72af1dea2f539066064ab0ebe37612c801c6368fd8988672432d34305fa389d", 0xe2, <r1=>0x0})
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0xc0, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000004c0)={&(0x7f0000000480)="e602bb1894084f7a94daedf8c0573a99156e048115", 0x15})
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={0x1, &(0x7f0000000240)="a5b4d251b7ba8d96678c2889e4356984ec1d80cb7d17fbc64550ed5b84717d676875afd9e651760861f2350fb92d2b529b5629b715b7c6b16a44fce7011e27fc2da33c346fd89d8c6bdd77afe43f8b91af9f2e89dc63d9b2732e869bc274fad4703a44cd81db2b235e0cc661ad791e3e26fce134aa8f076b6940964a64baadbaa64d", &(0x7f0000000300)=""/126, 0x4}, 0x20)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000200)={r1, 0x4f, &(0x7f0000000180)=""/79})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000003c0))

01:37:20 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x440000)
ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000140)={0x86e, "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"})
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000580))
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={<r3=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={<r4=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r2, 0xc01064c4, &(0x7f00000009c0)={&(0x7f00000000c0)=[0x0, r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], 0x9})

01:37:20 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x801, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:20 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x440000)
ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000140)={0x86e, "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"})
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000580))
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={<r3=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={<r4=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r2, 0xc01064c4, &(0x7f00000009c0)={&(0x7f00000000c0)=[0x0, r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], 0x9})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x440000) (async)
ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000140)={0x86e, "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"}) (async)
openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000580)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r2, 0xc01064c4, &(0x7f00000009c0)={&(0x7f00000000c0)=[0x0, r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], 0x9}) (async)

01:37:20 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (fail_nth: 9)

[ 1587.436406][ T4670] binder: 4669:4670 ioctl 40046205 0 returned -22
01:37:20 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x801, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x801, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)

01:37:20 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000000)={0x0, 0xffffffdf})

[ 1587.520899][ T4680] binder: 4674:4680 ioctl 400c620e 20000400 returned -22
[ 1587.536716][ T4687] binder: 4686:4687 ioctl 40046205 0 returned -22
01:37:20 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
r1 = syz_open_dev$hidraw(&(0x7f0000000000), 0x0, 0x440000)
ioctl$HIDIOCGRDESC(r1, 0x90044802, &(0x7f0000000140)={0x86e, "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"})
r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r2, 0xc00864bf, &(0x7f0000000580)) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000040)={<r3=>0x0, 0x1}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={<r4=>0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_RESET(r2, 0xc01064c4, &(0x7f00000009c0)={&(0x7f00000000c0)=[0x0, r3, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0], 0x9})

01:37:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000000)="1dd3dd3c768db9375f73b3c2310c89b20128ccc40d01bf5a0bf09acaf263fc629ab9470d9037a3f28c83fa5a1e9fb5148efcbdce0d24b34bf303edb20a98a302e12372c392d2216271a8d205cb63eb0814ee277ca6024b301a861c378d599b28415da3854ba778a89e17e64681b508ccf3870fcfda226704cdd2a6b22bdf0078efdf4f3bb288f3c07d2dee651ac93787eac514771bb21d607a63d2a176831fce4e71b6f5e42caceb803fa64768418753ad190469b6ab5b19df5af9ede7a3b9885a9ff72af1dea2f539066064ab0ebe37612c801c6368fd8988672432d34305fa389d", 0xe2, <r1=>0x0})
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0xc0, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000004c0)={&(0x7f0000000480)="e602bb1894084f7a94daedf8c0573a99156e048115", 0x15}) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={0x1, &(0x7f0000000240)="a5b4d251b7ba8d96678c2889e4356984ec1d80cb7d17fbc64550ed5b84717d676875afd9e651760861f2350fb92d2b529b5629b715b7c6b16a44fce7011e27fc2da33c346fd89d8c6bdd77afe43f8b91af9f2e89dc63d9b2732e869bc274fad4703a44cd81db2b235e0cc661ad791e3e26fce134aa8f076b6940964a64baadbaa64d", &(0x7f0000000300)=""/126, 0x4}, 0x20) (async)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000200)={r1, 0x4f, &(0x7f0000000180)=""/79}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000003c0))

01:37:20 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0) (async)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r2, 0x89f4, &(0x7f00000001c0)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x6, 0x3f, 0x6, 0x8, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, 0x7800, 0x10, 0x101, 0x80000000}}) (async)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f00000000c0)={0x1, 0x0, [{0x10000, 0xab, &(0x7f0000000000)=""/171}]})

01:37:20 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (fail_nth: 10)

[ 1587.560389][ T4685] binder_alloc: binder_alloc_mmap_handler: 4684 20fff000-21000000 alloc page array failed -12
01:37:20 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (fail_nth: 11)

01:37:20 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x802, 0x0)
socketpair(0x1, 0x0, 0x0, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:20 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/37)

01:37:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000000)="1dd3dd3c768db9375f73b3c2310c89b20128ccc40d01bf5a0bf09acaf263fc629ab9470d9037a3f28c83fa5a1e9fb5148efcbdce0d24b34bf303edb20a98a302e12372c392d2216271a8d205cb63eb0814ee277ca6024b301a861c378d599b28415da3854ba778a89e17e64681b508ccf3870fcfda226704cdd2a6b22bdf0078efdf4f3bb288f3c07d2dee651ac93787eac514771bb21d607a63d2a176831fce4e71b6f5e42caceb803fa64768418753ad190469b6ab5b19df5af9ede7a3b9885a9ff72af1dea2f539066064ab0ebe37612c801c6368fd8988672432d34305fa389d", 0xe2, <r1=>0x0})
r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0xc0, 0x0)
ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000004c0)={&(0x7f0000000480)="e602bb1894084f7a94daedf8c0573a99156e048115", 0x15})
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={0x1, &(0x7f0000000240)="a5b4d251b7ba8d96678c2889e4356984ec1d80cb7d17fbc64550ed5b84717d676875afd9e651760861f2350fb92d2b529b5629b715b7c6b16a44fce7011e27fc2da33c346fd89d8c6bdd77afe43f8b91af9f2e89dc63d9b2732e869bc274fad4703a44cd81db2b235e0cc661ad791e3e26fce134aa8f076b6940964a64baadbaa64d", &(0x7f0000000300)=""/126, 0x4}, 0x20)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000200)={r1, 0x4f, &(0x7f0000000180)=""/79})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000003c0))
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000000)="1dd3dd3c768db9375f73b3c2310c89b20128ccc40d01bf5a0bf09acaf263fc629ab9470d9037a3f28c83fa5a1e9fb5148efcbdce0d24b34bf303edb20a98a302e12372c392d2216271a8d205cb63eb0814ee277ca6024b301a861c378d599b28415da3854ba778a89e17e64681b508ccf3870fcfda226704cdd2a6b22bdf0078efdf4f3bb288f3c07d2dee651ac93787eac514771bb21d607a63d2a176831fce4e71b6f5e42caceb803fa64768418753ad190469b6ab5b19df5af9ede7a3b9885a9ff72af1dea2f539066064ab0ebe37612c801c6368fd8988672432d34305fa389d", 0xe2}) (async)
openat$audio(0xffffffffffffff9c, &(0x7f0000000440), 0xc0, 0x0) (async)
ioctl$SNDCTL_DSP_SETDUPLEX(r2, 0x5016, 0x0) (async)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f00000004c0)={&(0x7f0000000480)="e602bb1894084f7a94daedf8c0573a99156e048115", 0x15}) (async)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000380)={0x1, &(0x7f0000000240)="a5b4d251b7ba8d96678c2889e4356984ec1d80cb7d17fbc64550ed5b84717d676875afd9e651760861f2350fb92d2b529b5629b715b7c6b16a44fce7011e27fc2da33c346fd89d8c6bdd77afe43f8b91af9f2e89dc63d9b2732e869bc274fad4703a44cd81db2b235e0cc661ad791e3e26fce134aa8f076b6940964a64baadbaa64d", &(0x7f0000000300)=""/126, 0x4}, 0x20) (async)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000200)={r1, 0x4f, &(0x7f0000000180)=""/79}) (async)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f00000003c0)) (async)

[ 1587.671228][ T4702] binder: 4700:4702 ioctl 40046205 0 returned -22
[ 1587.671416][ T4707] binder: 4701:4707 ioctl 400c620e 20000400 returned -22
01:37:20 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000000)={0x0, 0xffffffdf})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) (async)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000000)={0x0, 0xffffffdf}) (async)

01:37:20 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_exec(r1, &(0x7f0000000040)={'stack ', '}\x00'}, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:20 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/37)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/37) (async)

[ 1587.679762][ T4711] binder_alloc: binder_alloc_mmap_handler: 4705 20fff000-21000000 alloc buffer struct failed -12
[ 1587.810563][   T23] ------------[ cut here ]------------
[ 1587.810573][   T23] kernel BUG at drivers/android/binder_alloc.c:820!
[ 1587.810598][   T23] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 1587.814741][   T27] audit: type=1400 audit(1655343440.508:78): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="}" pid=4721 comm="syz-executor.5"
[ 1587.816096][   T23] CPU: 1 PID: 23 Comm: kworker/1:0 Not tainted 5.19.0-rc2-next-20220615-syzkaller #0
01:37:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x9)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:20 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_exec(r1, &(0x7f0000000040)={'stack ', '}\x00'}, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
write$apparmor_exec(r1, &(0x7f0000000040)={'stack ', '}\x00'}, 0x8) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)

[ 1587.816121][   T23] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1587.816134][   T23] Workqueue: events binder_deferred_func
[ 1587.823302][ T4725] binder: 4721:4725 ioctl 40046205 0 returned -22
[ 1587.828792][   T23] 
[ 1587.828802][   T23] RIP: 0010:binder_alloc_deferred_release+0x602/0x780
[ 1587.828835][   T23] Code: c6 80 16 c7 8a 48 c7 c7 80 b6 48 8d e8 57 86 05 fd 31 ff 89 c5 89 c6 e8 fc ba 5b fa 85 ed 74 c6 e9 78 57 55 02 e8 9e be 5b fa <0f> 0b c7 44 24 20 00 00 00 00 e9 27 ff ff ff e8 8a be 5b fa 48 89
[ 1587.853114][ T4729] binder: 4728:4729 ioctl 400c620e 20000400 returned -22
[ 1587.856134][   T23] RSP: 0018:ffffc900001d7bc8 EFLAGS: 00010293
[ 1587.856156][   T23] RAX: 0000000000000000 RBX: ffff88801f3d49e0 RCX: 0000000000000000
[ 1587.856170][   T23] RDX: ffff888011a857c0 RSI: ffffffff871f04b2 RDI: ffff88801f3d4a70
[ 1587.927440][ T4748] binder: 4746:4748 ioctl 400c620e 20000400 returned -22
[ 1587.929740][   T23] RBP: ffff88801f3d4800 R08: 0000000000000000 R09: ffffffff8dbcac17
[ 1587.929759][   T23] R10: fffffbfff1b79582 R11: 0000000000000001 R12: ffff88801b789c60
01:37:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x9)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:20 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_exec(r1, &(0x7f0000000040)={'stack ', '}\x00'}, 0x8)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

[ 1587.929774][   T23] R13: ffff88801f3d4ad8 R14: ffff88801b789d10 R15: dffffc0000000000
[ 1587.929790][   T23] FS:  0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 1587.942730][   T27] audit: type=1400 audit(1655343440.638:79): apparmor="DENIED" operation="stack_onexec" info="label not found" error=-2 profile="unconfined" name="}" pid=4747 comm="syz-executor.5"
[ 1587.944764][   T23] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1587.944783][   T23] CR2: 0000001b2d922000 CR3: 00000000215b5000 CR4: 00000000003506e0
[ 1587.944797][   T23] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1587.954209][ T4749] binder: 4747:4749 ioctl 40046205 0 returned -22
[ 1587.961341][   T23] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1587.961359][   T23] Call Trace:
[ 1587.961366][   T23]  <TASK>
[ 1587.961378][   T23]  binder_proc_dec_tmpref+0x2aa/0x530
[ 1587.961404][   T23]  binder_deferred_func+0xe2a/0x1150
[ 1587.961430][   T23]  process_one_work+0x996/0x1610
[ 1588.055318][   T23]  ? pwq_dec_nr_in_flight+0x2a0/0x2a0
01:37:20 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000000)={0x0, 0xffffffdf})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/custom0\x00', 0x0, 0x0) (async)
ioctl$VHOST_SET_VRING_BUSYLOOP_TIMEOUT(0xffffffffffffffff, 0x4008af23, &(0x7f0000000000)={0x0, 0xffffffdf}) (async)

[ 1588.060701][   T23]  ? rwlock_bug.part.0+0x90/0x90
[ 1588.065635][   T23]  ? _raw_spin_lock_irq+0x41/0x50
[ 1588.070687][   T23]  worker_thread+0x665/0x1080
[ 1588.075363][   T23]  ? process_one_work+0x1610/0x1610
[ 1588.080750][   T23]  kthread+0x2e9/0x3a0
[ 1588.085452][   T23]  ? kthread_complete_and_exit+0x40/0x40
[ 1588.091459][   T23]  ret_from_fork+0x1f/0x30
[ 1588.099903][   T23]  </TASK>
[ 1588.102919][   T23] Modules linked in:
01:37:20 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (fail_nth: 12)

01:37:20 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x802, 0x0)
socketpair(0x1, 0x0, 0x0, &(0x7f0000000100))
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:20 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r1, 0xc008ae05, &(0x7f0000000040)=""/37)

01:37:20 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x800, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc858}, 0x20000084)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x1)
write$hidraw(r2, &(0x7f0000000140)="8774f3108193fec3ee887069b3ba50891b68623c0717154ba481864ea69f7c18a3e991ebdb3f3674884778bfb8ce6b999ad72c978274a76dc3b78b6a8becb213", 0x40)
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000280)="f3a5f0a2f27b8be6de10ad1cb1da4cee93c76908d46792ca73f12980eb1bd1fea7426631be34a84a7d3d0d6420317bcfdcc09a61ed41038433d6d6ee03cfc3c6cff98b77b3462fb30495e53f420191c1e4fd7f65cd6eb22947133e785c4300792a593b46c9b1061492598f32b07e080000000000000057899d16e952acd06893b3a8ab7f327ecb9727543eff49bd1767bf3f8311cc13cf2e218d2eab4fa18ee62b56776ad30d4c23a297475e1c2d0adf1f5279bda5673f3da48e4ae6834c8953bf8e772cd611a0e16203dd50d25a926bbc161e9c696659fbb86446e3a9b8b811d66bf9da7720780ceb8fa41000"/253, 0xfd)

01:37:20 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000000)=0x7ff)

01:37:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x9)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:20 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder1\x00', 0x802, 0x0)
socketpair(0x1, 0x0, 0x0, &(0x7f0000000100)) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:20 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x34, r5, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, r2, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x3, 0x8, 0x4, @private0, @private0, 0x8000, 0x7800, 0x0, 0x1}})
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x280, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0xe4, 0x0, &(0x7f00000004c0)=[@increfs_done={0x40106308, 0x2}, @increfs_done, @request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/42, 0x2a, 0x0, 0x40}, @fd={0x66642a85, 0x0, r9}, @flat=@binder={0x73622a85, 0x0, 0x2}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}, 0x400}, @acquire={0x40046305, 0x1}, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/119, 0x77, 0x0, 0x28}, @flat=@handle={0x73682a85, 0xb, 0x2}, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f00000003c0)={0x0, 0x28, 0x40}}, 0x40}, @increfs={0x40046304, 0x2}], 0x52, 0x0, &(0x7f00000005c0)="a86d985fc71ac2812111dd889ddb641f81752d99fdaffcc1fd3553bfb88d72f7afeb5e66e789e885100599127ea2d59a06bd0165098660da1a1807d656963e9cb873a1ef505ff9fad20c33547927fc140dbe"})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1588.139834][ T4755] binder: 4754:4755 ioctl 40046205 0 returned -22
[ 1588.140390][ T4759] binder: 4753:4759 ioctl 400c620e 20000400 returned -22
01:37:20 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000000)=0x7ff)

01:37:20 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x800, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc858}, 0x20000084) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x1)
write$hidraw(r2, &(0x7f0000000140)="8774f3108193fec3ee887069b3ba50891b68623c0717154ba481864ea69f7c18a3e991ebdb3f3674884778bfb8ce6b999ad72c978274a76dc3b78b6a8becb213", 0x40) (async)
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000280)="f3a5f0a2f27b8be6de10ad1cb1da4cee93c76908d46792ca73f12980eb1bd1fea7426631be34a84a7d3d0d6420317bcfdcc09a61ed41038433d6d6ee03cfc3c6cff98b77b3462fb30495e53f420191c1e4fd7f65cd6eb22947133e785c4300792a593b46c9b1061492598f32b07e080000000000000057899d16e952acd06893b3a8ab7f327ecb9727543eff49bd1767bf3f8311cc13cf2e218d2eab4fa18ee62b56776ad30d4c23a297475e1c2d0adf1f5279bda5673f3da48e4ae6834c8953bf8e772cd611a0e16203dd50d25a926bbc161e9c696659fbb86446e3a9b8b811d66bf9da7720780ceb8fa41000"/253, 0xfd)

01:37:20 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) (fail_nth: 13)

01:37:20 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async, rerun: 64)
ioctl$RNDZAPENTCNT(0xffffffffffffffff, 0x5204, &(0x7f0000000000)=0x7ff) (rerun: 64)

01:37:20 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x218, 0x12, 0x100, 0x70bd2b, 0x25dfdbfb, {0x6, 0x5, 0x9, 0x7f, {0x4e20, 0x4e22, [0x10000, 0x8, 0x9, 0xfffffffb], [0x101, 0x0, 0x3], r1, [0x2, 0xb90b]}, 0x1, 0x6d}, [@INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "472a4743bf1da5ad67e42a85cc06aed9b95600035dac3f310b6eee8e335e19d4a6c2916a39289cbd3810970c6c6ccb06759f82fb60a9ba39185ff913dbdcbc57e718a097969c0a870c1c171f54b741f2c592fdecc5f56e7d71f4935de85e848671cd9c82823696368ad2de482f6e530ef15651ebad6cb3f9740f57bba233b0c95f6e5f71d6dd7e16c2a273b28b6e261547edc726d184d0faa5f5a054c41f9aeb"}, @INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "fbeb166983c6c08c18c73c9af12ef2f31c3ddd6e23f3c08f2bcc5dfc1f7aa1f51e2d520b747d41220dae9fecb4529398b8d1c649e31443d0fd996b52c729cb00a3910cbea290338fb696a8e3bdd4597696c6d05b9791b89a02d5cf73ceac63edbff6af02098ac302988b43835eb71b5daa118bdf940fc458985e79e8e0dd67375fb25f9209b0022e33890feb8f1246644cfbc9fe7145868babf10356d32d8a68142379afaa5dce899762a5cfb91f872f75f2f5c3dbfa1ae27d940516e51288f41fb9f93c961f555b949d46d73a6133375ab8a71a9849c905c96c75"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "b54f02a08cff517cb183b084467492f6121e111c088c7866e66c8187dd95d606e53ec72a77e68b1239993ea89f6eaf7a08b5e77e3ffc6e030b4587d1dac11e1abadea4"}]}, 0x218}}, 0x1)

[ 1588.219485][ T4777] binder: 4773:4777 ioctl 400c620e 20000400 returned -22
01:37:20 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x802, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)={0x5, 0x0, 0xcb, 0x3f, 0x4, 0xa9}, 0xc)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:21 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:21 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x218, 0x12, 0x100, 0x70bd2b, 0x25dfdbfb, {0x6, 0x5, 0x9, 0x7f, {0x4e20, 0x4e22, [0x10000, 0x8, 0x9, 0xfffffffb], [0x101, 0x0, 0x3], r1, [0x2, 0xb90b]}, 0x1, 0x6d}, [@INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "472a4743bf1da5ad67e42a85cc06aed9b95600035dac3f310b6eee8e335e19d4a6c2916a39289cbd3810970c6c6ccb06759f82fb60a9ba39185ff913dbdcbc57e718a097969c0a870c1c171f54b741f2c592fdecc5f56e7d71f4935de85e848671cd9c82823696368ad2de482f6e530ef15651ebad6cb3f9740f57bba233b0c95f6e5f71d6dd7e16c2a273b28b6e261547edc726d184d0faa5f5a054c41f9aeb"}, @INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "fbeb166983c6c08c18c73c9af12ef2f31c3ddd6e23f3c08f2bcc5dfc1f7aa1f51e2d520b747d41220dae9fecb4529398b8d1c649e31443d0fd996b52c729cb00a3910cbea290338fb696a8e3bdd4597696c6d05b9791b89a02d5cf73ceac63edbff6af02098ac302988b43835eb71b5daa118bdf940fc458985e79e8e0dd67375fb25f9209b0022e33890feb8f1246644cfbc9fe7145868babf10356d32d8a68142379afaa5dce899762a5cfb91f872f75f2f5c3dbfa1ae27d940516e51288f41fb9f93c961f555b949d46d73a6133375ab8a71a9849c905c96c75"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "b54f02a08cff517cb183b084467492f6121e111c088c7866e66c8187dd95d606e53ec72a77e68b1239993ea89f6eaf7a08b5e77e3ffc6e030b4587d1dac11e1abadea4"}]}, 0x218}}, 0x1)

01:37:21 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0)

01:37:21 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/custom0\x00', 0x800, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@L2TP_ATTR_OFFSET={0x6}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x4}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc858}, 0x20000084) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async, rerun: 32)
r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x0, 0x1) (rerun: 32)
write$hidraw(r2, &(0x7f0000000140)="8774f3108193fec3ee887069b3ba50891b68623c0717154ba481864ea69f7c18a3e991ebdb3f3674884778bfb8ce6b999ad72c978274a76dc3b78b6a8becb213", 0x40) (async)
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000280)="f3a5f0a2f27b8be6de10ad1cb1da4cee93c76908d46792ca73f12980eb1bd1fea7426631be34a84a7d3d0d6420317bcfdcc09a61ed41038433d6d6ee03cfc3c6cff98b77b3462fb30495e53f420191c1e4fd7f65cd6eb22947133e785c4300792a593b46c9b1061492598f32b07e080000000000000057899d16e952acd06893b3a8ab7f327ecb9727543eff49bd1767bf3f8311cc13cf2e218d2eab4fa18ee62b56776ad30d4c23a297475e1c2d0adf1f5279bda5673f3da48e4ae6834c8953bf8e772cd611a0e16203dd50d25a926bbc161e9c696659fbb86446e3a9b8b811d66bf9da7720780ceb8fa41000"/253, 0xfd)

01:37:21 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x802, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)={0x5, 0x0, 0xcb, 0x3f, 0x4, 0xa9}, 0xc) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1588.301195][ T4795] FAULT_INJECTION: forcing a failure.
[ 1588.301195][ T4795] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1588.301228][ T4795] CPU: 0 PID: 4795 Comm: syz-executor.4 Tainted: G      D           5.19.0-rc2-next-20220615-syzkaller #0
01:37:21 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r4=>0x0}) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x34, r5, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, r2, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x3, 0x8, 0x4, @private0, @private0, 0x8000, 0x7800, 0x0, 0x1}})
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x280, 0x0) (async)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0) (async)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0xe4, 0x0, &(0x7f00000004c0)=[@increfs_done={0x40106308, 0x2}, @increfs_done, @request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/42, 0x2a, 0x0, 0x40}, @fd={0x66642a85, 0x0, r9}, @flat=@binder={0x73622a85, 0x0, 0x2}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}, 0x400}, @acquire={0x40046305, 0x1}, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/119, 0x77, 0x0, 0x28}, @flat=@handle={0x73682a85, 0xb, 0x2}, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f00000003c0)={0x0, 0x28, 0x40}}, 0x40}, @increfs={0x40046304, 0x2}], 0x52, 0x0, &(0x7f00000005c0)="a86d985fc71ac2812111dd889ddb641f81752d99fdaffcc1fd3553bfb88d72f7afeb5e66e789e885100599127ea2d59a06bd0165098660da1a1807d656963e9cb873a1ef505ff9fad20c33547927fc140dbe"})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:21 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0) (async)

01:37:21 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="c9e2bc3665f910305c10701a130877995f8e103138f265f3d41564fed8f166bba79dd295bd6e8c033367a4d6f7bd040352de65f39002717e13e313936ddd7927d7503131d609bc95d747905ace867b3da91d6057efc9656c1f976cc4201b4dde830f251ba1ff5a922f21287e479966ea1df570687d43", 0x76)

01:37:21 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x2, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)

01:37:21 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x300, 0x1, 0x11, r0, 0x0)

01:37:21 executing program 2:
socket$inet_udplite(0x2, 0x2, 0x88) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x802, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000080)={0x5, 0x0, 0xcb, 0x3f, 0x4, 0xa9}, 0xc) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:21 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', <r1=>0x0})
sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x218, 0x12, 0x100, 0x70bd2b, 0x25dfdbfb, {0x6, 0x5, 0x9, 0x7f, {0x4e20, 0x4e22, [0x10000, 0x8, 0x9, 0xfffffffb], [0x101, 0x0, 0x3], r1, [0x2, 0xb90b]}, 0x1, 0x6d}, [@INET_DIAG_REQ_BYTECODE={0xa4, 0x1, "472a4743bf1da5ad67e42a85cc06aed9b95600035dac3f310b6eee8e335e19d4a6c2916a39289cbd3810970c6c6ccb06759f82fb60a9ba39185ff913dbdcbc57e718a097969c0a870c1c171f54b741f2c592fdecc5f56e7d71f4935de85e848671cd9c82823696368ad2de482f6e530ef15651ebad6cb3f9740f57bba233b0c95f6e5f71d6dd7e16c2a273b28b6e261547edc726d184d0faa5f5a054c41f9aeb"}, @INET_DIAG_REQ_BYTECODE={0xdf, 0x1, "fbeb166983c6c08c18c73c9af12ef2f31c3ddd6e23f3c08f2bcc5dfc1f7aa1f51e2d520b747d41220dae9fecb4529398b8d1c649e31443d0fd996b52c729cb00a3910cbea290338fb696a8e3bdd4597696c6d05b9791b89a02d5cf73ceac63edbff6af02098ac302988b43835eb71b5daa118bdf940fc458985e79e8e0dd67375fb25f9209b0022e33890feb8f1246644cfbc9fe7145868babf10356d32d8a68142379afaa5dce899762a5cfb91f872f75f2f5c3dbfa1ae27d940516e51288f41fb9f93c961f555b949d46d73a6133375ab8a71a9849c905c96c75"}, @INET_DIAG_REQ_BYTECODE={0x47, 0x1, "b54f02a08cff517cb183b084467492f6121e111c088c7866e66c8187dd95d606e53ec72a77e68b1239993ea89f6eaf7a08b5e77e3ffc6e030b4587d1dac11e1abadea4"}]}, 0x218}}, 0x1)

[ 1588.301254][ T4795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
01:37:21 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)
write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="c9e2bc3665f910305c10701a130877995f8e103138f265f3d41564fed8f166bba79dd295bd6e8c033367a4d6f7bd040352de65f39002717e13e313936ddd7927d7503131d609bc95d747905ace867b3da91d6057efc9656c1f976cc4201b4dde830f251ba1ff5a922f21287e479966ea1df570687d43", 0x76)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="c9e2bc3665f910305c10701a130877995f8e103138f265f3d41564fed8f166bba79dd295bd6e8c033367a4d6f7bd040352de65f39002717e13e313936ddd7927d7503131d609bc95d747905ace867b3da91d6057efc9656c1f976cc4201b4dde830f251ba1ff5a922f21287e479966ea1df570687d43", 0x76) (async)

[ 1588.301268][ T4795] Call Trace:
[ 1588.301275][ T4795]  <TASK>
01:37:21 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0xe3, 0x0, &(0x7f0000000140)="46612d0a1f0905c3c7f72ada31b8a5a890d54789d996c31d8ef3e6aa2c64faa952e7d583ae2655969b2b7337e11ac6dc395f3ed68a68e2e7d33e625c4d8b353973fd0eab44e5f355a9e688df00d3271d9b47ab172bad4c19184dd73d3dc587eaa8e03c4eee88790de8c60de251a864ce2fc3591db4a295eba8d3b887d0ae726059d4f28687920c8b4e4f9c2369eb277acb90c7bb7e32589a89233d123fa7b38ae8202bb729f6445404c32209d289802e077603be09c09c2fceccc3455025751f451f78b4079ec0f95aa2f500048ce540d83e7075d8c3b8b7e4a5d824fa5a07545bff74"})
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:21 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0xf00, 0x1, 0x11, r0, 0x0)

01:37:21 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00'})
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:21 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0) (async)
write$hidraw(0xffffffffffffffff, &(0x7f0000000000)="c9e2bc3665f910305c10701a130877995f8e103138f265f3d41564fed8f166bba79dd295bd6e8c033367a4d6f7bd040352de65f39002717e13e313936ddd7927d7503131d609bc95d747905ace867b3da91d6057efc9656c1f976cc4201b4dde830f251ba1ff5a922f21287e479966ea1df570687d43", 0x76)

[ 1588.301284][ T4795]  dump_stack_lvl+0xcd/0x134
[ 1588.301321][ T4795]  should_fail.cold+0x5/0xa
01:37:21 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/binder1\x00', 0x2, 0x0)
mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0x40046208, 0x0)
r1 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000580))
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000240)={<r2=>0x0})
ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(r1, 0xc01064c5, &(0x7f00000002c0)={&(0x7f0000000280)=[r2, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6})
r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r3, 0xaf01, 0x0)
read$usbfs(0xffffffffffffffff, &(0x7f0000000200)=""/58, 0x3a)
r4 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x450a02)
ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000080)={0x3, r4})
r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x57d500, 0x0)
r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r6, 0xaf01, 0x0)
read$usbfs(r5, &(0x7f0000000180)=""/75, 0x4b)
r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$VHOST_SET_VRING_ERR(r6, 0x4008af22, &(0x7f0000000140)={0x0, r7})
ioctl$VHOST_SET_VRING_ERR(r7, 0x4008af22, &(0x7f0000000140)={0x0, r7})
mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000000, 0x2010, r5, 0x80)

01:37:21 executing program 1:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0) (async)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 32)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r4=>0x0}) (async)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000040)={'vxcan0\x00', <r7=>0x0})
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x34, r5, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x34, r2, 0x501, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async, rerun: 64)
ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', r4, 0x4, 0x7, 0x3, 0x8, 0x4, @private0, @private0, 0x8000, 0x7800, 0x0, 0x1}}) (async, rerun: 64)
r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x280, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000042c0), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r9, 0xae03, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000640)={0xe4, 0x0, &(0x7f00000004c0)=[@increfs_done={0x40106308, 0x2}, @increfs_done, @request_death={0x400c630e, 0x3}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000280)={@ptr={0x70742a85, 0x1, &(0x7f0000000200)=""/42, 0x2a, 0x0, 0x40}, @fd={0x66642a85, 0x0, r9}, @flat=@binder={0x73622a85, 0x0, 0x2}}, &(0x7f0000000300)={0x0, 0x28, 0x40}}, 0x400}, @acquire={0x40046305, 0x1}, @enter_looper, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, &(0x7f0000000340)=""/119, 0x77, 0x0, 0x28}, @flat=@handle={0x73682a85, 0xb, 0x2}, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f00000003c0)={0x0, 0x28, 0x40}}, 0x40}, @increfs={0x40046304, 0x2}], 0x52, 0x0, &(0x7f00000005c0)="a86d985fc71ac2812111dd889ddb641f81752d99fdaffcc1fd3553bfb88d72f7afeb5e66e789e885100599127ea2d59a06bd0165098660da1a1807d656963e9cb873a1ef505ff9fad20c33547927fc140dbe"})
ioctl$BINDER_WRITE_READ(r0, 0x40046205, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:21 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00'}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

01:37:21 executing program 2:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0xc, 0x0, &(0x7f0000000000)=[@free_buffer], 0xe3, 0x0, &(0x7f0000000140)="46612d0a1f0905c3c7f72ada31b8a5a890d54789d996c31d8ef3e6aa2c64faa952e7d583ae2655969b2b7337e11ac6dc395f3ed68a68e2e7d33e625c4d8b353973fd0eab44e5f355a9e688df00d3271d9b47ab172bad4c19184dd73d3dc587eaa8e03c4eee88790de8c60de251a864ce2fc3591db4a295eba8d3b887d0ae726059d4f28687920c8b4e4f9c2369eb277acb90c7bb7e32589a89233d123fa7b38ae8202bb729f6445404c32209d289802e077603be09c09c2fceccc3455025751f451f78b4079ec0f95aa2f500048ce540d83e7075d8c3b8b7e4a5d824fa5a07545bff74"}) (async)
ioctl$BINDER_WRITE_READ(r0, 0x40046210, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1588.301347][ T4795]  _copy_to_user+0x2a/0x140
01:37:21 executing program 5:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r1, 0xaf01, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x200000, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000080)=[@exit_looper, @clear_death={0x400c630f, 0x1}, @request_death={0x400c630e, 0x2}], 0x8a, 0x0, &(0x7f0000000140)="f752fc414dacbeaabd9e712571fd0fe3cd0b57a9f50c9f4673c9a1c03265db01fe1f0db6139b58174a43b032fe4ff621e75057431b136918c94a97fab7dda3ca0d845e81807f286e04e40b6dd5fe7af8b793897216071dad1b899d84e8bb625b1b662ddc1378e93a678a9973da0e0828e7be4cdd1b94bb6e5e42dfbfaf874c851ab9131332a5fa991535"})
ioctl$RNDGETENTCNT(r2, 0x80045200, &(0x7f0000000000))
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040), 0x400881, 0x0)
mmap$usbfs(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000008, 0x4010, r3, 0xfe52)
socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0x40046205, 0x0)

01:37:21 executing program 4:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1002, 0x1, 0x11, r0, 0x0)

01:37:21 executing program 3:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = socket$l2tp6(0xa, 0x2, 0x73)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg2\x00'})
ioctl$BINDER_WRITE_READ(r0, 0x400c620e, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[ 1588.301381][ T4795]  simple_read_from_buffer+0xcc/0x160
[ 1588.301407][ T4795]  proc_fail_nth_read+0x187/0x220
[ 1588.301443][ T4795]  ? proc_exe_link+0x1d0/0x1d0
[ 1588.301469][ T4795]  ? security_file_permission+0xab/0xd0
[ 1588.301497][ T4795]  ? proc_exe_link+0x1d0/0x1d0
[ 1588.301520][ T4795]  vfs_read+0x1ef/0x5d0
[ 1588.301543][ T4795]  ksys_read+0x127/0x250
[ 1588.301562][ T4795]  ? vfs_write+0xac0/0xac0
[ 1588.301581][ T4795]  ? trace_hardirqs_on+0x2d/0x120
[ 1588.301615][ T4795]  do_syscall_64+0x35/0xb0
[ 1588.301637][ T4795]  entry_SYSCALL_64_after_hwframe+0x46/0xb0
[ 1588.301667][ T4795] RIP: 0033:0x7f2ac083bcbc
[ 1588.301667][ T4795] RIP: 0033:0x7f2ac083bcbc
[ 1588.301686][ T4795] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[ 1588.301709][ T4795] RSP: 002b:00007f2ac19f9160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 1588.301733][ T4795] RAX: ffffffffffffffda RBX: 00007f2ac099bf60 RCX: 00007f2ac083bcbc
[ 1588.301750][ T4795] RDX: 000000000000000f RSI: 00007f2ac19f91e0 RDI: 0000000000000004
[ 1588.301763][ T4795] RBP: 00007f2ac19f91d0 R08: 0000000000000000 R09: 0000000000000000
[ 1588.301777][ T4795] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000002
[ 1588.301790][ T4795] R13: 00007fff94b9e8df R14: 00007f2ac19f9300 R15: 0000000000022000
[ 1588.301813][ T4795]  </TASK>
[ 1588.332014][ T4800] binder: 4796:4800 ioctl 400c620e 20000400 returned -22
[ 1588.413256][ T4812] binder: 4802:4812 ioctl 400c620e 20000400 returned -22
[ 1588.435543][ T4819] binder: 4817:4819 ioctl 40046205 0 returned -22
[ 1588.504686][ T4826] binder: 4825:4826 ioctl 400c620e 20000400 returned -22
[ 1588.509722][ T4836] binder: 4828:4836 ioctl 40046205 0 returned -22
[ 1588.523288][ T4838] binder: 4828:4838 ioctl 40046205 0 returned -22
[ 1588.561169][ T4842] binder: 4840:4842 ioctl 400c620e 20000400 returned -22
[ 1588.581460][ T4847] binder: 4843:4847 ioctl 40046205 0 returned -22
[ 1588.626994][ T4857] binder: 4854:4857 ioctl 400c620e 20000400 returned -22
[ 1588.749516][   T23] ---[ end trace 0000000000000000 ]---
[ 1588.749531][   T23] RIP: 0010:binder_alloc_deferred_release+0x602/0x780
[ 1588.758808][   T23] Code: c6 80 16 c7 8a 48 c7 c7 80 b6 48 8d e8 57 86 05 fd 31 ff 89 c5 89 c6 e8 fc ba 5b fa 85 ed 74 c6 e9 78 57 55 02 e8 9e be 5b fa <0f> 0b c7 44 24 20 00 00 00 00 e9 27 ff ff ff e8 8a be 5b fa 48 89
[ 1588.758834][   T23] RSP: 0018:ffffc900001d7bc8 EFLAGS: 00010293
[ 1588.758853][   T23] RAX: 0000000000000000 RBX: ffff88801f3d49e0 RCX: 0000000000000000
[ 1588.758867][   T23] RDX: ffff888011a857c0 RSI: ffffffff871f04b2 RDI: ffff88801f3d4a70
[ 1588.758882][   T23] RBP: ffff88801f3d4800 R08: 0000000000000000 R09: ffffffff8dbcac17
[ 1588.758896][   T23] R10: fffffbfff1b79582 R11: 0000000000000001 R12: ffff88801b789c60
[ 1588.758910][   T23] R13: ffff88801f3d4ad8 R14: ffff88801b789d10 R15: dffffc0000000000
[ 1588.758925][   T23] FS:  0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[ 1588.759778][   T23] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1588.759795][   T23] CR2: 00007f0522bdd718 CR3: 0000000061373000 CR4: 00000000003506e0
[ 1588.759810][   T23] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 1588.759823][   T23] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 1588.759838][   T23] Kernel panic - not syncing: Fatal exception
[ 1588.763423][   T23] Kernel Offset: disabled